Privacy policy
Covers the AI-assistant tools at https://mcp.furnigen.app and the pages at
https://go.furnigen.app. Version: 2026-10-04-draft.
1. Who is responsible
Controller: [Full name], sole proprietor (FOP), Ukraine, [поштова адреса для звернень]. Data requests: privacy@furnigen.app.
2. What we process and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Tool call inputs your AI assistant sends (for example rooms, route, list of procedures) | to run the calculation | performing your request (GDPR Art. 6(1)(b)) | not stored: the calculation is computed and returned to the assistant; the log keeps only the tool name, time, outcome (success/error) and a pseudonymous identifier |
| Technical data: IP address, time, tool name | abuse prevention, rate limits, diagnostics | legitimate interest (Art. 6(1)(f)) | logs up to 30 days; rate counters until the end of the day |
| Sign-in (OAuth): Telegram ID and name or the test account login; OAuth client data (app name, redirect address) | so that the assistant can act for you with tools that send a request | performing your request (Art. 6(1)(b)) | while the connection is active; tokens are stored only as hashes, access tokens last 1 hour, refresh tokens 30 days |
| Contact details on the hand-over page (name, phone or email, comment), the consent text and its hash, a hash of the IP address, user agent | to send your request to the named partner and to prove your consent | your consent (Art. 6(1)(a)) | 90 days, then contact details are deleted automatically |
| Health data (the list of dental procedures in the calculation), if you send it to a clinic | so that the clinic can prepare an offer | separate explicit consent (Art. 9(2)(a)) | as contact details: 90 days |
Our tools never ask for your name, contact details, date of birth, documents, images, conditions or medication. Please do not enter them in a chat with an assistant for our tools.
3. Who receives data
- The partner named in the consent text — only after you tick the consent box, and only that partner.
- Processors the service cannot run without: Cloudflare, Inc. (secure connection and traffic delivery; processing outside Ukraine and the EU is possible under standard contractual clauses).
- Authorities — only where the law requires it.
We do not sell data and do not use it for advertising.
4. Cookies
Pages at https://go.furnigen.app set no cookies and load no third-party scripts or analytics. The OAuth
sign-in page uses the Telegram login widget loaded from telegram.org.
5. Your rights
You can ask what data we hold about you, have it corrected or erased, restrict processing, withdraw consent at any time (with effect for the future), object to processing and receive your data in a portable format. Write to privacy@furnigen.app — we answer within 30 days. You may complain to the Ukrainian Parliament Commissioner for Human Rights or, in the EU, to your supervisory authority.
6. Children
The service is not intended for people under 16.
7. Changes
We announce material changes on this page and update the version date.