Depending on how the MCP Service is configured and used, we may process the following categories of information:

Account and authentication information

• Your GlobalSource Partners account or subscriber identifier;
• Authentication tokens, session identifiers, authorization scopes, and related security information; and
• Your organization, subscription status, entitlements, and access permissions.

We use authentication credentials to verify and authorize access. We do not intentionally return passwords, access tokens, or other authentication secrets in MCP tool responses.

Requests submitted to the MCP Service

• Search terms, filters, country or topic selections, document identifiers, and other parameters sent when an MCP tool is called; and
• Any task-specific text you or your MCP client choose to send to the MCP Service.

The MCP Service is designed to receive only the information needed to perform the requested research or content-retrieval function. Users must not submit confidential, proprietary, regulated, or sensitive information belonging to themselves or third parties unless the MCP Service expressly requires such information and the user is authorized to provide it.

Content and results

• Research reports, excerpts, metadata, citations, links, and other GlobalSource Partners materials returned in response to an authorized request; and
• Information needed to apply subscription, licensing, and access restrictions.

GlobalSource Partners content may be protected by copyright and subject to subscription or license terms. Use of that content is governed by the applicable GlobalSource Partners terms of use or customer agreement.

Technical and usage information

• Date and time of requests;
• MCP tool used, request status, response time, and error information;
• IP address, device or client information, server logs, and security events; and
• Correlation or request identifiers used for reliability, auditing, troubleshooting, abuse prevention, and security.

We seek to minimize personal information in logs and do not intentionally log complete chat histories.

We use information processed through the MCP Service to:

• Authenticate users and enforce account, subscription, licensing, and content-access permissions;
• Execute MCP tool requests and return the requested GlobalSource Partners content or results;
• Operate, maintain, secure, monitor, and troubleshoot the MCP Service;
• Detect and prevent fraud, abuse, unauthorized access, prompt-injection attempts, and other security threats;
• Measure performance and improve the reliability, functionality, and user experience of the MCP Service;
• Comply with legal obligations and enforce our agreements; and
• Protect the rights, safety, and property of GlobalSource Partners, our users, our content providers, and others.

We do not sell personal information processed through the MCP Service. We do not use MCP request content or retrieved GlobalSource Partners content to train general-purpose artificial intelligence models.

To the MCP client and its provider

We return requested results to the MCP client through which you invoke the MCP Service. If you use ChatGPT, Codex, or another OpenAI product, OpenAI may process your request and the MCP Service's response under OpenAI's own terms and privacy policy. We do not control how an independent MCP client provider processes information after receiving it.

To service providers

We may disclose information to vendors that provide hosting, infrastructure, security, monitoring, customer support, analytics, or other services on our behalf. These providers are authorized to process information only as needed to provide services to us and are subject to contractual confidentiality and data-protection obligations.

For legal and safety reasons

We may disclose information if we reasonably believe disclosure is necessary to comply with law, regulation, legal process, or governmental request; enforce applicable terms; investigate or prevent fraud, abuse, or security incidents; or protect the rights, property, or safety of GlobalSource Partners, our users, or others.

In a corporate transaction

Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law.

We do not disclose personal information to third parties for cross-context behavioral advertising through the MCP Service.

We retain information only for as long as reasonably necessary for the purposes described in this policy, including to provide the MCP Service, maintain security and audit records, comply with legal and contractual obligations, resolve disputes, and enforce agreements.

• Authentication and session information: 30 days after the last use of the MCP Service or until token expiration or revocation, whichever is longer.
• MCP request and operational logs: 90 days after the last use of the MCP Service, unless a longer retention period is required for security, auditing, or legal purposes.
• Security and audit records: 90 days after the last use of the MCP Service, unless a longer retention period is required for security, auditing, or legal purposes.
• Account and subscription records: retained while the account or customer relationship remains active and afterward as required for legitimate business, contractual, tax, accounting, or legal purposes.

We may retain de-identified or aggregated information that cannot reasonably be linked to an individual. Backup copies may persist for a limited period before being overwritten according to our backup schedule.

We use administrative, technical, and organizational safeguards designed to protect information processed by the MCP Service. These safeguards may include encryption in transit, access controls, authentication and authorization checks, logging and monitoring, input validation, vulnerability management, and incident-response procedures.

No system is completely secure, and we cannot guarantee the absolute security of information. You are responsible for protecting your credentials and for using the MCP Service only through authorized clients and accounts. If you believe your credentials or account have been compromised, contact us promptly using the information below.

Depending on where you live and subject to applicable exceptions, you may have rights concerning your personal information, including the right to request access, correction, deletion, restriction, objection, or portability, and the right to withdraw consent where processing is based on consent.

To submit a privacy request, contact us. We may need to verify your identity and authority before fulfilling a request. If your account is provided by an employer or other organization, that organization may control certain account information and requests.

You may disconnect or revoke the MCP Service's access through the settings of your MCP client and, where applicable, your GlobalSource Partners account. Disconnecting the MCP Service does not automatically delete information already retained under this policy.

If you are in a jurisdiction that provides a right to appeal our response to a privacy request or to complain to a data-protection authority, you may exercise that right as provided by applicable law.

GlobalSource Partners and its service providers may process information in countries other than the country where you live. Where required, we use recognized safeguards for international transfers of personal information, such as contractual protections or other lawful transfer mechanisms.

The MCP Service is intended for business and professional users and is not directed to children under 13 or any higher minimum age required by applicable law. We do not knowingly collect personal information from children through the MCP Service. If you believe a child has provided personal information to the MCP Service, contact us so that we can take appropriate action.

The MCP Service interoperates with third-party MCP clients and platforms. Their privacy practices are governed by their own policies. This policy does not apply to information processed independently by OpenAI or another client provider, nor to third-party websites or services linked from MCP results.

We may update this policy from time to time. We will post the updated version at this URL and revise the "Last updated" date above. If required by law, we will provide additional notice of material changes.

You can contact us with questions, concerns, or requests regarding this policy or our privacy practices. Please include sufficient information to help us respond to your inquiry.