Privacy Policy

Last updated: September 23, 2026

This is an English translation provided for convenience; the French version prevails.

Alpative MCP ("we", "the service") is a service published by Alpative that lets a user connect their own accounts (Google and others) to their AI assistant in order to analyze them in read mode and, if they explicitly enable it, to perform certain actions at their request. This policy explains which data we process and how.

1. Data controller

Alpative, contact: contact@alpative.com.

2. Google data we access

When you connect a Google account, you explicitly authorize us, through the Google consent screen, to access the data listed below, solely to return it to your AI assistant at your request. Access is read-only by default; write permissions are only used under the conditions described in section 3.

We do not access any other Google data. All operations are triggered by you, through your AI assistant.

3. Write actions and publishing (Actions mode)

No write action, and no publishing, is ever performed automatically, silently, or as a side effect of another request. An action is only possible when all four of the following conditions are met:

In practice, your assistant can prepare a tracking fix in a GTM draft, show it to you, then publish it only after your approval. Every publication is logged on your account. Without Actions mode, the service stays strictly read-only.

4. Limited Use (Google user data policy)

Alpative's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular: we only use Google data to provide and improve user-facing features; we do not transfer it to third parties except to your AI assistant, at your request, or if required by law; we never use it for advertising purposes; we do not sell it; we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models; and no human reads it, except with your explicit consent, for security/compliance reasons, or if required by law.

Transfer to your AI assistant. Alpative acts as an intermediary between your accounts and the AI assistant you connect yourself: for example Claude, provided by Anthropic, ChatGPT, provided by OpenAI, or any other client compatible with the MCP protocol. When you ask a question, only the data needed to answer it is sent to that assistant, and only in response to your request. We never send data to an assistant on our own initiative. How the assistant's provider processes it is governed by your own account and agreement with that provider, including its data usage settings, which you can review and change in its settings.

5. Other services you can connect

Alpative MCP also lets you connect non-Google services. As with Google, the connection is triggered by you, access is limited to the accounts you authorize, and the data is only used to answer your requests:

Data from these services is never sold, never used for advertising, and never used to train models.

6. Your Alpative account data

To run the service, we also process:

7. Retention and storage

OAuth tokens and API keys are encrypted at rest (AES-256-GCM) on our servers located in the European Union (Hetzner Online GmbH, Nuremberg data centre, Germany). We do not store your reports: they pass through to your AI assistant and are not retained. The usage log (tool name and timestamp, with no content) is kept for 13 months, then deleted automatically: that period covers your quota calculation, a possible dispute over an annual invoice, and year-on-year comparison. Other account data is kept for as long as your account exists, then deleted when it is closed. Your account memory and your action log are never deleted automatically: they are yours, and you erase them whenever you want from your console or your assistant. You can revoke access at any time from your Google account (myaccount.google.com/permissions), from each other service's own settings, from your Alpative console, or by contacting us; disconnecting deletes our tokens.

8. Sharing and processors

We do not sell or rent your data. It is shared with the AI assistant you connect yourself (for example Claude by Anthropic or ChatGPT by OpenAI), at your request and under the conditions described in section 4, and with the technical processors strictly necessary to run the service:

We may also disclose data if required by law. No other sharing takes place.

9. Transfers outside the European Union

Your connection tokens and the data we store are hosted in the European Union, on our servers in Germany. Two ancillary processing activities do involve transfers to the United States, in both cases covered by the provider's certification under the EU-U.S. Data Privacy Framework and, failing that, by the European Commission's Standard Contractual Clauses:

Your Google data, and the data from the other services you connect, is never transferred to these providers: it only travels between the service concerned, our European servers and the AI assistant you chose. That assistant's provider may be established outside the European Union or transfer data there. This transfer happens at your initiative, when you query your data, and is governed by your own agreement with that provider.

10. Your rights (GDPR)

You have the right to access, rectify, erase and port your data. To exercise these rights: contact@alpative.com.

Home · Terms of Service

Privacy Policy · Alpative MCP