Privacy policy

Last updated: 2 November 2026

This privacy policy applies to the website officemcp.net and the officemcp application at app.officemcp.net. It is based on the General Data Protection Regulation (GDPR), the Spanish Data Protection Act (Ley Orgánica 3/2018, LOPDGDD) and the Spanish Information Society Services Act (Ley 34/2002, LSSI-CE).

1. Controller

We have not appointed a data protection officer because we are not required to (Art. 37 GDPR, Art. 34 LOPDGDD). For any privacy question, contact us atservice@officemcp.net.

2. Visiting this website

When a page is requested, our web server automatically logs the IP address, date and time, the requested address, the status code, the amount of data transferred, the previous page (referrer) and the browser identifier. This serves secure operation and troubleshooting. The legal basis is our legitimate interest in a secure and stable service (Art. 6(1)(f) GDPR). The logs are deleted after 14 days.

This website sets no cookies, uses no analytics or tracking services and embeds no third-party content. Even the font is loaded from our own server.

3. Sign-up and customer account

For your account we process your email address, your password (stored only as a scrypt hash, never in plain text), the secret of your two-factor sign-in (encrypted), your chosen language, your plans and the time of sign-up. We send the sign-up confirmation to your email address and, on request, a link to reset your password. We do not send you advertising.

The purpose is to provide the account and perform the contract of use (Art. 6(1)(b) GDPR). Without an email address we cannot set up an account. If you do not confirm your address within 48 hours, we delete the sign-up automatically. We keep the data until you delete your account; statutory retention obligations, for example for invoices, remain unaffected.

Signing in with Google, Microsoft or another provider

If you sign in with Google, Microsoft or another provider offered, we receive your email address from it, whether that address is confirmed, and an identifier of your account there. We store the identifier and the email address to recognise you the next time you sign in; you then do not need a password. The sign-in itself takes place at the provider, whose privacy policy applies. This does not give us access to your emails or files at that provider. The legal basis is Art. 6(1)(b) GDPR; you can disconnect the provider in your account at any time.

Security log

To detect and fend off abuse – for example accounts that are created, used to send spam and deleted right away – we log security-relevant events: sign-up (including rejected attempts), confirmation of the address, sign-in, password changes and resets, connected AI applications and API tokens, added, changed and removed mailboxes and cloud storages (name, login and server name, never the password), every email sent (only the number of recipients and the size – no addresses, no subject, no content) and the deletion of the account with a summary (age of the account, mailboxes and storages, number of requests and sends). With each entry we store the time, the account’s email address, the IP address and the browser identifier. The legal basis is our legitimate interest in a secure service free of abuse (Art. 6(1)(f) GDPR). Entries are deleted after 90 days – also if you delete your account earlier.

4. Cookies in the application

The application at app.officemcp.net uses four cookies:

• omcp_session keeps you signed in. It is strictly necessary and ends when you close the browser, at the latest 12 hours after your last activity; with “Stay signed in” 7 days after your last activity.
• omcp_lang stores the language you selected for one year.
• omcp_tz stores your browser’s time zone (such as “Europe/Berlin”) so that times are shown in your local time, for one year.
• omcp_oidc ties a sign-in with Google & Co. to your browser and is deleted afterwards (10 minutes at most).

These cookies are required for the service you requested and are permitted without consent under Art. 22(2) LSSI-CE. To prevent abuse we also briefly count sign-in and sign-up attempts per IP address in memory (one hour at most) and remember there which addresses we sent a confirmation or password email to (24 hours at most), so that nobody can use our form to flood other people’s inboxes (Art. 6(1)(f) GDPR).

5. Connected mailboxes and cloud storage

Credentials

When you connect a mailbox or cloud storage, we store the server address, user name, password or app password, label and sender name. Passwords are encrypted with AES-256-GCM. We use the credentials solely to connect to your provider on your instruction (Art. 6(1)(b) GDPR) and delete them as soon as you remove the mailbox or storage or delete your account. An app password that officemcp created in NextCloud is revoked there as well.

Content of emails and files

When your AI assistant calls an officemcp function, officemcp fetches the required emails or files from your provider and passes them to the AI application you connected. We process this content only in memory for the duration of the request and do not store it. It may contain personal data of third parties, such as senders and recipients, which we process solely on your instruction. If you use officemcp professionally or for a business, we act as your processor in this respect (Art. 28 GDPR); a data processing agreement is available on request.

Files you upload via an upload link, for example so that your AI assistant can attach them, are stored encrypted and deleted after 24 hours at the latest.

Activity log and usage counters

For every access by your AI assistant we only log the time, the function, the mailbox or storage, the folder concerned, counts (such as recipients or messages) and whether the access succeeded – no recipient addresses, subjects, search terms, file names, email bodies or file contents. You can view the log in the application; the description and mailbox name are stored encrypted. It serves your oversight, abuse detection and troubleshooting (Art. 6(1)(b) and (f) GDPR). Entries are deleted after 60 days.

For the daily quotas of your plan we count requests, sent emails, recipients, attachments and data volume per day, mailbox and storage (Art. 6(1)(b) GDPR). These counters are deleted after 40 days.

Live monitor

In the live monitor you can follow what your AI assistant requests and which answers it receives – including the content sent to it. It only runs when you open and start it in the application. The entries shown are kept solely in the server's memory, for at most one hour, and are deleted as soon as you stop the monitor or close its window; nothing is stored permanently (Art. 6(1)(b) GDPR).

Guardrails

With guardrails you decide yourself what is redacted, blocked or reported between your AI assistant and your mailboxes and storages. We store the rules, your own patterns and your exceptions (allowed values, trusted recipients) encrypted with your account until you delete them. When a rule matches, the activity log only records which rule matched in which tool and mailbox and how often – never the matched text. We also count per day how often and how long your rules were checked (numbers only, 40 days) so that you can see the checking times. Notifications go to your e-mail address and, if you enter an ntfy topic, to the service chosen there; they do not contain matched content either (Art. 6(1)(b) GDPR).

6. Connecting your AI assistant

If you connect an AI assistant (such as Claude, ChatGPT, Mistral Le Chat or Cursor) via OAuth, we store the registration of the application (name and redirect address) and the issued tokens, the latter only as a checksum. Access tokens are valid for one hour, refresh tokens for 30 days or until you disconnect. For personal access tokens (for example for Claude Code or Cursor) we store the name, a checksum and the times of creation and last use until you revoke the token.

officemcp transmits the results of its functions, for example the content of an email, to your AI assistant on your instruction. You use that service under your own contract with its provider (such as Anthropic for Claude, OpenAI for ChatGPT, xAI for Grok, Mistral AI for Le Chat or Anysphere for Cursor). The provider processes this data under its own responsibility, possibly also outside the EU; its privacy policy applies. We have no influence on this processing.

7. Recipients and service providers

The servers are operated and administered by a staff member of the controller. For hosting and email we use the following service providers in Germany:

• IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany – servers (data centre in Berlin).
• Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany – domain and mail server, sending system emails (confirmation, password reset).

We also transmit your credentials to the email and cloud providers you connect yourself, in order to sign in there. We do not transfer any data to countries outside the EU ourselves; for the transmission to the provider of your AI assistant see section 6.

8. Retention at a glance

If you delete your account, we immediately remove all associated data from the database – except the security log, which is deleted after 90 days.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Much of this you can do directly in the application; otherwise an email toservice@officemcp.net is enough.

You can also lodge a complaint with a data protection authority. The authority responsible for us is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. You may also contact the authority in the country where you live.

10. No automated decisions

We do not make automated decisions within the meaning of Art. 22 GDPR and do not create profiles.

11. Security

We protect your data with technical and organisational measures under Art. 32 GDPR. Details are on the pageSecurity and privacy.

12. Changes

If the service changes, we update this privacy policy. We inform registered users of significant changes by email.