Privacy, in plain terms.
Infomaniak MCP is an independent service operated by Léon Houlier. Contact leon@houlier.com about your data.
Your token and account
You enter your own Infomaniak API token over HTTPS. We use it for account and product reads, and for the limited DNS tests you separately consent to and approve, and store it encrypted on an Infomaniak server in Switzerland. The operator holds the encryption key and can decrypt the token to make those calls. This is not end-to-end encryption.
Your AI receives a separate OAuth credential for the account you approve. Account and product information, including DNS plan values returned by write tools, goes to your AI provider when you request it, under its terms. We do not receive your AI conversation, read mailbox contents or sell your data.
Optional DNS test plans
Write access is off by default. If you explicitly opt in for one verified domain, the service can create, update or delete TXT records only at _infomaniak-ai-test. Each exact plan needs approval in the browser that gave consent. Plan values are encrypted in the same vault. Finished plans expire from live storage after seven days; uncertain outcomes and their resource locks remain until reconciled or investigated. Disconnecting stops new operations; a provider request already in progress may finish.
Expiry and deletion
Unfinished sign-in expires after 10 minutes. Connections expire after 30 days; access credentials last 15 minutes and refresh credentials rotate. Expired records are removed during store housekeeping. Disconnecting immediately deletes the live stored provider credential and invalidates that connection.
Encrypted daily backups are kept for seven days. A deleted credential may remain in those backups until they expire. Revoke the API token in Infomaniak to disable any retained copy. To request access, correction or deletion, email the address above. Never send a token by email.
Cookies and request data
The public website sets no cookies. Sign-in uses only the essential cookies described in our cookie policy. Pages load no external fonts, tracking pixels or session recording scripts. Our small copy-button script runs in your browser and sends nothing.
The server receives your IP address to handle requests. Application access logs omit IP addresses, query strings, tokens and request bodies. Access logs rotate daily, with up to 14 archives. Container diagnostic logs are limited to three 10 MiB files and expire by rotation rather than a fixed date. Infrastructure providers may process connection metadata to operate the service.
Usage counts
We send limited event counts to PostHog in the EU: homepage views, connection approvals, disconnections and discovery-tool outcomes. They contain no stable visitor identifier, account ID, domain, email, IP address, token, request payload or error text. Each event uses a fresh random ID; no person profile is created. Counts are capped at 1,000 events per UTC day for this installation. We skip these events when a request sends Global Privacy Control or Do Not Track. Counts remain in the analytics project until deleted; they do not form a customer history.
Providers and purposes
Infomaniak hosts the service and fulfils your API requests. PostHog processes the limited usage counts above. Your chosen AI provider receives the tool results you request. We process connection data to provide the service, protect access and diagnose failures. Cloudflare supplies this domain’s registration and DNS; application requests go directly to Infomaniak.