Privacy Policy

Medusa MCP stores workspace, membership, connection, authorization, and metadata-only audit information required to operate the control plane.

The platform does not persist prompts, model responses, or returned commerce payloads. Credentials are separated from AI-client tokens and are never exposed in the browser.

Alpha access is manually supported. Contact support before adding any store containing data that requires additional contractual or regulatory controls.