Last updated: September 6, 2026
This Privacy Policy describes how Sooks Labs LLC ("Company", "we", "us", "our") collects, uses, and protects your information when you use the Secondhand MCP service ("Service"). We are committed to keeping your data minimal and your privacy respected.
When you create an account, we collect:
Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers. We receive only a Stripe customer ID and subscription status.
If you choose to connect eBay, your eBay Developer API credentials are encrypted using AES-256 encryption before storage. They are decrypted only momentarily during request processing and are never logged or transmitted to any third party.
When you connect the Service to an AI assistant (Claude, ChatGPT, etc.), OAuth access tokens are issued and stored as cryptographic hashes. We cannot reverse these hashes to obtain the original tokens.
We do not collect, store, or log:
| Data | Purpose |
|---|---|
| Email address | Authentication, account notifications, billing receipts |
| Usage counts | Enforcing plan limits, displaying usage on account page |
| Stripe customer ID | Managing subscriptions and billing |
| eBay credentials | Authenticating with eBay API on your behalf |
We do not sell, rent, or share your personal information with third parties for marketing purposes.
The Service relies on the following third-party providers, each with their own privacy policies:
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & authentication | Email, encrypted credentials |
| Stripe | Payment processing | Email, payment details (entered directly with Stripe) |
| Resend | Transactional email delivery | Email address (for sending auth emails) |
| Fly.io | Application hosting | Standard server logs |
When you delete your account, all associated data (profile, usage, credentials, tokens) is permanently deleted from our database.
The Service uses cookies strictly necessary for authentication (Supabase session tokens). We do not use advertising cookies.
We implement industry-standard security measures to protect your data:
No system is 100% secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.
You have the right to:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). If you are in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) and the UK GDPR, including the right to object to processing and to lodge a complaint with your supervisory authority. If you are in Australia, you have rights under the Privacy Act 1988, including the right to complain to the Office of the Australian Information Commissioner. If you are in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Contact us at support@secondhandmcp.com to exercise any of these rights.
Your data is stored and processed in the United States. If you use the Service from outside the United States, you consent to your account information being transferred to and processed there, where privacy laws may differ from those in your country.
The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.
We do not sell your personal data. We have not sold personal data in the preceding 12 months, and we have no plans to do so.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when this policy was last revised.
For questions or concerns about this Privacy Policy or your data, contact us at:
Sooks Labs LLC
support@secondhandmcp.com