Privacy

What is stored

• The email address you signed in with, as the owner of each connection.
• Whether you granted write access.
• One tenant access token for Lytho, encrypted at the application layer, shared by every connection and replaced daily.

What is not stored

• Your Lytho password or the tenant's client secret in plain form. The secret lives only in the Worker's secret store.
• Your work data. Items, comments, and files are fetched from Lytho for a request and returned to your MCP client. A short in-memory cache holds read responses for about a minute and nothing is retained afterwards.
• Analytics, tracking, or request logs containing work data.

Deleting your data

Use delete a connection to revoke every connection held by an email address.