This notice covers the FIRCY MCP connection to an AI app. The AI provider’s terms and your organisation’s agreement with FIRCY also apply.
Information used by the connection
When you connect, FIRCY uses your existing account, organisation membership and permissions to authorise access. FIRCY records the connected app, approved access, connection dates and revocation status. Short-lived access credentials and rotating renewal credentials allow the app to remain connected.
When you ask the app to use FIRCY, the app sends tool requests and receives the information your connection is authorised to retrieve. That information can include security activity, findings, and investigation context. Additional information depends on your approved read categories. The app provider receives returned information and processes it under its own terms and your organisation’s settings.
Connection security and operational records
FIRCY checks current access when the connection is used. It records operational connection events to diagnose failures and support revocation. FIRCY does not receive the prompts you type into your AI app; it receives only the tool requests the app sends. FIRCY’s connection and request records are designed to exclude token values and returned customer records. This notice does not describe your AI provider’s logs or retention.
Your controls
You can disconnect an app in AI connections. Organisation administrators can revoke connections and disable this feature. Revocation stops future authorised retrieval; it does not remove information already received by the AI provider.
For access, deletion or privacy enquiries, use your existing FIRCY support channel or contact FIRCY. The trial-form privacy notice covers trial enquiries separately.