Privacy policy

Last updated October 16, 2026

1. Scope

This policy describes how MVPurr, the project studio for indie builders made by Recite Labs, handles information. It covers the studio at app.mvpurr.com, the marketing site at mvpurr.com, the MCP server at app.mvpurr.com/api/mcp and email we send from mail.mvpurr.com.

2. Information we handle

Depending on how you use the service, we may process:

  • GitHub account information used to authenticate you through GitHub OAuth, such as your name, email address, avatar and provider identifier;
  • project content you provide, including project names, briefs, chat messages, tasks, documents, whiteboards, milestones, calendar events and build requests;
  • email addresses of collaborators you invite to a project;
  • service records such as run status, events, timestamps and generated branch names; and
  • basic technical logs produced by our hosting, authentication and database providers for security and reliability.

MVPurr does not currently collect payment-card information.

3. How we use information

We use this information to authenticate users, provide the studio, generate the content you ask for, send transactional email such as collaborator invitations, maintain service security, diagnose failures and improve the product. We do not sell personal information.

4. Service providers

The current production service uses:

  • Cloudflare for website and application hosting, the application database (Cloudflare D1), transactional email and the AI gateway that AI requests pass through;
  • GitHub for sign-in (GitHub OAuth); and
  • Amazon Web Services for AI model inference (Amazon Bedrock, reached through the Cloudflare AI Gateway) and for the isolated build runner.

These providers may process technical data under their own terms and privacy policies.

5. Agents and MCP

When you connect an agent such as Claude Code to the MVPurr MCP server, you authorize it to act on your account through OAuth. The agent, and the model provider behind it, can read whatever the tools you grant return. You can see and revoke every connected agent in Settings → Agents and MCP, or from the Team page in the studio.

6. Early-access caution

Do not place secrets, private keys, regulated data or other highly sensitive information in a project brief, chat or document. The isolated build runner is in early access for invited projects.

7. Contact

For privacy questions or deletion requests, contact privacy@mvpurr.com from the email address on your account.