Privacy Policy
Last updated: December 2025
1. Introduction
Vestra AI ehf. ("we", "us", or "our") operates Vestra Discovery (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.
2. Information We Collect
Account Information
When you create an account, we collect information provided by your authentication provider (such as your email address and name).
Server Information
When you submit a server for indexing, we collect the information from your discovery.xml file, including server name, URL, descriptions, categories, and any images you provide.
Usage Data
We automatically collect certain information when you use the Service, including your IP address (for rate limiting), browser type, and pages visited.
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the Service
- Display your MCP server information to other users
- Authenticate your identity
- Enforce rate limits and prevent abuse
- Communicate with you about the Service
- Improve and optimize the Service
- Comply with legal obligations
4. Image Storage
When you submit a server with images (logos, covers, tool icons), we download and store copies of these images on our servers (via Vercel Blob storage) to ensure reliable display and compliance with our content security policies.
5. Data Sharing
We do not sell your personal information. We may share your information with:
- Service providers who assist in operating the Service (e.g., hosting, authentication)
- Law enforcement when required by law
- Other parties with your consent
Server information you submit is publicly displayed on the Service.
6. Data Retention
We retain your account information for as long as your account is active. Server information is retained until you remove the discovery.xml file from your server and request re-indexing, or until we remove it.
7. Your Rights
Depending on your location, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Delete your personal information
- Object to or restrict processing
- Data portability
To exercise these rights, please contact us at vestra@vestra.is
8. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.
9. Security
We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.
10. International Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
11. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us at vestra@vestra.is
Vestra AI ehf.
Iceland