API and MCP privacy notice
Updated November 4, 2026. This notice describes the SecProbe research API and MCP integration. Contact staff@secprobe.io about API data or deletion requests.
Information used for requests
Requests include a self-reported personal or business contact email and the calling application's name. MCP calls pass these as contact_email and agent; REST calls use identification headers. The email is not verified and is not an authentication credential. Do not supply another person's email without their permission.
SecProbe stores the supplied contact email, latest agent name, timestamps, request and rejection totals, and an opaque network identifier derived from the caller's address. These records support quotas, troubleshooting, and contact blocking. Providing a contact does not subscribe it to a mailing list or trigger a verification email.
Research questions and model processing
Filing retrieval reads SecProbe's stored public SEC correspondence. Research answers send the question, requested research scope, and selected filing passages to OpenAI to plan and generate the answer. Avoid including confidential information in questions or filters. Your use of ChatGPT or another MCP client is also subject to that provider's own data practices.
Logs and retention
Application request logs include contact association, agent, applied filters and request options, endpoint, status, duration, returned record and text counts, and rejection details. They exclude API credentials, document bodies, research-question text, and continuation tokens. Infrastructure providers may retain ordinary connection and operational logs separately.
Application request logs older than 30 days and expired quota counters are removed in bounded batches during traffic. Cleanup can lag when traffic is absent or a backlog exists. Contact totals and blocks remain until removed by an administrator. Successful generated answers may be cached temporarily under the configured cache lifetime (15 minutes by default).
Access and returned information
Request logs and contact controls are available to authorized SecProbe administrators. Tools return requested public filing evidence, citation metadata, generated research, and scope limitations. Contact records, opaque network identifiers, and administrative logs are not included in tool results.
Contact staff@secprobe.io to request review, correction, or deletion of a contact record. Self-reported addresses do not establish ownership; requests may require an ownership check before records are changed.