AIRNET Client MCP Privacy Policy

Effective date: September 9, 2026

This policy explains how AIRNET handles information when you use AIRNET Client MCP to connect ChatGPT or another MCP-compatible client to WordPress sites that you authorize.

Information we process

  • AIRNET account information needed for sign-in and OAuth authorization, including your account identifier and email address.
  • Paired WordPress site metadata such as site URL, site label, Client version, capability flags, and connection status.
  • OAuth and pairing credentials. AIRNET stores access and refresh tokens as cryptographic hashes and stores pairing secrets in encrypted form where applicable. AIRNET does not require your WordPress administrator password for MCP operation.
  • WordPress data requested by an authorized tool call, such as posts, pages, media metadata, SEO fields, products, comments, plugin or theme information, and other site data that the selected tool is permitted to access.
  • Operational and audit information needed to route requests, diagnose failures, enforce permissions, and record actions performed through AIRNET MCP.

How we use information

We use this information only to authenticate the connection, determine which WordPress sites you are authorized to use, execute the MCP tool calls you request, return results, protect the service, and maintain action records. AIRNET does not sell personal information and does not use customer WordPress content for advertising.

Data minimization and permissions

AIRNET MCP exposes only the sites associated with the signed-in AIRNET account. Tools are permission-scoped. Normal OAuth users receive only the tools allowed for their account and paired sites. Administrative tools require separate AIRNET Master authorization. High-risk operations may require an additional confirmation flow.

Third-party processing

When you connect AIRNET Client MCP to ChatGPT or another MCP client, information returned by AIRNET MCP is also processed by that client under its own terms and privacy policy. AIRNET sends only the information required to satisfy the selected tool call.

Purchases, licensing and account creation

When you purchase an AIRNET MCP license through the AIRNET website, AIRNET may process the WooCommerce order ID, billing email and name, purchased AIRNET MCP SKU, purchase status, license plan, Seat allocation, activation date, and expiration date to provision and administer the service. If an MCP order is placed without an existing AIRNET account, the billing email may be used to create a customer account so the license can be attached to the purchaser. AIRNET MCP does not require payment-card credentials to operate; payment processing is handled by the applicable commerce and payment services.

Retention and deletion

Connection records, credential hashes, paired-site metadata, and audit records are retained while needed to provide and secure the service or meet legal and operational requirements. You may revoke an AIRNET MCP authorization or request deletion of account-related data through AIRNET support, subject to records we must retain for security or legal reasons.

Security

AIRNET uses HTTPS, OAuth with PKCE, scoped permissions, hashed OAuth credentials, encrypted pairing secrets where applicable, and action-level authorization controls. No security method can guarantee absolute protection.

Contact

For privacy questions or requests, contact AIRNET through https://www.airnet.com.tw/contact/ or email service@airnet.com.tw.