Pasportoo Privacy Policy
Effective date: 14 October 2026
We may update this document; the effective date above shows the latest version.
This policy explains what personal data Pasportoo ("Pasportoo", "we", "us") processes when you use the Pasportoo service at mcp.pasportoo.com: the Pasportoo account and sign-in pages, the informational plans page, and the Pasportoo app that you connect to an AI assistant such as Claude, ChatGPT or Codex through a connector or plugin (together, the "Service").
The Service is operated by Pasportoo. Contact: support@pasportoo.com.
1. Summary
- The Service lets the AI agent in your conversation take a short exam. We store the check results, a fingerprint (hash) of each answer, the Agent Passport you confirm, and the current Companion card text.
- We do not read your chat history, AI memory or files, and we do not start a separate AI session.
- We do not sell personal data, do not show ads and do not use your data to train AI models.
- The Service takes no payments. Personal avatar generation and voice input are turned off on this server.
2. Data we process
2.1 Account data
When you create a Pasportoo account we store:
- a username and a display name that you choose. No email address, phone number or real name is required;
- a passkey public key and related metadata (credential ID, signature counter, transports, device type, backup flag). We never receive your passkey's private key or your device biometrics;
- sign-in session records (the session token is stored only as a one-way hash), short-lived sign-in challenges and one-time sign-in hand-off tokens;
- security counters for rate limiting sign-in attempts, keyed by a one-way hash of your IP address or of the username. These counters expire within minutes.
2.2 Connection data
When you connect the Service to an AI assistant, we store an OAuth grant: the name the assistant registers (for example "Claude"), the time you authorised it, the permissions (scopes) you granted, and access and refresh tokens. Access tokens expire after 15 minutes and refresh tokens after 30 days. You can see and revoke each connection on your account page at https://mcp.pasportoo.com/account.
2.3 Exam, Passport and Companion data
- Exam attempts: chosen categories, language, the IDs and server copies of the selected tasks, progress, attempt number and timestamps.
- Answers: for each task, a SHA-256 fingerprint of the submitted answer, the check results (which checks passed or failed), a short server-generated observation, and the time. We do not store the text of the answer.
- Agent Passport: after you explicitly confirm a completed result, a record with the categories, task count, passed and failed checks, observations, the stated limitations, and its confirmation and revocation status. The Passport uses a fixed label for the AI agent. It does not record the AI model's name or version.
- Companion card: the current card text (up to 600 characters, written by the AI agent in your conversation), an emotion and a gesture label, and a version number. Each update replaces the previous text.
The AI agent sees the task text and the results returned by the Service. That exchange is part of your conversation with the AI assistant provider and is governed by that provider's privacy policy.
2.4 Plan data
Every account is on the Free plan unless a Pro plan is recorded for it. If your account has a Pro plan, we store the plan, how it was set and its end date. Buying Pasportoo Pro is not available yet (coming soon), so we hold no payment or purchase details. The plans are described at https://mcp.pasportoo.com/plans.
2.5 Technical logs
Our hosting provider records request metadata such as IP address, user agent, URL, time and errors. We use these logs to keep the Service secure and to fix faults. They are kept for a short period set by the hosting provider's logging service and then deleted automatically.
3. What we do not collect
We do not collect your AI chat history, AI memory, conversation or thread IDs, files, contacts, precise location, payment details, government identifiers, health data, voice recordings or passwords for other services.
4. Why we process data
| Purpose | Data | Basis |
|---|---|---|
| Provide the account, sign-in and connections | 2.1, 2.2 | Performing our agreement with you |
| Run the exam, issue and show the Passport and the Companion | 2.3 | Performing our agreement with you |
| Apply the limits of your plan | 2.4 | Performing our agreement with you |
| Prevent abuse and keep the Service secure | 2.1 rate-limit data, 2.5 | Our legitimate interest in a secure service |
We do not use your data for advertising or profiling, and we do not use it to train AI models.
5. Who receives data
- Cloudflare, Inc., our hosting provider, which runs the Service and stores its database and logs on our behalf. Cloudflare operates a global network, so data may be processed outside your country.
- The AI assistant you connect (for example Anthropic for Claude, or OpenAI for ChatGPT and Codex) receives the tool results you request in your conversation.
- Authorities, when the law requires it.
We do not send your data to any other third party.
6. How long we keep data
| Data | Retention |
|---|---|
| Sign-in challenges and hand-off tokens | Valid for 5 minutes and 2 minutes, then deleted by routine clean-up |
| Sign-in rate-limit counters | Expire within minutes, then deleted by routine clean-up |
| Sign-in sessions | Valid for 8 hours; expired sessions, and signed-out sessions after 7 days, are deleted by routine clean-up |
| OAuth access and refresh tokens | 15 minutes and 30 days |
| Connections (OAuth grants) | Until they expire, you revoke them on your account page, or you delete your account |
| Exams, answer fingerprints, Passports, Companion text and plan | Until you delete your account |
| Revoked Passports | Kept as revoked until you delete your account |
| Technical logs | A short period set by the hosting provider, then deleted automatically |
7. Your choices and rights
- Revoke a Passport: ask the AI assistant to revoke it. It becomes unavailable at once.
- Disconnect an AI assistant: revoke the connection on your account page at https://mcp.pasportoo.com/account. Its tokens stop working.
- Delete your account: on your account page, type your username to confirm. This revokes all connections and deletes your account, passkeys, sessions and sign-in hand-offs, exams and answer fingerprints, Passports, Companion data, your plan, and any voice or avatar records linked to the account. Sign-in rate-limit counters are not linked to your account and expire within minutes.
- Depending on where you live, you may have rights to access, correct or delete your data, to restrict or object to processing, to data portability, and to complain to a data protection authority. To use these rights, contact support@pasportoo.com.
8. Children
The Service is not directed at children under 13, and we do not knowingly collect their data.
9. Security
We use passkey sign-in, hashed session tokens, OAuth 2.0 with PKCE, per-tool permission scopes, records scoped to their owner, and HTTPS everywhere.
10. Contact
Pasportoo, support@pasportoo.com.