Privacy Policy

Last updated October 11, 2026

MCP Docs is published by Supercog.ai ("we"). It is an editor for documents, presentations, spreadsheets, Markdown files and pictures, used in a web browser at docs.freeflow.im and inside ChatGPT as the Universal Docs plugin (its name in ChatGPT). This policy says what we collect, why, and who else receives it.

What we collect

• Your account. Your email address, and a password stored only as a salted hash. If you sign in with Google, we receive your email address from Google and no password.
• Your files. The documents, presentations, spreadsheets, Markdown files, pictures, PDFs, web pages and videos you create, import or upload, with their titles, folders and the times they were created and changed.
• Assistant conversations. The messages you send to the built-in assistant, its replies, and pictures you attach to them.
• Settings. Your preferences and, if you add one, your own OpenAI API key, which is stored encrypted.
• Technical records. Server logs of requests (time, address requested, result, browser type and IP address), kept to run and secure the service.

We use one cookie, to keep you signed in. We do not use advertising or analytics trackers, and we do not sell personal data.

How we use it

To provide the service: to store and show your files, to make the edits you or an assistant ask for, to sign you in, to send account email (verification and password reset), and to keep the service working and secure. We do not use the contents of your files to train models.

Universal Docs in ChatGPT

When you connect the plugin, ChatGPT signs in to your MCP Docs account with your permission. When you ask ChatGPT to work with your files, the plugin's tools return what the request needs to ChatGPT: the titles and identifiers of your files, the contents of the file being read or edited (text, slides, cells), pictures you ask it to look at, where your cursor or selection is in the open file, and, when ChatGPT asks which account is connected, your email address. What ChatGPT does with that is governed by OpenAI's own terms and privacy policy. You can disconnect the plugin in ChatGPT at any time.

Who else receives data

• Hosting and storage: Amazon Web Services (servers and file storage) and Cloudflare (backups of files, and account email).
• AI providers, when you use an assistant: Anthropic, or OpenAI if you choose an OpenAI model or ask for an AI image edit, receive your messages and the parts of your files needed to answer. OpenAI receives what the ChatGPT plugin returns, as described above.
• Web search: when the built-in assistant searches the web, the search words go to Brave Search.
• Google: if you sign in with Google, and for the fonts the editors load.
• IMG.LY: the background-removal model is downloaded to your browser from their servers; the picture itself is processed in your browser and is not sent to them.
• Addresses you give us: when you ask for a file or picture to be imported from a web address, our server fetches that address.

We may also disclose information when the law requires it.

Keeping and deleting

We keep your files and account until you delete them. A deleted file can be restored from the Trash for 30 days; after that it is removed for good, and our database backups that still mention it expire within a further 30 days. To delete your account and everything in it, or to get a copy of your data (the app also has an "Export all" download), write to scottpersinger@gmail.com; we act on requests within 30 days.

Security

Connections are encrypted (HTTPS), passwords are hashed, API keys you store are encrypted, and each account's files are only served to that account. No service can promise perfect security; tell us at once if you believe your account was accessed by someone else.

Children

MCP Docs is not directed to children under 13, and we do not knowingly collect their personal data.

Changes and contact

If this policy changes we will post the new version here with its date. Questions and requests: scottpersinger@gmail.com.