Privacy Policy

What is this demo?

This is the QuerySculptor Pokemon API Chat Demo - a demonstration that shows how QuerySculptor's MCP server can help AI assistants interact with GraphQL APIs. In this case, we're using the Pokemon API to let you chat about Pokemon!

What we collect (very little!)

When you sign in

We use Clerk for authentication, so we get:

• Your basic profile info (email, name if you provide it)
• A user ID to track your session
• Authentication details to keep you signed in

When you chat

• Your Pokemon questions (processed but NOT stored by us)
• When you send messages (for rate limiting - 20 per minute)
• Your IP address (just for rate limiting and basic security)
• Basic browser info (helps us make sure the demo works properly)

🎯 What we DON'T store

How we use your info

Since this is a demo, we keep it simple:

• Keep you signed in during your demo session
• Process your Pokemon questions through the AI (then forget them)
• Track rate limits so the demo doesn't get overwhelmed
• Make sure the QuerySculptor MCP tools work properly

The AI and your messages

Here's exactly what happens when you ask about Pokemon:

1. Your question gets sent to OpenAI's GPT models
2. The AI uses QuerySculptor MCP tools to query the Pokemon GraphQL API
3. We get back Pokemon data and the AI formats it into a response
4. The response is streamed back to you in real-time
5. That's it! No storage, no history, no tracking

Remember: While we don't store your messages, OpenAI processes them according to their own privacy policy. Don't share sensitive personal information in your Pokemon questions!

Who we share info with

Since this is a demo, we work with these services:

The demo tech stack

• Clerk: Handles your login and authentication
• OpenAI: Processes your messages with GPT models (temporarily)
• Pokemon GraphQL API: Where we get the Pokemon data
• Vercel: Hosts and runs the demo

Each of these services has their own privacy policies. We only share what's needed to make the demo work.

How we protect your info

Even though this is a demo, we still use good security practices:

• Everything is encrypted in transit (HTTPS)
• Clerk handles authentication securely
• Rate limiting prevents spam and abuse
• We monitor for unusual activity
• Messages are processed but not stored

How long we keep info

Since this is a demo with minimal data storage:

• Chat messages: NOT stored at all - processed and discarded
• Rate limiting data: Stored in memory only, cleared automatically after 1 hour
• Account info: Managed by Clerk, stays until you delete your account
• Server logs: Basic logs for debugging, usually cleared after 30 days

Your choices

You have control over your demo experience:

• You can sign out anytime
• You can delete your account through Clerk
• You can stop using the demo whenever you want
• Since we don't store chat history, there's nothing to delete there!

Third-party services

The demo integrates with these services, each with their own privacy policies:

• Clerk: Authentication and user management
• OpenAI: AI model processing (temporary)
• Pokemon GraphQL API: Pokemon data source
• Vercel: Hosting and deployment

Kids and the demo

While Pokemon is popular with kids, this demo is designed for developers and tech enthusiasts to understand MCP capabilities. If you're under 13, please have a parent or guardian help you try it out.

Changes to this policy

Since this is a demo, we might update this policy as we improve the demonstration. We'll update the date at the top when we do. Big changes will be noted in the demo itself.

Questions about the demo?

This demo is all about showcasing QuerySculptor MCP server capabilities! If you have questions about how it works, what data we use, or want to learn more about QuerySculptor, feel free to reach out.