Privacy Policy
Privacy Policy
How Manu Labs, LLC handles personal information when you use Patch MCP, and when an AI assistant using Patch MCP calls you. Effective September 21, 2026.
- 1. Who this covers
- 2. What we collect
- 3. How we use it
- 4. Who we share it with
- 5. Text messages
- 6. If you received a call
- 7. How long we keep it
- 8. Cookies and links
- 9. Security
- 10. Your choices and rights
- 11. Children
- 12. Where data is processed
- 13. Changes
- 14. Contact
1. Who this covers
Two kinds of people are covered. Users verify a phone number with Patch MCP and connect an AI agent to it. People called answer, or are recorded on, a call placed through the Service. Visitors who simply browse staging.patchmcp.com are covered too. Manu Labs, LLC is the controller of this information. It does not cover the AI client you connect (Grok, Claude, ChatGPT and so on), which handles your conversation with your agent under its own privacy policy.
2. What we collect
From users
- Phone number. The mobile number you verify. It identifies your account and is the caller ID on every call you place. We also record whether it is verified.
- Name and call defaults. The name you give for the assistant's opening disclosure (entered on your account page or supplied by your agent), the voice you choose and your default maximum call length.
- Billing details. If you subscribe, the email address you give Stripe, your Stripe customer and subscription identifiers, your plan, its status and billing period. Card numbers go directly to Stripe; we never see or store them.
- Connected apps. Which MCP clients you have authorized, when, and the tokens that let them act for you (stored hashed).
- Sessions and device data. A session cookie, your browser's user-agent string, and your IP address, which we use for sign-in, security and rate limiting.
- Text messages. The messages sent to your number through the Service — verification codes, the updates your agents send you, our notices — and anything you text back, pictures either way included, with their delivery status (section 5).
- Usage records. For every call and message, what your plan was charged for it and what it cost us to carry: connected minutes, message parts, and the tokens and seconds of audio our AI provider billed. They are what your account page's usage figures are made of.
- Support messages. Anything you send to [email protected].
From calls
- Call records. For every call: the destination number and name your agent supplied, the objective and any context, the maximum length, when it was placed, answered and ended, how it ended and why, its duration, whether a machine or a person answered, and any carrier error.
- Audio and transcript. Calls are recorded from the moment they are answered and transcribed in real time. The transcript, a structured result extracted from it (outcome, summary, commitments, follow-ups, key facts) and a link to the recording are attached to the call.
- Do-not-call requests. Numbers that ask for no more calls, whether during a call or on the do-not-call page, together with the reason and the call it came from.
We do not collect information from data brokers, and the site carries no advertising or analytics trackers.
3. How we use it
- to place your calls from your number, run the voice assistant during them, and return results to you and your agent;
- to verify that you control your number, sign you in, and keep your account and connected apps secure;
- to screen each objective before dialing, enforce the opt-out list and your plan's allowance, and investigate abuse;
- to text you verification codes, the updates your agents send you and notices about your account, and to pass your replies to the agent they are meant for;
- to meter free calls, free texts and plan usage, take payment, and send receipts;
- to run, monitor, debug and improve the Service, and to keep logs of requests and errors;
- to respond to you, notify you of changes to the Service or these policies, and comply with law, carrier and regulatory requirements.
Personal information is never sold, never used for advertising, and never used by us to train AI models. Our AI provider handles call content only to conduct and review your calls, as described below.
4. Who we share it with
The Service runs on the following providers, each of which receives only what its role requires and is bound by its own terms and privacy policy:
| Provider | Role | What it receives |
|---|---|---|
| Telnyx | Telephony and messaging: places calls, streams audio, records calls, carries text and picture messages to and from your number (and hosts the pictures you send for 30 days), holds your number as a verified caller ID | Your number, the destination number, call audio and recordings, answering-machine detection results, the text and picture messages exchanged with your number |
| xAI (Grok) | AI: the real-time voice assistant, objective screening, and extraction of the structured result | The objective, context and names supplied for the call, the live audio of both parties during the call, and the transcript |
| Stripe | Payments, subscriptions, receipts and the billing portal | Your email, plan, payment method and billing history |
| Railway | Hosting: the application, its database and cache | Everything stored by the Service |
| Google Fonts | Web fonts on staging.patchmcp.com | Your IP address and browser details when a page loads |
We also share information with your connected AI clients (statuses, transcripts, results and links for the calls they placed), with the people you call (your name as given in the disclosure and your phone number as the caller ID), and when required with carriers, regulators, law enforcement or courts, or to protect the rights and safety of users, people called, or Manu Labs, LLC. If Manu Labs, LLC is acquired or the Service is transferred, this information may move with it under the same commitments.
