Privacy Policy
Last updated: April 15, 2026
AlphaCreek provides a Model Context Protocol ("MCP") server, documentation, and related websites and services (collectively, the "Service") that help you search and retrieve excerpts from U.S. Securities and Exchange Commission ("SEC") public company filings and related materials. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service.
1. Information we collect
We collect information you provide, information generated when you use the Service, and technical data:
Registration and account: email address, first name, last name, and password (stored using industry-standard hashing). We may also collect optional profile details if you choose to provide them.
Authentication and access: API keys, tokens, or similar credentials we issue to you, and metadata needed to validate requests (for example, key identifiers and expiration).
MCP and API activity: when your AI client calls our MCP server or related APIs, we process request metadata and payloads needed to operate the Service, such as tool names, search parameters, natural-language queries or prompts you send through those interfaces, timestamps, response status, and error logs. This may include company tickers, filing types, and similar retrieval parameters.
Support and communications: messages you send us (for example, via email), including their content and contact details.
Website and product usage: pages viewed, features used, and interactions with our sites or apps.
Device and network data: IP address, browser type, operating system, and diagnostic information.
SEC filings and EDGAR materials we index are public records. We do not receive your private corporate documents through the Service unless you choose to send us specific content (for example, in a support request).
2. Third-party AI clients and model providers
You may configure third-party applications (such as LLM clients or agent platforms) to connect to our MCP server. Those applications are operated by their respective providers. We do not control how those providers process data once our responses leave our systems. Their collection and use of information is governed by their own terms and privacy policies.
3. How we use your information
We use the information we collect to:
Provide, operate, secure, and improve the Service;
Authenticate users, enforce rate limits, and prevent abuse or fraud;
Communicate with you about the Service, including technical notices and support;
Analyze usage and performance in aggregate or de-identified form where appropriate;
Comply with law, enforce our terms, and protect rights and safety.
4. Sharing and disclosure
We do not sell your personal information. We may share information:
With vendors and service providers who process data on our behalf (for example, hosting, email delivery, analytics, and security), subject to confidentiality and processing obligations;
To comply with legal obligations or respond to lawful requests from public authorities;
To protect the rights, property, or safety of AlphaCreek, our users, or others;
In connection with a merger, acquisition, financing, or sale of assets, where permitted by law.
5. Retention
We retain information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the nature of processing.
6. Security
We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the email below. We may need to verify your request before responding.
8. Cookies and similar technologies
We use cookies and similar technologies to operate our websites, remember preferences, measure performance, and improve the Service. You can control cookies through your browser settings.
9. Children
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.
10. International users
We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Where changes are material, we will provide additional notice as appropriate (for example, by email or in-product notice).
12. Contact
Questions about this Privacy Policy: [email protected].