Privacy policy

Updated October 25, 2026

This policy covers the ContaMCP service operated by Fernando Guillen at the production MCP endpoint and this marketing site. If you host the open-source software yourself, your deployment is controlled by its operator.

Information the service uses

Google sign-in supplies a verified account identifier, which we associate with an internal user ID. ContaMCP does not store your Google access tokens, refresh tokens, email address or profile. Google processes your sign-in under its own privacy policy.

Optional provisioned email/password accounts use Google Firebase Authentication, which manages the account email and password authentication. The MCP service processes your email and password transiently to sign in with Firebase, verifies the returned identity, and retains the stable Firebase user identifier and sign-in provider. It does not store your email, password or Firebase tokens in the financial database or assistant grants. These accounts have separate ledgers and are not linked to Google accounts by email.

The hosted service stores the financial information you choose to record: entries, descriptions, amounts, dates, recurring instructions, savings goals, budgets and preferences. It also stores original versions and mutation receipts needed for audit history and safe retries. OAuth client registrations, grants and ContaMCP credentials support connections from your chosen assistant.

How information is used and shared

We use this information to authenticate you, keep your ledger separate from other users, answer authorized tool requests, and carry out recurring bookkeeping instructions you establish. ContaMCP does not connect to your bank or move money.

Cloudflare hosts the MCP service, financial database and authorization storage. Google Firebase hosts this website and provides the optional email authentication. Your chosen assistant, such as ChatGPT, receives the information returned by tools you authorize; that provider has its own data practices. Avoid recording information you do not want shared with that assistant.

ContaMCP does not include advertising or marketing analytics. Application diagnostics use fixed events and random request IDs rather than financial contents or credentials. Infrastructure providers also process request metadata such as IP addresses for hosting and security. The website loads fonts from Google Fonts, so your browser contacts Google when those fonts load.

Cookies and the website demo

Secure cookies protect sign-in and remember approved app connections for up to 30 days. When email accounts are enabled, both sign-in methods are offered directly during connection; the service does not set a sign-in-method preference cookie. The website remembers a manual language choice in local storage. Its example conversations use synthetic data. Text typed into the demo stays in browser memory, is not submitted, and clears on reload.

Retention and your choices

Financial records and original audit history remain stored; there is no automatic retention purge. Deleting an entry hides it from active results but preserves audit history. Disconnecting an assistant or revoking a token does not delete ledger data or cancel standing recurring instructions. Pause or cancel those instructions separately.

You can inspect your records and export your data through the authorized tools. For privacy, access or deletion questions, contact fernandoguillen.apps@gmail.com. Account deletion is not currently self-service. Please do not include passwords, tokens or financial documents in an initial email.

Changes and contact

Changes to this notice will appear here with an updated date. Questions about this hosted service can be sent to the contact above. Support and connection information.