Summary
Membership MCP is operated by Caseproof, LLC, a Utah limited liability company ("Membership MCP", "we", "us"). It covers this website (membershipmcp.ai), the account app (app.membershipmcp.ai), the hosted relay that connects your AI to your site, and the Membership MCP WordPress plugin.
We follow the same principles as MemberPress:
- We don't ask for personal information unless we truly need it.
- We don't sell your information, and we share it only to run the service, to comply with the law, or to protect our rights.
- We don't keep personal information on our servers unless the service needs it to keep working.
In short: we hold your account email, your plan and the sites you connect. The tool calls your AI makes pass through our relay to your site and back; we log that each call happened, not what was in it. Your conversations with your AI stay with your AI provider.
What we collect
Your account. The email address you sign in with, the plan you are on, and when you signed up. Sign-in uses a one-time code sent to that email, so we never hold a password for you.
Your connected sites. The address of each site you connect, the date it was connected, and an encrypted credential the relay uses to reach that site. We never receive your WordPress password.
Tool-call records. For each tool call that passes through the relay: which site and tool, whether it worked, how long it took, the time, and the name and version of the AI app that sent it. We use these to count your daily allowance and to keep the service healthy. We do not store the call's arguments or results, so the names, emails and amounts in your membership data are not kept in our logs.
Membership data in transit. When your AI asks your site a question, the answer travels back through the relay. It may contain your members' names, emails, plans and payment history. The relay passes it through to your AI and does not keep a copy. For that data we act on your behalf, as your processor; you remain responsible for it as the site owner.
Billing. If you choose a paid plan, Stripe collects your card details on its own checkout pages. Stripe tells us your plan and billing status; we never see your card number.
Support. If you email us, we keep the conversation and anything you choose to send.
Plugin notices. If you ask on our Supported plugins page to hear when a plugin works with Membership MCP, we keep your email and the plugin you chose, and use them only to send that notice. Email [email protected] to be taken off the list.
Website visits. Like most websites, our servers see the information browsers send with each request, such as IP address, browser type, referring page and the time of the visit, and keep it briefly in server logs for security.
What we don't collect. Your prompts and chats with Claude, ChatGPT or Cursor, your AI provider's keys, and your WordPress password.
How we use it
- To run the service: sign you in, connect your sites, forward your AI's tool calls, and count them against your plan.
- To bill you through Stripe when you are on a paid plan.
- To answer your support requests.
- To keep the service secure and working: spot abuse, investigate errors and plan capacity.
- To send account email you need, such as sign-in codes, receipts and notices about changes to the service or these policies. We may occasionally email you about new features; every such email has an unsubscribe link.
We do not use your data to train AI models, and we do not run an AI model on it.
Who receives it
Only the people and companies that need it to run the service, and who have agreed to protect it:
- Our employees and contractors, and affiliated companies that help operate and support the service.
- Our sub-processors, listed with their purpose on our Security page: hosting, billing and email delivery.
- Your AI provider. When you connect Membership MCP to an AI app, the data you ask about goes to that app's provider so it can answer you, under the provider's own terms. That is OpenAI for ChatGPT, Anthropic for Claude and Cursor for Cursor. Read their privacy policies: OpenAI, Anthropic, Cursor.
- Authorities, when a subpoena, court order or other lawful request requires it, or when we believe in good faith that disclosure is needed to protect the rights, property or safety of Membership MCP, our customers or the public.
We never rent or sell personal information.
Retention
We keep your account information while your account is open. Tool-call records are kept as long as we need them to run, bill and secure the service, then deleted. When you delete your account we remove your account and connected-site records, except what we must keep for tax, billing or legal reasons. Billing records are kept as long as the law requires.
Your controls
- Disconnect a site from your account at app.membershipmcp.ai, or from the plugin on the site itself.
- Pause all changes, or limit a connection to reading, in the plugin's settings.
- See every call your AI made in the activity log on your site, under MemberPress › MCP.
- Unsubscribe from product email with the link in any message.
- Ask us for a copy of your data, or to correct or delete it, by emailing [email protected] from your account address.
Security
We take reasonable measures to protect information against unauthorized access, use, change or destruction. Calls between the relay and your site are signed and checked on both ends, site credentials are stored encrypted, and data is encrypted in transit. Our Security page explains the safeguards in detail, including how we will tell you if something goes wrong.
Cookies
This website sets no tracking cookies and loads nothing from other companies. The account app at app.membershipmcp.ai uses cookies to keep you signed in and to protect against forged requests; it does not work without them. Stripe sets its own cookies on its checkout pages. You can set your browser to refuse cookies, but you will not be able to sign in.
International transfers
Caseproof, LLC is based in the United States, and the service runs on servers in the United States. If you use Membership MCP from outside the US, your information is transferred to and processed in the US. Where the law requires it, we rely on appropriate safeguards for those transfers, such as the European Commission's standard contractual clauses.
GDPR rights
If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access the personal data we hold about you, to correct it, to delete it, to receive it in a portable format, to object to or restrict how we use it, and to withdraw consent where we rely on consent. We process account data to provide the service you signed up for (contract), and to keep it secure and improve it (legitimate interests). To use any of these rights, email [email protected]. You can also complain to your local data protection authority.
For your members' data that passes through the relay, you are the controller and we are your processor. If a member asks you about their data, we will help you answer.
Children
Membership MCP is a tool for running a business. It is not directed at children, and we do not knowingly collect information from anyone under 13. You must be 18, or the age of majority where you live, to open an account.
Business transfers
If Caseproof, LLC, or substantially all of its assets, were acquired, or in the unlikely event that it goes out of business or enters bankruptcy, user information would be one of the assets transferred to or acquired by a third party. Any acquirer may continue to use your information only as this policy describes.
Changes
We may change this policy from time to time. We will post every change on this page with a new "Last updated" date, and for material changes we will also email the address on your account before they take effect. Continuing to use Membership MCP after a change means you accept the updated policy.
Contact
Questions about this policy or your data: [email protected]. Membership MCP is operated by Caseproof, LLC, a Utah limited liability company, 755 S Main St. STE 4-276, Cedar City, Utah 84720.