Mindspace MCP privacy

The Mindspace Model Context Protocol (MCP) server lets you connect AI apps such as ChatGPT, Claude, Cursor, or Perplexity to your Mindspace Club account.

What is shared

Only after you sign in with OTP and approve the connection. Depending on the scopes you grant, the AI host may receive profile details, session/appointment data, wallet balances (not card numbers), journal and mood entries, and content recommendations.

What stays on Mindspace

Passwords, OTPs, payment card data, Razorpay identifiers, and internal database IDs are stripped and never returned by MCP tools. Mindspace PHP APIs remain the system of record. The MCP server does not write to MySQL directly.

AI hosts

Once data is sent to ChatGPT, Claude, or another host, it is processed under that host’s privacy policy. OpenAI’s Business Associate Agreement does not currently cover third-party MCP apps. Do not connect this server if you cannot accept that journal/mood data may appear in an AI conversation.

Retention

OAuth access tokens expire in one hour. Refresh tokens last 30 days. Authorization codes expire in 10 minutes. Audit logs store a hashed user id, tool name, and status — not OTPs or access tokens.

Contact

Mindspace Club — www.mindspace.club