Last Updated: September 15, 2026
This Privacy Policy explains how QBurst (“QBurst,” “we,” “us,” or “our”) collects, uses, processes, shares, and retains information in connection with the QBurst app and associated Model Context Protocol (MCP) services (the “App”).
The App enables users to discover, search, browse, and retrieve publicly available QBurst case-study information through supported conversational interfaces, including ChatGPT and Claude.
By using the App, you acknowledge the practices described in this Privacy Policy.
The App is designed to provide publicly available information about QBurst case studies.
The App is a read-only service and does not require users to create a QBurst account or provide personal information to use its case-study functionality.
When a user interacts with the App, the following types of information may be processed as part of a request:
This information is used only to process the request and return the appropriate case-study information.
The App does not require personal information in these fields.
Users should not intentionally submit unnecessary personal, confidential, sensitive, authentication, financial, health, or other private information as part of an App request.
The App may return publicly available QBurst case-study information, including:
The information provided by the App is intended to describe QBurst’s business and technology work that is publicly available.
To operate, maintain, secure, monitor, and troubleshoot the App, limited technical and operational information may be processed, including:
The App does not normally log complete MCP request arguments or complete MCP response payloads.
QBurst uses information processed through the App for the following purposes:
QBurst does not use information processed through the App for purposes incompatible with the functionality described in this Privacy Policy.
Information processed through the App may be processed by QBurst and by service providers necessary to host, operate, secure, monitor, maintain, and support the App and its associated infrastructure.
The App does not persist MCP tool arguments such as:
These tool arguments are not written by the application to a database, file, persistent cache, or application-level request history.
Operational logs may contain:
These logs are written to the application’s process output streams.
Depending on the production deployment environment, external infrastructure such as a Docker host, hosting platform, reverse proxy, or centralized logging service may independently collect, process, or retain technical information, logs, or HTTP traffic. Such processing and retention is determined by the applicable infrastructure configuration and provider policies.
QBurst may also disclose information when reasonably necessary to:
QBurst does not sell personal information submitted through or processed by the App.
The App is designed to minimize persistent storage of information associated with user requests.
Tool inputs, including search, industry, domain, limit, and id, are processed during the request.
These inputs are not persisted by the application in a database, file, persistent cache, or application-level request history.
Accordingly, the application does not define a separate persistent retention period for these tool inputs.
Public case-study information may be temporarily cached in application memory to improve performance.
The default cache lifetime is one hour (60 minutes).
Cached case-study information is removed when the cache entry expires or when the application process is restarted.
This cache is not maintained as a persistent user record.
The App may maintain MCP session state in application memory to support the MCP connection and request processing.
The default session expiration is 30 minutes after inactivity.
Session state is used to support the MCP connection and is not maintained as an application-level history of user requests.
Operational Log Retention: The application does not define a fixed retention period for operational logs. Application logs are written to the container’s standard output and error streams, and retention of these logs is determined by the Docker host, hosting platform, reverse proxy, or centralized logging service used to operate the application. Retention periods may vary depending on the deployment environment.
There is no repository-defined operational log retention period.
QBurst may retain information for a longer period where reasonably necessary to:
When information is no longer required and there is no applicable requirement to retain it, QBurst will take reasonable steps to delete, anonymize, or otherwise dispose of it in accordance with applicable requirements and operational practices.
Depending on applicable law, users may have rights relating to personal information processed by QBurst, including:
Because the App does not require a QBurst account and does not maintain an application-level history of user requests, QBurst may have limited ability to associate a particular App interaction with an identifiable individual.
To submit a privacy request or ask questions regarding this Privacy Policy, contact:
We may request information reasonably necessary to verify and process a privacy request.
QBurst uses reasonable technical and organizational measures designed to protect information processed through the App against unauthorized access, use, disclosure, alteration, or destruction.
The App follows data-minimization principles by limiting persistent storage of request information.
In particular:
However, no method of transmitting or storing information can be guaranteed to be completely secure. QBurst therefore cannot guarantee absolute security.
The App may be accessed through hosted conversational interfaces such as ChatGPT and Claude.
Information necessary to process a user’s request may therefore be transmitted between the host platform and the QBurst MCP service.
QBurst is responsible for the processing performed by its App and MCP services as described in this Privacy Policy.
OpenAI’s handling of information through ChatGPT and Anthropic’s handling of information through Claude are governed by the applicable platform privacy policies, terms, and data practices. QBurst does not control the independent processing, storage, or retention practices of those third-party platforms.
The App relies on infrastructure and service providers necessary to operate the MCP service.
Depending on the production environment, these may include providers supporting:
Such providers may process technical or operational information as necessary to provide their services.
Retention of information by external infrastructure providers may be governed by their respective configurations, contractual arrangements, and applicable policies.
Information processed through the App may be processed or stored in countries other than the country in which you are located, depending on the location of QBurst’s infrastructure and service providers.
Where required by applicable law, QBurst will take appropriate measures for international transfers or processing of personal information.
The App is intended for general informational and business use and is not specifically directed toward children.
QBurst does not knowingly seek to collect personal information from children through the App.
If you believe that a child has provided personal information to QBurst through the App, please contact dpo@qburst.com.
The App may provide links to QBurst websites, case-study pages, or other publicly available resources.
When you access an external website or service through a link provided by the App, that website or service may have its own privacy policy and terms.
QBurst is not responsible for the privacy practices of third-party websites or services that QBurst does not control.
QBurst may update this Privacy Policy from time to time to reflect:
When this Privacy Policy is updated, the Last Updated date will be changed accordingly.
We encourage users to periodically review this Privacy Policy.
Effective Date: September 15, 2026