Privacy notice

1. Who controls the data

Clean Whale sp. z o.o., Al. Powstania Warszawskiego 15, 31-539 Krakow, Poland, KRS 0000868230, NIP 6751738063, REGON 38745511400000, is the controller for data processed by the CleanWhale Assistant MCP server. Privacy enquiries may be sent to iod@cleanwhale.pl.

2. Data the plugin receives

The plugin accepts only the fields needed to answer a service request: a supported website or city selection, an optional requested date, a language, and service item keys with quantities. The MCP endpoint does not require an account and does not set an application cookie.

Our hosting and security infrastructure may process an IP address, request time, HTTP headers, requested route, response status, and similar technical data needed to deliver the service, prevent abuse, diagnose failures, and protect the endpoint.

3. Data the plugin does not accept

The tool schemas do not accept customer names, telephone numbers, email addresses, service addresses, payment details, SMS codes, authentication secrets, or free-form notes. Unsupported fields are rejected. The plugin does not create a customer profile, reserve a time, start payment, or create an order.

4. ChatGPT and Codex

OpenAI processes the conversation under its own terms and privacy policy. OpenAI sends the CleanWhale MCP server the structured tool arguments needed for the selected operation. CleanWhale does not receive the full conversation unless information from it is deliberately placed into a supported tool field.

5. Purposes and legal bases

We process the supported service selections to provide the information requested by the user and to generate a calculator link. We process limited technical data for service security, abuse prevention, reliability, and troubleshooting. These purposes rely on taking steps requested by the user and on our legitimate interests in operating a secure and reliable public service, subject to applicable law.

6. Sharing and retention

Technical requests may be processed by infrastructure providers that support hosting, content delivery, and security, including the providers described in the main CleanWhale privacy policy. We do not sell plugin interaction data or use it for advertising profiles.

Service selections are processed for the request and are not stored in an app account. In-memory rate-limit records expire within ten minutes. Current web-server logs rotate daily and are normally retained for no longer than eleven days, except when longer retention is necessary to investigate a security incident or meet a legal obligation.

7. Calculator and checkout

A calculator link moves the user to the selected public website. Any information entered there is processed separately under the main CleanWhale privacy policy and the applicable checkout notices.

8. Your rights

Subject to applicable law, data subjects may request access, correction, deletion, restriction, portability, or object to processing, and may lodge a complaint with the competent supervisory authority. Contact iod@cleanwhale.pl. Because the plugin does not create an account, please include the approximate request date, time, and relevant website without sending passwords, payment information, or SMS codes.

9. Changes

We may update this notice when the plugin, infrastructure, or legal requirements change. The effective date above identifies the current version.