Privacy Policy
Effective: 24 August 2026.
This notice explains how ServerOpsMCP, operated under the AgentForge Labs brand, handles personal information when you visit the commercial website, buy a plan, configure targets or use the control plane. The controller for our own business processing is the service operator identified in the applicable order or invoice.
1. Account and contact data
We may process name, work email, organization, support communications, subscription/billing identifiers and account preferences necessary to provide and administer the commercial service.
2. Server and configuration metadata
The service may process target aliases, hostnames or IP addresses, ports, server users, default directories, security-mode settings, labels, proxy settings, connection status and related configuration. Credentials such as SSH keys or tokens should be supplied only through protected server-side configuration. We do not intentionally expose credential values in public UI, marketing pages or ordinary operational output.
3. Operational data
To perform authorized operations, ServerOpsMCP may process commands, tool arguments, exit status, timestamps, file paths, service/container metadata, health metrics, log excerpts, repository metadata, deployment status, backup metadata and other output requested by the customer. Such data can contain personal or confidential information depending on the connected server.
4. Usage and security data
We may process IP address, device/browser data, request IDs, authentication events, audit events, security-policy decisions, error reports, usage counts and diagnostics to authenticate users, secure the service, enforce plan limits, troubleshoot failures and investigate abuse.
5. Payments
Checkout may be handled by Dodo Payments or Lemon Squeezy. Full card numbers and card-security codes are handled by the payment provider rather than stored by ServerOpsMCP. We may receive order, customer, plan, tax jurisdiction, transaction status and subscription identifiers for provisioning, accounting, fraud prevention and support.
6. Purposes and legal bases
We process personal information to perform the service and our contract; authenticate accounts and integrations; execute authorized requests; provide support; meter and bill usage; maintain security and reliability; prevent fraud/abuse; comply with law; and improve product performance. Depending on jurisdiction and context, legal bases may include contract, legitimate interests, legal obligations and consent.
7. Sharing
We may share information with infrastructure, storage, security/observability, support and payment providers needed to operate the service; with connected systems and destinations you instruct us to use; with professional advisers under confidentiality; or with authorities where legally required. We do not sell server logs or command output to advertising data brokers.
8. Retention
Configuration, audit events, command/tool metadata, support records and diagnostic output are retained according to product settings, plan limits, security needs and legal obligations. Highly transient command output may be retained only long enough to return the requested result unless logging/audit configuration requires otherwise. Billing/accounting records and security events may be retained longer. Backups can retain deleted data until normal rotation expires.
9. International transfers
Depending on infrastructure, connected services and payment providers, data may be processed in the European Economic Area, United States or other countries. Where required, we use lawful transfer mechanisms such as adequacy decisions, Standard Contractual Clauses or another permitted safeguard.
10. Security
Safeguards may include strict host-key verification, least-privilege server accounts, protected server-side secrets, explicit security modes, authenticated MCP/API access, transport encryption where supported, audit/security logging, dependency review, backup controls and incident-response procedures. No remote-administration platform can eliminate all risk; customers remain responsible for target hardening, credentials, backups and access policy.
11. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain portability, withdraw consent or complain to a data-protection authority. Rights may be limited where retention or processing is legally required or necessary to establish or defend legal claims.
12. Customer-controlled data
When a business customer directs ServerOpsMCP to process personal data from its servers, logs or files solely to perform requested operations, the customer ordinarily acts as controller and the Provider acts as processor. The Data Processing Addendum applies to that processing.
13. Children
The commercial service is intended for professional infrastructure administration and is not directed to children under 18.
14. Trademark notice
Linux® is the registered trademark of Linus Torvalds in the U.S. and other countries. References to Linux describe compatibility or target systems and do not indicate endorsement or affiliation.
15. Changes and contact
We may update this notice as the service or law changes and will post a revised effective date. Privacy requests can be submitted through the support contact shown in the service, order confirmation or purchase receipt. Never include passwords, SSH private keys or API tokens in a privacy request.