# PerfectVector MCP Privacy Notice

How PerfectVector handles data when you use it through AI assistants.

> **Effective document: Version 1.0**
>
> Effective date: 2026-10-18.

## 1. How this notice applies

This notice supplements the PerfectVector [Privacy Policy](/privacy) for data we
receive through the PerfectVector connector for AI assistants (the "Connector"),
and controls for that data if the two conflict. In particular, the Privacy
Policy's provisions on debugging, quality reviews and research (§3.3) and on
keeping files for quality reviews (§7, "Uploaded images and generated SVGs") do
not apply to images and results we receive through the Connector; this notice's
sections on use and retention apply instead. Everything else in the Privacy
Policy applies.
It explains what we receive when you use the Connector, why, who receives it,
where we keep it, for how long, and what you can control. Rastrix Inc. is
responsible for this processing. Your account, international transfers, your
rights, children's privacy and changes to this notice follow the Privacy Policy.

## 2. Who does what

- **We** process the data below to provide the Connector to you.
- **Your assistant provider** (for example OpenAI for ChatGPT, or Anthropic for
  Claude) is a separate company. It handles your conversations and files under
  its own privacy policy. It is not our service provider, and we are not its
  service provider.

## 3. What we receive

| Data | Details |
|---|---|
| Sign-in | The same Google sign-in as the website: your email address, your Google account ID, and your name and profile picture. We ask Google only for basic profile and email access. Connecting through an assistant does not sign you in to the website. |
| Connection | Which assistant app connected, the permissions you granted (convert images, read your conversions and results, read your balance), and when the connection started, expires or ended. We store the authorization codes and tokens we issue to your assistant only as one-way hashes. |
| Images you choose | The image your assistant sends, or that you pick in the PerfectVector card, with its size, pixel dimensions, a SHA-256 fingerprint, a fingerprint of the assistant's reference to the file, and the image's file name (the one your assistant supplies, or the name of the file you pick in the card). We use the file name to name your SVG download after the original image; when there is no name, the download is named with a unique ID. |
| Request records | A request reference, the status and times of each request, and whether a credit was used. |
| Results | The SVG result of each request. |
| Technical data | Request and error logs, as described in §2.2 and §7 of the Privacy Policy. When your assistant gives us a file link, our logs record only the file's host name and size, not the link or the file name. |

We do not ask for or receive your conversation, your prompts, your chat history
or your Google password. If your assistant offers several images for you to
choose from, we receive temporary links to them but download only the one you
choose.

## 4. Why we use it

- To connect your account and keep the connection secure.
- To convert the image you chose, deliver the result, and deliver it again when
  you ask.
- To show your connected account and balance, and to record credit use.
- To find and fix failed requests (from error and usage data), prevent abuse and
  keep the Service secure.
- To comply with the law.

**Improving PerfectVector.** We use usage data, such as request counts, file
sizes, image dimensions, processing times, error rates and the settings used, to
operate and improve the Service, both in aggregate and per account (for example,
which Connector tools were called, their outcomes and timings). Usage data does
not contain your images. We do not look at the images you send
or the results we produce, except (a) when you ask us for help with a specific
request, (b) if you turn on "Help improve PerfectVector" in your account
settings, in which case we may review a sample of your requests to improve
conversion quality, or (c) when the law requires it, or to act on a report of
illegal content. Any review happens only while the files are still retained.
We never keep copies for this purpose, and we never use your images to train
machine-learning models.

The "Help improve PerfectVector" setting does not exist yet. Until we add it, we
look at your images only when you ask us for help with a request.

We do not use your images or results to train machine-learning models, and we do
not sell them. Our legal bases are the ones in §3.5 of the Privacy Policy:
providing the Connector you asked for (contract); security, abuse prevention and
improving the Service from usage data (legitimate interests); and, for the
optional quality review, your consent.

## 5. Who receives it

- **Your assistant provider.** To answer your requests, we send your assistant
  the status of each request, whether a credit was used, the image's size and
  dimensions, a temporary download link for the result with its file name, and,
  when the assistant asks for it, the SVG content itself. To show which
  account is connected, we also send your account email address, name and credit
  balance to the PerfectVector card inside the assistant. We mark these as card
  data rather than content for the AI model, but they pass through the assistant
  provider's service. What the assistant provider does with this data is
  covered by its own privacy policy.
- **Our service providers for the Connector**, which process data for us:
  - Google Cloud: hosting, databases and file storage;
  - Modal: image processing; it keeps no data after returning the result;
  - Replicate: fallback image processing; it deletes request inputs and outputs
    after about an hour by default;
  - Railway: the servers that run our processing workers;
  - Upstash: our job queue, which carries job references but no image
    content;
  - Sentry: error monitoring;
  - Amazon Web Services: sending account emails, for example when you sign up
    through the Connector.
- **Google**, for sign-in, as on the website.

Your assistant sends an image either as the file itself or as a temporary link
to the file in the assistant's own file storage. We download linked files only
from file hosts or host-name patterns we have approved, only over HTTPS, and
without sending any of your credentials.

## 6. Where we keep it

In Google Cloud databases and in a private Google Cloud storage bucket used only
for the Connector, which only our backend service can access. File names in that
bucket contain no account ID and no name from your files. §5 of the
Privacy Policy describes international transfers.

## 7. How long we keep it

| Data | How long |
|---|---|
| Images and results | We delete them automatically about 30 days after upload. Free repeat downloads work only during this period. |
| Connection records | Kept with your account history. The credentials we issue stop working when they expire (access after 15 minutes, the connection after 30 days) or when the connection ends. |
| Request and credit records | Kept with your account history, like website download records. If you delete your account, they stay only in anonymized form, and the file names of your images are cleared (§7 and §8 of the Privacy Policy). |
| Logs | About 30 days (§7 of the Privacy Policy). |

Copies kept by your assistant provider, and files you have downloaded, are
outside our control.

## 8. Your choices

- **Choose what to send.** The Connector acts only on images you pick, or that
  your assistant sends at your request.
- **Disconnect:** remove PerfectVector in your assistant's connector settings. A
  connection ends 30 days after sign-in. See §9 of the
  [MCP Terms](/docs/mcp/terms).
- **Delete your account** from your account settings. This ends all of your
  connections at once and anonymizes your account as described in §8.1 of
  the Privacy Policy, including clearing the file names of your images.
  It does not delete your Connector files at once; they are deleted when the
  retention period ends, or earlier if you ask us.
- **Use your rights** under §8.3 of the Privacy Policy, including asking us to
  delete your Connector files before they expire.
- **Use your assistant's own controls** for your conversations. Deleting a
  conversation in your assistant does not delete our copy, and asking us to
  delete our copy does not delete the conversation.

## 9. Security

Connections use OAuth with short-lived access (15 minutes) and expire after 30
days. We store only hashes of the authorization codes and tokens we issue.
Download links expire after 5 minutes.

## 10. Children

The Connector has the same age requirement as the rest of the Service (§1 of the
Terms), and §10 (Children's Privacy) of the Privacy Policy applies.

## 11. Contact

Privacy questions: contact@perfectvector.com. To report a security problem,
email contact@perfectvector.com with "Security" in the subject line. Rastrix
Inc., Republic of Korea.