5. Text messages
Your number is texted for two reasons: the one-time codes that prove you control it, and the updates a connected agent sends you — how a call turned out, an answer it was waiting for — along with our own notices about your account. Agent updates and notices come from Patch MCP's toll-free number, (833) 680-0780, and go to the verified number on your account and nowhere else; the Service cannot text anybody but you. Texts you send back to that number are passed to your connected agent, which is what they are for.
For each message we store its direction, the number it went to or came from, its body, the links to any pictures attached, its status (queued, sent, delivered, or failed with the carrier's error) and the times it was created, sent, delivered or received. A picture your agent sends you is fetched by Telnyx from the public link your agent supplied; a picture you send is hosted by Telnyx for 30 days and passed to your agent as a link. Telnyx carries every message and sees the same details. Your connected AI client sees the messages it sent and the replies you texted back, under its own privacy policy.
No mobile information will be sold or shared with third parties for promotional or marketing purposes. Your number and your messages are used only to run the Service as described in section 3. They are never sold or rented, never used for advertising, never used to train AI models, and never shared outside the providers listed in section 4, each of which handles them only so that a message can be delivered.
Reply STOP to any message to stop agent updates and service notices; the opt-out is recorded on your account and kept until you text START. Verification codes continue either way, because they are how you prove the number is yours. Messages are kept with your account and deleted with it (section 7).
6. If you received a call
A call from an AI assistant using Patch MCP was requested by one of our users. The assistant should have opened by telling you it was an AI acting for that user and that the call was being recorded, and it will confirm it is an AI if you ask. Everything said on the call is recorded and transcribed, and the recording, transcript and a summary go to the user who requested the call. The number on your caller ID is that user's own mobile number, which you can use to reach them.
You can:
- tell the assistant you would rather not continue, and it will end the call;
- ask the assistant for no more calls, or enter your number on the do-not-call page, after which no user of the Service can reach it;
- email [email protected] to ask what we hold about a call to your number, or to ask us to delete the recording and transcript. We will need to confirm you control the number.
7. How long we keep it
- Account, settings and call records (including transcripts and results) are kept for as long as your account exists so you and your agents can review your history, and deleted within 30 days of a verified deletion request.
- Recordings are stored by Telnyx and streamed through links that expire after about an hour; each is deleted with the call record it belongs to, or earlier on request.
- Do-not-call numbers stay on the list for good; a block we forgot would be no block at all.
- Text messages to and from your number are kept with your account, deleted within 30 days of a verified deletion request, and a recorded STOP is kept for good so the opt-out is not lost. Pictures attached to them are hosted by Telnyx for 30 days.
- Sessions expire after 30 days; connected-app tokens are removed after they expire or when you disconnect the app; verification codes expire within 10 minutes.
- Server logs (request metadata, errors, call identifiers; never call audio) are kept for a limited period for security and debugging.
- Billing and usage records are kept as long as tax and accounting law requires.
8. Cookies and links
staging.patchmcp.com sets one cookie, a session cookie that keeps you signed in for up to 30 days. It is not used for tracking. Links your agent gives you to your account, a live call or checkout carry a signed, expiring token that signs you in without a password; they are private to you.
9. Security
Traffic to the Service is encrypted in transit. We store access tokens only as hashes, every link to a recording or a live call carries a signature and an expiry, events our providers send us are checked against their signatures, and your calls are visible only to you or to someone holding one of your private links. No system is perfectly secure; if we learn of a breach affecting your information we will notify you as the law requires.
10. Your choices and rights
From your account page you can change your name and call defaults, disconnect apps, and manage or cancel your subscription. By emailing [email protected] you can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete your account and calls, or object to a use of it. We will verify the request, usually with a code texted to the number concerned, and respond within 30 days. The law where you live (California, Canada and the European Economic Area, for example) may give you some of these rights, along with the right to complain to a supervisory authority; we extend them to everyone regardless, and exercising them never changes how we treat you.
11. Children
The Service is for adults. We do not knowingly create accounts for anyone under 18, and users may not direct calls at children. If you believe a child has an account or has been called improperly, contact [email protected] and we will act on it.
12. Where data is processed
Manu Labs, LLC is based in the United States and the Service is hosted there. Calls can only be placed to the United States and Canada. If you use the Service from elsewhere, your information is transferred to and processed in the United States, where privacy law may differ from your country's.
13. Changes
We may update this policy. The effective date at the top shows the current version. For material changes we will give notice on staging.patchmcp.com, by text message to your account number, or by email if we have one, before the change takes effect.
14. Contact
Manu Labs, LLC · [email protected]. Please include the phone number concerned so we can find the right records.