Privacy Policy

To provide the Service, we collect and store the following information:

• Account information: your email address, display name, and avatar. If you sign in with Google or GitHub (where enabled), we also store the authorization tokens and account identifiers returned by that provider.
• Verification data: one-time email sign-in codes (valid for 5 minutes; invalidated once used or expired).
• Session and security data: sign-in session records, including your IP address and browser User-Agent, used to keep you signed in, enforce rate limits, and prevent abuse.
• Billing information: your plan, Stripe customer and subscription identifiers, subscription status, credit balance, and a ledger entry for every billed call (tool name, credit change, balance, timestamp). Ledger metadata contains only endpoint paths, model names, or token-usage counts — never your conversation content or query parameters.
• Usage statistics: daily call counts on the free plan, and per-API-key request counts and last-used timestamps.
• Generation records: the full prompt and the result URL of each image/video generation job.
• OAuth client data: metadata submitted by MCP clients (such as Claude, ChatGPT, or Cursor) via dynamic client registration, and your consent records.

• We do not offer password sign-in and never store account passwords.
• Your card and payment details are collected and processed directly by Stripe; we never see or store card numbers or other payment credentials. We only keep the customer and subscription identifiers Stripe generates.
• The Service includes no third-party analytics, advertising, or behavioral-tracking SDKs.

The Service uses only the session cookies strictly necessary to keep you signed in. We do not use tracking or advertising cookies.

We use the information we collect to:

• provide, maintain, and improve the Service;
• meter usage in credits and show it to you in the dashboard;
• enforce rate limits and protect against abuse;
• send transactional emails such as sign-in codes;
• respond to your support requests.

We do not use your personal information for advertising, and we do not sell your personal information.

To operate the Service, we share the minimum necessary information with the following providers, each of which processes data only to deliver its function:

• Stripe (payments): receives your email and user identifier to handle subscriptions and payments.
• Supabase (database and file storage): stores the data described above as well as generated image/video files.
• Vercel (hosting): handles all traffic to the Service and its runtime logs.
• Cloudflare / Resend (email delivery): receive your email address and the sign-in code in order to deliver sign-in emails.
• ZenMux and its downstream model providers (AI capabilities): when you call the AI chat, model committee, or image/video generation tools, your full conversation content or generation prompt is forwarded to ZenMux (zenmux.ai) and to the provider of the model you selected.
• justoneapi / justserpapi (data and search upstreams): receive your query parameters (such as keywords, links, or item identifiers), search terms, and target URLs.
• MCP clients you authorize: after you approve access on the consent page, clients such as Claude, ChatGPT, or Cursor can read your basic profile and email and call tools on your behalf.

These providers may be located outside your jurisdiction, and your information may be transferred to and stored in other countries.

Images and videos you generate through the Service are stored in a publicly accessible object store: anyone who has the link can access the file directly, and the link path contains your user identifier. Do not include personal or sensitive information you would not want made public in your generation prompts.

We retain the information described above for as long as your account exists; one-time codes are invalidated once used or expired.

To delete your account, email support@justoneconnector.com. When your account is deleted, associated data such as billing records, the credit ledger, and generation jobs are deleted along with it.

• Access: view your plan, balance, recent ledger entries, and API keys in the dashboard.
• Correction: ask us to correct inaccurate account information.
• Deletion: delete your account and its associated data.
• Withdrawal of authorization: disconnect the Service in the relevant MCP client at any time, or delete API keys you created in the dashboard.

To exercise these rights, contact us at support@justoneconnector.com and we will respond within a reasonable time.

• All traffic is encrypted over HTTPS;
• API keys are shown in full only once, at creation, and cannot be viewed again;
• MCP access uses OAuth 2.1 authorization with short-lived tokens;
• payment webhooks are signature-verified.

No internet service can guarantee absolute security — please keep your API keys and sign-in email account safe.

The Service is intended for adults and is not directed at anyone under 18. If we learn that we have inadvertently collected information from a minor, we will delete it promptly.

We may update this Policy from time to time and will revise the “Last updated” date above; material changes will be announced prominently on the website. Continuing to use the Service after a change takes effect constitutes acceptance of the updated Policy.

If you have any questions about this Policy or wish to exercise your rights, contact us at support@justoneconnector.com.