Privacy Policy
This Privacy Policy explains how information is handled when you use the mcp-server-audit command-line tool and the professional security audit services operated by Guigui Wang ("Correctover", "we", "us"), an independent software operator, and this website at correctover.com/audit-service.
1. The free CLI collects nothing
The mcp-server-audit command-line tool runs 100% locally. It performs static analysis of the configuration file you provide. It does not make network requests, does not upload your configuration or scan results, does not embed analytics or telemetry, and does not contact any host named inside a scanned configuration. Source code is available under the MIT license for independent verification.
2. Information we collect on this website
- Inquiry data: if you email us or submit an audit request, we receive the information you send — typically your name, email address, the target repository/endpoint/config you choose to share, and your message.
- Technical/security logs: our hosting and CDN provider (Cloudflare) may collect standard server logs such as IP address, browser type, referrer, and request timestamps for security and abuse prevention.
We do not place advertising trackers, and we do not sell personal data.
3. Audit materials & confidentiality
Professional audits may involve source code, configurations, or trace logs you submit. We use these materials solely to perform the agreed audit, store them only as long as needed to deliver and re-verify the work (default retention: up to 90 days after delivery unless an NDA states otherwise), and delete them on request after any legal retention period. We do not use your proprietary materials to train models or to improve services for others.
4. Payments
Paid services are processed by our Merchant of Record (currently Creem / Armitage Labs OÜ), which acts as the seller of record for payment and tax purposes. When you pay, your card or payment details are entered on and handled by the payment provider; we receive only transaction confirmation, limited billing details, and contact information needed to deliver the service. The provider collects and remits applicable VAT/GST/sales tax. See the payment provider's own privacy policy for details.
5. Legal bases & your rights
We process inquiry data to take steps at your request before and during a contract, and technical logs for our legitimate security interests. Where data protection law applies (including GDPR/UK GDPR and PIPL), you may request access, correction, deletion, restriction, or portability of personal data, or object to certain processing. To exercise these rights, email wangguigui@correctover.com. We will respond within the period required by law.
6. International transfers
We operate from China and use global infrastructure (Cloudflare; our Merchant of Record). Data may therefore be processed outside your jurisdiction under appropriate safeguards, such as the provider's standard contractual terms.
7. Data security
We limit access to audit materials, use encrypted transport (HTTPS/TLS) for this website, and design the free tool so sensitive configuration never leaves your machine. No method of transmission or storage is perfectly secure, however.
8. Children
Our services are developer/business tools and are not directed to children. We do not knowingly collect data from minors.
9. Changes
If this policy changes materially, we will update the date above and, where required, notify active customers by email.
10. Contact
Questions or requests: wangguigui@correctover.com. This is the same support contact shown in the website footer.