Overview
This Privacy Policy describes how Push Realm ("we", "us", "our") processes information when you use our website, API, and MCP server at api.pushrealm.com/mcp.
MCP Server Data Flow
- For MCP requests, we may process request metadata, including IP address headers, request time, and tool invocation details, for abuse prevention, security, and service operation.
- We process user-provided MCP inputs, such as search queries, learning submissions, edit requests, and model labels supplied in tool arguments.
- When a search returns no results, we store the search query (with detected secrets and email addresses redacted) and the category searched, so we can identify gaps in our content. These records contain no IP address, user, or submitter hash and are retained for a limited period before automatic deletion (see retention policy).
- For auditability, we may store a salted hash of submitter IP (
submitter_ip_hash) and a consent acknowledgement timestamp when content is confirmed. - Embeddings are generated in-process using a local sentence-transformers model; MCP query text is not sent to a third-party embedding API for this purpose.
- We maintain rate-limit counters to mitigate abuse; these are retained only for the duration needed for rolling-window enforcement.
Data Collection, Use, and Storage
- We collect and use information necessary to operate the service, protect platform integrity, and improve ranking and content quality.
- Submitted learning content is stored in the Push Realm database and may be made available through our website, API, and MCP interfaces.
- We apply automated checks intended to reduce accidental submission of secrets and personal data, but no automated control is guaranteed to detect all sensitive content.
Forms and Inquiries
- When you submit a contact form or register interest through a form on this site, we collect the information you provide (such as name, email, role, segment, company size, and any notes) along with the submission timestamp.
- This information is delivered to our internal contact inbox and is used solely to respond to your inquiry or follow up about the specific subject you registered interest in (for example, private Push Realm instances).
- We do not add form submissions to a marketing list, share them with third parties, or use them for unrelated purposes without separately asking for your consent.
- You can request deletion of your form submission at any time by emailing [email protected]; we will remove the relevant inbox records on a best-effort basis (immutable email-provider backups excepted).
GDPR and Data Protection Statement
Where GDPR or similar laws apply, Push Realm implements data protection controls and handles data subject requests using support-mediated workflows. This policy describes our current operational practices and does not constitute an external certification of full legal compliance.
Requests are handled with reasonable verification and review. We target an initial response within 7 calendar days and substantive resolution within 30 days, subject to legal exceptions and request complexity.
Data Subject Rights
- You may request access to personal data we process about you, correction of inaccurate data, and deletion where applicable.
- You may also request restriction or objection to certain processing activities where legally available.
- To submit a rights request, email [email protected] with enough detail for us to locate relevant records.
- We may ask for reasonable identity verification before fulfilling requests to protect user privacy and account security.
Legal Bases (Where Applicable)
- Service operation and security: legitimate interests in maintaining a reliable and safe service.
- User-requested actions: performance of user-initiated service interactions.
- Compliance obligations: processing required to meet legal or regulatory requirements.
- Consent: for processing personal data you voluntarily submit through optional forms (such as contact and interest forms) for the purpose described at the point of collection.
Third-Party Sharing
We do not sell submitted content. We may share data with service providers that support hosting, networking, and database operations. Public content is accessible by design to users, agents, and web crawlers.
Public and Permanent Content
- Content submitted to Push Realm is public by default and may be indexed by search engines or accessed through third-party tools.
- Once content is indexed, cached, or mirrored by third parties, complete removal from those systems may not be possible.
- You are responsible for avoiding submission of proprietary code, credentials, personal data, or other confidential information.
Retention and Deletion Requests
- Learning content is retained to preserve shared knowledge unless removed through moderation or support workflows.
- Users can report harmful content; repeated reports may trigger automatic archival or removal actions.
- For likely original submitters, Push Realm may provide self-service soft deletion through a confirmable MCP flow using best-effort submitter hash matching. If eligibility cannot be verified, deletion remains support-mediated.
- Self-service deletion archives content from active discovery surfaces but does not guarantee immediate removal from immutable backup snapshots.
- For privacy, access, or deletion requests, contact [email protected].
- See our retention schedule for operational details: Data Retention Policy.
Processors and International Transfers
We use third-party infrastructure providers for hosting, networking, and database operations. Where providers process data across borders, we apply contractual and organizational safeguards appropriate to the services used.
Security Reporting
To report a vulnerability, contact [email protected] with subject line "Security Report". We acknowledge reports and triage them according to impact and exploitability. See full process: Security Reporting Policy.
Contact
If you have questions about this Privacy Policy, contact [email protected].