Effective October 10, 2026 · Version 2026-10-10
Privacy Notice
This notice covers the Tamed Apricot MCP customer portal, hosted service and companion delivery operated by Justin Williams. For privacy requests, contact hello@tamedapricot.com. Wild Apricot, Stripe and your selected AI application have their own notices for their services.
Information used to provide the service
We process your name, email address, password hash, sign-in sessions and security information; connected Wild Apricot account identifiers, labels, settings and encrypted API key; AI application registrations, authorization scopes, consent and token records; subscription, payment and Stripe identifiers; usage counts, operation status and support correspondence.
We retain a record of checkout acceptance, including your account, acceptance time, policy version, the policy text you accepted and the associated checkout attempt. This supports billing, customer support and evidence of your agreement.
When you use a tool, the service processes the request and Wild Apricot results to carry out your instruction and return them to your selected AI application. These results can contain personal or business information. Operation records track metadata, status and a keyed request fingerprint; they are not a complete copy of member records or tool results. Do not include credentials or unnecessary personal information in support messages.
Providers and security
Cloudflare provides hosting, networking and account-email infrastructure; Neon provides the hosted database; Stripe processes subscription payments. These providers process information needed to deliver their services. Stripe handles payment-card collection; Tamed Apricot does not store full card details. Your chosen AI provider receives the tool results you request and applies its own data practices.
Stored Wild Apricot API keys are encrypted and bound to the customer connection. Passwords are hashed. Access controls separate customer accounts. These measures do not make all stored metadata anonymous or guarantee that every security risk can be eliminated.
The local companion
The companion runs on your computer. Its configuration, browser session and saved page snapshots or recovery evidence are subject to your computer and browser controls. Your AI client can receive browser and page information when you use its tools. Deleting a hosted account does not erase files or conversations held on your device or by another provider.
Retention and your controls
Completed or failed operation records and read-operation records are eligible for scheduled cleanup after 30 days. Writes with an unknown outcome are retained until resolved. This is not a 30-day deletion rule for all information. Account, authentication, usage, billing, policy-acceptance and support records are kept as needed to provide the service and resolve operational matters; billing, invoice, dispute, fraud and legal records may require longer retention. Backups may remain until they expire.
You can disconnect a website to remove its credential from the active connection record, revoke an AI application's authorization and manage account sessions. Revoking the key in Wild Apricot prevents its further use. These actions do not erase earlier changes or results already delivered to an AI provider.
Request account deletion or correction at hello@tamedapricot.com. We verify the requester's authority before acting, then remove or correct applicable active records subject to necessary billing, dispute, security and legal retention. Ask us to cancel billing too if needed; deletion and disconnection do not automatically cancel a subscription. This process does not limit applicable privacy rights.
The customer portal uses cookies needed for sign-in and account security. This notice covers the MCP service; separately operated websites or linked services may have their own notices.