MewCP Logo

Privacy Policy

Last updated: October 15, 2026

This policy explains what information MewCP collects, why we collect it, how long we keep it, and the choices you have. We have tried to write it plainly. If anything is unclear, email us at contact@asthetech.com.

1. Who we are

MewCP is a product of ASTheTech (registration in progress), based in Maharashtra, India. In this policy, "MewCP", "we", "us" and "our" mean the team that operates MewCP. "You" means the person using MewCP, or the organisation they use it for.

MewCP is a gateway for AI agents. You connect your apps to MewCP once, and your agent reaches their tools through a single endpoint. MewCP holds the credentials for those apps, checks each call against your access rules, and logs it.

2. What this policy covers

This policy covers the MewCP website (mewcp.com), the dashboard, the MewCP gateway and APIs, and our documentation.

It does not cover the apps you connect through MewCP, such as Gmail, Slack or GitHub. Each of those apps has its own privacy policy, and what happens to your data inside them is governed by that policy.

If you use MewCP through a business that built its product on MewCP, that business decides how your data is used. See section 11.

3. What we collect

Account information

When you create an account we collect your first and last name and email address. If you sign up with an email and password, we store your password only as a one-way hash, never in readable form. If you sign in with Google or GitHub, we receive your name, email address and profile picture from that provider.

We also store details you add to your account, such as your organisation, your projects and toolsets, the dashboard type you choose (personal or business), and, if you tell us, how you heard about MewCP.

Credentials for your connected apps

When you connect an app, MewCP stores the credential needed to call it on your behalf. This is an OAuth token or an API key, depending on the app. Credentials are encrypted with AES-256-GCM before they are stored. They are used only to make the calls you or your agent request, and they are never shown to your agent.

Call logs

Every call through the gateway is logged so you can see what your agent did and why a call failed. Logs hold metadata only. We never store the arguments your agent sends to a tool or the data a tool sends back.

A log entry includes:

  • the time of the call, its duration and its size;
  • the project, toolset, app and tool it used;
  • whether it succeeded, and if not, the error code and the error message the tool returned;
  • the API key and connected account it used;
  • the IP address and user agent the call came from;
  • for discovery tools, the search text your agent used to find tools;
  • your rate-limit usage at the time;
  • for business accounts, the end-user identifier you passed with the call.

Website visits and usage

When you visit our website we record the page you visited, your IP address, your browser's user agent and the time. If you are signed in, the visit is linked to your account and name. If you arrived through a marketing link, we record its campaign details (UTM parameters) and the referring page.

We also use Google Analytics to understand how visitors use the site. Google Analytics collects information such as pages viewed, approximate location, device and browser type. See section 6.

Payment information

Payments for paid plans are processed by our payment processor. Your card or bank details are entered on the processor's side and never reach MewCP. We keep the plan, the billing period, the amounts and the payment and subscription references the processor gives us.

Messages you send us

If you email us or contact support, we keep the message and our reply.

4. What we do not do

  • We do not store the contents of tool calls: what your agent sends to your apps or what they send back.
  • We do not sell your personal information.
  • We do not use your data, your call logs or your connected apps' data to train AI models.
  • We do not show you third-party advertising, and we do not use your data for targeted advertising.
  • Your agent never receives the credentials for your connected apps.

5. How we use your information

We use your information to:

  • create and run your account and sign you in;
  • connect to your apps and make the calls you or your agent request;
  • enforce your access rules, plan limits and rate limits;
  • show you your call logs, usage and analytics in the dashboard;
  • process payments and manage subscriptions;
  • detect and prevent abuse, fraud and security incidents;
  • understand how MewCP is used so we can fix problems and improve it;
  • contact you about your account, security, billing and important changes;
  • meet our legal obligations.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performance of our contract with you (running the service you signed up for), our legitimate interests (security, abuse prevention and improving MewCP), your consent (analytics cookies, where required), and legal obligation (tax and accounting records).

6. Cookies and browser storage

We use a small number of cookies and browser storage entries:

  • Essential: a sign-in cookie that keeps you logged in, and a cookie that remembers which dashboard you use. MewCP does not work without these.
  • Preferences: your light or dark theme choice, kept in your browser.
  • Analytics: Google Analytics cookies, which measure how visitors use the website.
  • Campaign attribution: if you arrive through a marketing link, its campaign details are kept in your browser for 30 days so we can tell which campaigns bring people to MewCP.

You can block or delete cookies in your browser settings. If you block essential cookies, you will not be able to sign in.

7. Who we share information with

We share information only as needed to run MewCP:

  • Service providers that host our servers and database, process payments, and provide analytics. They may use the information only to provide their service to us.
  • Sign-in providers (Google and GitHub), when you choose to sign in with them.
  • The apps you connect. When your agent calls a tool, MewCP sends that call, with your credential, to the app it belongs to. This happens because you or your agent asked for it.
  • Other members of your organisation or project, where you have given them access in the dashboard.
  • Authorities, when the law requires it, or when it is necessary to protect the rights, property or safety of our users, the public or MewCP.
  • A buyer or successor, if MewCP is merged, acquired or sold. We will tell you before your information becomes subject to a different privacy policy.

8. How long we keep information

  • Account information: for as long as your account is open, and deleted when you ask us to delete the account.
  • Credentials for connected apps: until you disconnect the app or delete your account.
  • Call logs: 90 days, then deleted automatically.
  • Website visit records: only as long as they are useful for understanding traffic, then deleted.
  • Billing records: as long as tax and accounting law requires.
  • Support messages: as long as needed to help you, and to keep a record of what we agreed.

We may keep information longer when the law requires it, or to resolve a dispute or investigate abuse.

9. How we protect information

  • Credentials for connected apps are encrypted with AES-256-GCM.
  • Passwords are stored only as one-way hashes.
  • All traffic to MewCP uses encrypted connections (HTTPS).
  • Access to our systems and data is limited to the people who need it to run MewCP.

No system is completely secure. If a security incident affects your personal information, we will tell you and the relevant authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to:

  • see the personal information we hold about you and get a copy of it;
  • correct information that is wrong or incomplete;
  • delete your account and personal information;
  • receive your information in a portable format;
  • object to or restrict how we use your information;
  • withdraw consent you have given, for example to analytics cookies;
  • nominate another person to exercise your rights if you die or become unable to (India);
  • complain to your data protection authority.

To use any of these rights, including deleting your account, email contact@asthetech.com from the email address on your account. We will reply within 30 days. We will not treat you differently for using your rights.

California residents: we do not sell your personal information or share it for cross-context behavioural advertising.

11. Business accounts and their end users

Businesses can build MewCP into their own products, so their own users (end users) connect apps through MewCP.

For end-user data, the business is in charge of how it is used, and MewCP processes it on the business's behalf and according to its instructions. If you are an end user of such a business, please read its privacy policy and send requests about your data to the business first. We will help the business respond.

12. International transfers

We operate from India and serve customers around the world. Our service providers may process information in other countries, including countries whose data protection laws differ from yours. When we transfer information, we take reasonable steps to make sure it stays protected as this policy describes.

13. Children

MewCP is for people aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, email contact@asthetech.com and we will delete it.

14. Changes to this policy

We will update this policy when MewCP or the law changes. When we do, we will change the "Last updated" date at the top. If a change is significant, we will also tell you by email or with a notice in the dashboard before it takes effect.

15. Contact and complaints

For questions, requests or complaints about privacy, email contact@asthetech.com. This address is also our contact for grievances under India's Digital Personal Data Protection Act.

Back to home