Privacy Policy

Effective date: 12 November 2026 · Applies to Temelo.io and its MCP server

1. Who we are

Temelo.io ("Temelo.io", "we", "us") is a Model Context Protocol (MCP) server that connects AI assistants to business services, including Google Analytics, Google Ads, Google Search Console and Google Merchant Center. Temelo.io is operated by Infinity Web Ltd., Sofia, Bulgaria, which is the data controller for the personal data described in this policy.

Contact for privacy matters: privacy@temelo.io.

2. Data we collect

2.1 Account information

When you connect a Google account, we receive your Google account email address and a unique account identifier (through the openid and email scopes). We use these to identify your connection and show you which account is connected.

2.2 OAuth tokens

Google issues us an access token and a refresh token for the permissions you grant. We store them encrypted and use them only to call Google APIs on your behalf when you make a request.

2.3 Data from Google APIs

When you ask a question or request an action through your AI assistant, we retrieve the data needed to answer it from the Google API concerned, such as report rows, campaign settings or product records. This data is processed to produce the response and is not stored in our databases.

2.4 Service logs

To operate, secure and troubleshoot the service, we keep technical logs: time of request, the tool called, the account ID it targeted, success or error status, and IP address. Logs do not contain report contents or product data.

2.5 Communications

If you contact us, we keep your message and our reply so that we can help you.

3. How we use Google user data

We use Google user data only to provide and improve the user-facing features of Temelo.io that you request. Specifically:

Google API / scope	Use
Google Analytics `analytics.readonly`	List your GA4 properties and run the reports you ask for. Read only.
Google Ads `adwords`	Report on account, campaign, ad group, ad, keyword and search term performance; show recommendations, policy issues and change history; and, only at your explicit request, change budgets, bidding, statuses, keywords and negative keywords.
Google Search Console `webmasters.readonly`	List your verified sites and report on search performance, URL inspection results and sitemaps. Read only.
Google Merchant Center `content`	Report on products, product issues, account status and performance; and, only at your explicit request, add, update or remove products and update shipping, return policy and business settings.
Sign-in `openid`, `email`	Identify the connected Google account.

We do not use Google user data for advertising, to build user profiles, to determine creditworthiness or for lending purposes. We do not sell Google user data.

4. Limited Use disclosure

Temelo.io's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Google user data only to provide or improve the user-facing features you request.
We transfer Google user data to others only as needed to provide those features (for example, returning results to the AI assistant you connected), to comply with applicable law, or as part of a merger, acquisition or sale of assets after giving you notice.
We do not use or transfer Google user data to serve advertising, including retargeting, personalised or interest-based ads.
Our staff do not read Google user data unless you give us explicit consent for specific data (for example, in a support request), it is necessary for security purposes such as investigating abuse, it is required by law, or the data is aggregated and anonymised for internal operations.

5. AI assistants and model training

Temelo.io returns the results of your requests to the AI assistant you connected it to (for example, Claude). That assistant's provider processes those results under its own terms and privacy policy, which you accept separately when you use it.

We do not use Google user data, or any data retrieved through Temelo.io, to develop, improve or train generalised or non-personalised AI or machine-learning models. We do not transfer it to others for that purpose.

We do not sell or rent personal data. We share data only:

with the AI assistant you chose, to deliver the results you requested;
with infrastructure providers that host and run Temelo.io for us, under data processing agreements and only as needed to operate the service;
when required by law or to protect the rights, property or safety of our users, Infinity Web Ltd. or others.

7. Retention and deletion

Google API data: not stored; processed in memory to answer each request.
OAuth tokens and account identifiers: kept while your connection is active. They are deleted when you disconnect, revoke access, or after 12 months of inactivity.
Service logs: kept for up to 30 days, then deleted.
Support messages: kept for as long as needed to resolve your request, and no longer than 24 months.

You can revoke Temelo.io's access at any time from your Google Account permissions page. To have all data about your connection deleted, email privacy@temelo.io. We will complete deletion within 30 days and confirm it to you.

8. Security

All connections to Temelo.io use HTTPS (TLS). OAuth tokens are encrypted at rest and are never passed to the AI assistant. Access to production systems is restricted to authorised Infinity Web Ltd. personnel and protected by strong authentication. No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.

9. Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you can withdraw consent at any time. To exercise these rights, email privacy@temelo.io.

We process personal data to perform our agreement with you (providing the service), for our legitimate interests (security and abuse prevention), to comply with legal obligations, and with your consent (the Google permissions you grant).

You also have the right to lodge a complaint with a supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (www.cpdp.bg).

10. International transfers

Temelo.io is operated from the European Union. When data leaves the EU, for example to the Google APIs themselves or to the AI assistant you choose, the transfer relies on appropriate safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses.

11. Children

Temelo.io is a business tool. It is not directed at children under 16, and we do not knowingly collect their personal data.

12. Changes and contact

We may update this policy. If we make material changes, especially to how we use Google user data, we will notify connected users before the changes take effect. Where required, we will ask for your consent again.

Infinity Web Ltd., Sofia, Bulgaria
Email: privacy@temelo.io