Loading data…
Effective date: 25 September 2026
This policy explains what data the Dataful MCP connector (the “Connector”) collects when you use it through an AI assistant, why we collect it, who we share it with, how long we keep it, and what choices you have.
The Connector is run by Factly Media and Research (“Factly”, “we”, “us”, “our”).
This policy adds to the Dataful Privacy Policy, which still covers your Dataful account, the website and payments. If the two conflict, this policy applies to your use of the Connector.
The Connector only sees the tool calls your AI assistant sends it. It does not see your chat, your other messages, your files, your assistant’s memory or its chat history.
A tool call contains:
search or download_dataset| Data | When | Why |
|---|---|---|
| Your Dataful account details (user ID, organisation ID, email, name) | When you sign in to connect the assistant | To know who is calling and what you can access |
| Your IP address | When you sign in | To identify your country |
| The name of the AI assistant that connected, and your approval | When you approve the consent screen | To show you what has access, and to let you revoke it |
| Tool name, user ID and organisation ID | Every tool call | Security, abuse prevention and fixing problems |
| Search phrases | When the assistant calls search | To find matching datasets |
| Download records: dataset, format, time, account | When the assistant calls download_dataset | To enforce access rules and subscription limits, and to show your download history |
| Order records: dataset, price, currency, status, time, account | When the assistant calls create_order | To process your purchase |
We do not collect or see:
We use this data only to:
We do not:
We share only what each provider needs to do its job:
| Provider | What they receive | Why |
|---|---|---|
| OpenRouter, and the embedding model provider it routes to | The text of your search phrase, with no account details | To turn the phrase into a vector for search |
| Razorpay | Order amount, currency and reference | To take payment |
| Wasabi | A request for the file, through a short-lived link | To store and serve dataset files |
| Cloudflare | Standard network traffic, including your IP address | To protect and route traffic to the Connector |
We may also share data if the law requires it, or if you break the Dataful Terms and Conditions.
Some of these providers are outside India, so your data may be processed in other countries under their laws.
The assistant you connect (for example Claude by Anthropic, or ChatGPT by OpenAI) is not run by us. What the Connector returns, such as dataset details, previews and download links, enters your conversation. From there, the assistant provider’s own terms and privacy policy apply, including how long it keeps your chats and whether it trains on them. We have no control over that.
| Data | How long |
|---|---|
| Access tokens | Expire after 1 hour |
| Refresh tokens | Expire after 30 days, or earlier if you disconnect |
| Consent approval | Remembered for 24 hours |
| Tool call records | 90 days, then deleted |
| Search phrases | Not stored or logged by us after the search is done |
| Download and order records | For as long as your Dataful account exists, and afterwards as long as tax and accounting law requires |
| Account details | For as long as your Dataful account exists |
Traffic to the Connector uses HTTPS. Every tool call is checked against our authorisation server, so a revoked token stops working on the next call. Download links expire after 5 minutes.
The Connector is not meant for anyone under 18. We do not knowingly collect data from children.
We may update this policy. We will post the new version on this page with a new effective date. If we make a major change, we will tell you by email or on dataful.in.
Questions, requests or complaints about this policy: