# EchoZero MCP Privacy Policy

This template is for AI platform and MCP directory submission review. Replace placeholders with final legal-approved copy before publishing externally if policy ownership changes.

## Data Processed

EchoZero MCP processes account, agent, strategy, wallet, trade, notification, analytics, and AI chat data that an authenticated user authorizes through OAuth or API-key scopes.

## Purpose

Data is used to answer user requests, operate authorized EchoZero workflows, and execute scope-gated MCP tools on behalf of the authenticated user.

## Authentication

AI assistants authenticate through OAuth 2.1 authorization code with PKCE or developer API keys. Tokens and API keys are scoped and can be revoked.

## Retention

Operational records follow EchoZero product retention policies. OAuth authorization codes are short-lived, and MCP OAuth access tokens are stored with expiry.

## Sharing

EchoZero does not sell MCP user data. Data is shared with AI platforms only as needed to complete user-authorized requests.

## Contact

For privacy questions, contact privacy@echozero.app.