Privacy Policy
Last updated October 29, 2026
1. Who we are
Quince MCP is operated by Secret Blueprints LLC, a Wyoming limited liability company, 30 N Gould St, Ste R, Sheridan, WY 82801, USA ("we", "us"). This policy explains what data we collect when you use quincemcp.com and the Quince MCP server (the "Service"), how we use, store, protect and share it, and how it's deleted. Questions go to support@quincemcp.com.
For your account data we act as the controller. For the Amazon data you connect, we process it on your behalf and only to provide the Service to you.
2. What we collect
2.1 Account data
Your name and email address, your sign-in records, your settings and permissions, and billing records if you're on a paid plan.
2.2 Amazon data you connect
When you authorize Quince MCP on Amazon's consent pages, Amazon gives us access tokens for the permissions you approved. We never ask for, see or store your Amazon password. With those tokens we read:
- Amazon Ads: campaigns, ad groups, keywords, targets, negatives, bids, budgets, and performance reports including search terms and placements.
- Seller Central: sales and traffic by ASIN, Brand Analytics reports where you have access, FBA inventory, listing status, your own prices and Buy Box status, fees and settlements.
We don't request the Amazon roles that include buyer personal information. We don't access buyer names, shipping addresses, email addresses or phone numbers. If a future feature ever needed that, we'd apply for the specific role, update this policy and ask for your consent first.
2.3 Data you add
Cost of goods per SKU and the notes and reasons attached to changes you approve.
2.4 Usage data
Which tools were called and when, error logs, and the log of every change made to your Amazon accounts.
3. How we use it
- To answer the requests your AI app sends to the Service, using your own account's data.
- To keep a copy of your Amazon data so history, profit calculations and change results work.
- To apply changes you approved, read them back from Amazon and keep the change log.
- To run, secure and support the Service, and to contact you about your account.
We don't sell your data. We don't use your Amazon data for advertising, and we don't use it to train AI models. We don't combine data across customers or share one customer's data with another.
4. Your AI app
Quince MCP doesn't run an AI model of its own. The AI app you connect (for example Claude or ChatGPT) receives the results of the requests it makes to the Service, which can include your Amazon data, and that app's provider handles it under its own terms and privacy policy. You choose which app to connect and can disconnect it at any time. Answers written by an AI app can be wrong; see how we handle AI.
5. How we store and protect it
- All traffic uses HTTPS with TLS 1.2 or higher.
- Amazon tokens are encrypted with AES-256 before they're stored, with a key kept outside the database, and are only used by our servers. They never appear in tool results or in your AI app.
- Amazon data is tagged with the account it came from and kept apart from every other customer's data.
- Access on our side is limited to the people who run the Service, uses multi-factor authentication and is reviewed every quarter.
More detail is on our Security page.
6. Who we share it with
We share data only with the service providers below, only to run the Service, and under contracts that require them to protect it:
| Provider | What it does for us | Data it handles | Location |
|---|---|---|---|
| Vercel Inc. | Hosts the website, the MCP server and the approval pages | Requests in transit, account data, Amazon data while a request is served | United States |
| Neon Inc. (on Amazon Web Services) | Database | Account data, encrypted Amazon tokens, synced Amazon data, the change log | United States |
| Amazon (Selling Partner API, Amazon Ads API) | The source of your Amazon data and where approved changes are sent | API requests and tokens in transit | United States and the marketplace region |
We'll update this list before adding a provider that handles Amazon data. We may also disclose data if the law requires it, and we report suspected misuse of Amazon's services to Amazon as its policies require.
7. How long we keep it and how it's deleted
| Data | Kept for |
|---|---|
| Amazon data, while connected | Only as long as needed to provide the Service, at most a rolling 24 months |
| Amazon data after you disconnect, close your account or Amazon asks us to delete it | Permanently deleted, including every live copy, within 30 days |
| Amazon access tokens | Revoked and deleted as soon as you disconnect |
| Account data | While your account is open, then deleted within 30 days |
| Billing records | As long as tax law requires |
| Security logs | 12 months |
You can disconnect Amazon in your Quince MCP account, or remove the app in Seller Central under Apps and Services, Manage Your Apps. To delete your account, email us from your account address.
8. Your rights
You can ask to see, correct, export or delete your personal data, or ask us to stop processing it. Email support@quincemcp.com with "Privacy request" in the subject and we'll answer within 30 days.
People in the EU, EEA and UK
We process account data to perform our contract with you, and security and usage data under our legitimate interest in running a safe service. Data is processed in the United States; where needed we rely on Standard Contractual Clauses. You can also complain to your local data protection authority.
California residents
We don't sell or share personal information as the CCPA defines those terms, and we don't treat you differently for using your rights.
9. Cookies
We use only the cookies needed to keep you signed in. We don't use advertising cookies or tracking pixels.
10. Children
The Service is for businesses. We don't knowingly collect data from anyone under 18.
11. Security incidents
If we detect a security incident involving your data, we notify you without undue delay, and we notify Amazon within 24 hours when Amazon data is involved.
12. Changes
If we change this policy in a way that matters, we'll email you before the change takes effect and update the date above.
13. Contact
Secret Blueprints LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. support@quincemcp.com