Privacy notice: API and MCP server

This notice covers the public data API (https://public-api.finwire.pl/v1) and the MCP server (https://public-api.finwire.pl/mcp) used by AI assistants. It is an English version of section 10b of the finwire.pl privacy policy; the Polish version is binding.

Controller

Finwire, ul. Barańczaka 3E, 60-537 Poznań, Poland, NIP 697-227-64-60. Contact: kontakt@finwire.pl.

No account, read-only

The API and the MCP server work without an account or login. They return public data only. The MCP server only reads data and never writes anything on the user's behalf.

What is recorded

For each request we record technical data used for usage statistics and abuse protection: the requested path or the MCP method and tool name, HTTP method, response status, response time, country (from the CDN header), a client class derived from the User-Agent header, the referring domain, and a one-way hash of the IP address (SHA-256 with a salt). The full IP address is not stored.

We do not record the questions asked to the assistant, the conversation, or the arguments of tool calls.

Purpose and legal basis

Operating, securing and improving the service, based on our legitimate interest (Art. 6(1)(f) GDPR). No profiling, no advertising, no sale of data.

Recipients and retention

The data is not shared with anyone other than our infrastructure providers (hosting and CDN). It is deleted automatically after 12 months.

Your rights

You may request access, erasure or restriction, object to processing, and lodge a complaint with the President of the Personal Data Protection Office (UODO, Poland). Write to kontakt@finwire.pl.

Your AI assistant

The provider of the AI assistant you use processes your conversation under its own privacy policy.