The short version: the tools ask for no account and no personal details, there is no telemetry, and your own files, returns and prices stay on your machine when you run the local server.
The canli-mcp package, run on your machine
- Collection: Canli Capital receives no telemetry, analytics or crash reports from the package.
- What leaves your machine: a data tool sends the company, series, symbol or search words you asked about to the source of that data. These are public bodies such as the SEC, the Treasury and central banks, other public sources such as Yahoo Finance and Cboe, and canlicapital.com for the point-in-time fundamentals and the research record. Calculation tools send nothing. Your files, returns and prices are not sent.
- What stays on your disk: a cache of public data in
~/.cache/canli-fundamentals, trial ledgers and any paper order log in~/.canli, and an audit log only if you turn one on. Delete those folders to remove them. - Paper trading: only if you set your own Alpaca paper keys, and then only to Alpaca. The keys stay in your environment.
The hosted MCP servers
These are canlicapital.com/mcp, /mcp/canli, /mcp/fundamentals and /mcp/research.
- Collection: each request carries the tool and the arguments you or your AI client sent. Do not send private data to a hosted server. Your address is used to limit requests per minute, in memory in the function that answers.
- Use and storage: a request is answered and then dropped. Our code does not write tool arguments or results to any store and keeps nothing between requests. The exception is hosted validation, below.
- Hosted validation: for an API key it stores a SHA-256 hash of the key, its optional label, its creation, last-use and revocation times and the site that requested it, plus a daily call count. For key issuance it stores a daily count per client, where the client is the request address hashed with a secret salt. For each receipt it stores the endpoint, a SHA-256 hash of your input, the verdict and a timestamp, not the input itself. In the package's local mode, none of this happens.
- Conversations: the servers see only the calls your client sends, not your chat, memory or files.
This website
The site has no advertising or tracking scripts and asks for no account. It counts a few anonymous actions a day, such as "a claim was checked": one number per action per day, with no cookies, no identifier, no address and none of what you typed. To count a return visit, your browser keeps the date of your last visit on your own device and sends only the word "returned". A claim you check is sent to our server to read the filings and is not kept. The waitlist form, where one is offered, stores the email address you enter so that we can write to you about what you signed up for.
Third parties
We do not sell or share personal data. The site and hosted servers run on Vercel, whose platform keeps its own standard request logs (method, path, status and time) under its own retention. API-key records are held in Supabase. When a hosted tool reads a public source, that source sees the request coming from our server, not from you.
Retention
Hosted tool calls are not retained by our code. API-key and receipt records are kept while the service runs, so that receipts can be checked later. Revoke a key to stop its use, or ask us to delete its record.
Children
The tools are for developers and researchers and are not directed at children. They ask for no personal details.
Contact
Open an issue at github.com/arhancanli/canli-mcp/issues. Do not put private details in a public issue; say that you need a private channel and we will arrange one.
Changes to this policy are published here and in the site's public repository, with its history.