MCP privacy boundary

This information site

Railway, Cloudflare, and their security infrastructure may process ordinary request information such as an IP address, user agent, requested path, and timestamp to deliver and protect this site.

These pages contain no signup form, advertising tracker, marketing cookie, analytics SDK, remote font, or third-party script.

The planned private connector

When enabled for an approved pilot, the resource server will process a bearer credential, verified issuer, subject, client and scopes, a server-owned Person and Workspace link, the requested tool and bounded record identifiers, and the safe governed result returned to the authorized client.

Bearer credentials, raw sensor streams, private object coordinates, unrestricted source contents, and unrestricted Case data must not enter application audit logs. Raw uploads and sensor acquisition remain in the Dowelify app or a governed device adapter.

Retention and deletion

Dowelify records remain subject to the controlled-pilot operational retention and administrative deletion process. A wider-release retention and deletion policy has not yet replaced those pilot rules. This page does not promise instant erasure from protected backups.