Privacy Policy
Draft policy for MasaDeals. This page is a working draft and has not been reviewed by legal counsel.
What MasaDeals is
MasaDeals is a promo-code feed for AI shopping agents, exposed over an MCP server and a REST API. Agents query it at checkout and report back whether a code worked.
What we collect
- Query data: merchant identifier and cart context an agent sends (cart total, categories, country, and customer type) so constraints can be checked. We do not ask for or need names, payment details, or account credentials.
- Outcome telemetry: when an agent calls
report_outcome, we record the code, whether it applied, a failure reason if it did not, and a timestamp. This telemetry is what keeps success rates honest. - Server logs: standard request logs (time, endpoint, status) kept for operations and abuse prevention.
What we do not collect
We do not collect payment card numbers, merchant account passwords, or browsing history outside of calls made to MasaDeals itself. Do not send personal data in cart context — it is not needed for the service to work.
How data is used
Query and telemetry data are used to compute rolling success rates, derive code statuses (declared / verified / stale / dead), and operate and improve the feed. Aggregated, de-identified statistics may be shown publicly on merchant status pages.
Sharing
We do not sell personal data. Outbound merchant links may be affiliate links (see the Affiliate Disclosure); when a shopper follows one, the merchant and its affiliate network learn about that visit under their own privacy policies.
Retention and rights
Outcome telemetry is retained on a rolling basis aligned with the success-rate window, plus a reasonable operational period. Depending on your jurisdiction you may have rights to access, correct, or delete personal data we hold; contact us to exercise them. This draft will be updated once the policy has been legal-reviewed.
Contact
Questions about this draft policy: contact the MasaDeals operator via the project repository.