Privacy Policy
Effective October 9, 2026
Conceive and Believe (“the service”, “we”) is an MCP server at
mcp.conceiveandbelieve.com that stores your practice records and returns them to the AI
assistant you connect. It is run by Wayne Nilsen. We do not provide an AI model, and we collect only what is
needed to keep your records and give them back to you.
What we collect
| Category | What exactly | Kept for |
|---|---|---|
| Account | Email address; name (optional); password, stored only as a salted PBKDF2 hash, never in plain text. | Until you delete your account |
| Preferences | Time zone and quiet hours, so that “what's due today” is computed in your local time. | Until you delete your account |
| Practice records | What you or your assistant save on your behalf: statements, plans, logs, check-ins, answers to inventory questions, schedules and progress for each practice. | Until you delete the record or your account |
| Sign-in tokens | OAuth access and refresh tokens issued to the assistant you connect, and single-use password-reset tokens (stored hashed). | Until they expire or are revoked; reset tokens expire within hours |
| Request logs | Route name, timing, status code and error text. No record content. | 7 days |
We do not use cookies for tracking, and this website has no analytics. The sign-in pages set only the cookies needed to complete a login.
What you should not enter
The service is not built for, and you should not store, payment card numbers, bank details, government identifiers (such as Social Security or passport numbers), health or medical records, or passwords to other services. Keep notes about other people (for example members of a study group or alliance) to what you need, and leave out their sensitive details.
Why we use it
- To store your practice records and return them to your assistant when it asks on your behalf.
- To work out what is due for you today, in your time zone and outside your quiet hours.
- To sign you in, keep your account secure, and send password-reset email you request.
- To keep the service running: request logs are used only to find errors and measure speed.
We do not sell your data, use it for advertising, build profiles from it, or use it to train AI models.
Who receives it
- Cloudflare, Inc. hosts and processes the service (Workers, D1 database, KV storage and email sending) as our infrastructure provider. Data is stored in Cloudflare's network and encrypted at rest by Cloudflare.
- The AI assistant you connect (for example ChatGPT or Claude) receives the records it requests on your behalf, within the permissions you grant when you connect. Its provider handles your conversations under its own privacy policy, which we do not control.
- We may disclose data if required by law, and only to the extent required.
No one else receives your data. There are no third-party analytics, advertising or data-broker integrations.
How long we keep it
Account data, preferences and practice records are kept until you delete them or your account. Request logs are deleted after 7 days. When you delete your account, your data is removed from the live database within 30 days of your request; copies in Cloudflare D1 point-in-time recovery backups age out within a further 30 days.
Your choices and rights
- Ask your assistant to show, change or delete any record at any time.
- Disconnect the service from your assistant to revoke its access.
- To export your data or delete your account, email waynenilsen@gmail.com from the address on the account. We act within 30 days.
- Depending on where you live you may have further rights (access, correction, deletion, portability, objection). Email us and we will honor them.
Security
All traffic uses HTTPS. Passwords are hashed with PBKDF2-SHA256. Access to records requires an OAuth token scoped to your account. No system is perfectly secure; tell us at once if you suspect a problem.
Children
The service is not intended for anyone under 18, and we do not knowingly collect data from them.
Changes
If we change this policy we will update the date above, and for material changes we will email account holders before the change takes effect.
Contact
Wayne Nilsen, waynenilsen@gmail.com