Thruact is a product of EDITH AI FZCO, Unit UT-12-CO-213, DMCC Business Centre, Level 12, Uptown Tower, Dubai, UAE. Contact: info@thruact.com.
This policy describes what we collect when you use https://thruact.com, the remote MCP at https://thruact.com/mcp, and related services (the “Service”).
What we collect
- Account data: email address, name if you provide it, and sign-in via GitHub or Google.
- Workspace data: tokens you mint, keys you store in the vault, capabilities you call, run receipts, wallet holds and balances.
- Technical data: IP address, user agent, MCP client, timestamps, and error logs needed to route and fail over calls.
- Payment data (when billing is on): handled by Stripe. We do not store full card numbers.
We do not sell personal data.
How we use it
- To run the Service: authenticate you, route jobs, fail over providers, show receipts, and operate the public scanner.
- To secure the Service: detect abuse, expired tokens, and failed auth.
- To email you about your account, security, and material changes to this policy.
- When billing is on: to charge prepaid wallet top-ups through Stripe.
Legal basis (UAE PDPL)
We process this data to perform the contract when you create an account or call the API, and where required to operate and secure the Service.
Sharing
- Infrastructure and auth providers (hosting, GitHub, Google) as needed to run the Service.
- Tool providers only with the inputs required to fulfill a capability you requested. Do not send secrets in capability input.
- Stripe, when you pay.
- Authorities if required by UAE law.
We do not share vault keys with your agent. Keys are injected server-side.
Retention
Account and run records are kept while the account is open and for a reasonable period after closure for security and accounting. You can ask us to delete an account at info@thruact.com.
Cookies
See https://thruact.com/cookies. Essential cookies for sign-in and session only, unless you later accept analytics.
International transfers
The company is in Dubai. Infrastructure may process data outside the UAE. We take reasonable steps to protect it.
Your rights
You may request access, correction, or deletion of your personal data, and withdraw consent where processing is consent-based, by emailing info@thruact.com.
Children
The Service is not directed at children under 16.
Changes
We will post updates on this page and change the date above.
Contact
EDITH AI FZCO
Unit UT-12-CO-213, DMCC Business Centre, Level 12, Uptown Tower, Dubai, UAE
info@thruact.com