This page covers Ceviche MCP only. Ceviche's full privacy policy is at https://www.ceviche.ai/privacy.
Where the data comes from
Ceviche MCP reads Ceviche's own records for your team: the bills, lines, splits, fund invoices, approvals and other records you work with in the app. It calls no other company's service. It doesn't reach into an accounting system, a card provider or a bank. It reads what is already in Ceviche, at the moment the assistant asks.
What goes to your assistant
Only the results of the lookups the assistant asks for, from your own team:
- the records that match its search, one page at a time;
- one record in full when it fetches one, with the records linked to it;
- totals and counts computed by Ceviche;
- your name, email and role, your team's name, and a short count of your team's records, on the first call;
- Ceviche's presentation guide (rules, colors and fonts, no data).
The records page lists every kind of record and what each one holds. Limits lists what is never returned, such as files, bank details and web addresses inside records.
Once a result reaches your assistant, the assistant's provider handles it under your agreement with them: Anthropic for Claude, for example. Whether conversations are kept, for how long, and whether they are used for training is set by that provider and your plan with them, not by Ceviche. Check your provider's terms and your organization's settings before connecting.
What Ceviche receives from your assistant
Only what a lookup needs: the tool name and its inputs, such as a search filter, a record ID or a grouping. The MCP doesn't receive your conversation, the assistant's memory, your files or your other connectors, and it doesn't ask for them.
What Ceviche records
| What | Why | What it holds |
|---|---|---|
| The connection | To check access on every request, list it in Linked Accounts, and let you disconnect it | You, your team, the assistant app, when it was made, and when it was disconnected |
| Sign-in passes | To renew access without asking you again | Kept in a form that can't be turned back into a working pass |
| The assistant app's public details | To show its name on the consent page and in Linked Accounts | The name and return address the app publishes about itself |
| A line per tool call | Security and support | Your account, team, the assistant app, the connection, the tool, how many records came back, how long it took, and whether it worked |
What Ceviche doesn't record: your questions, the search terms or filters, the records returned, or the assistant's answers.
How long these records are kept is covered by the privacy policy. Disconnecting stops access at once, and Ceviche keeps the record that the connection existed and when it ended.
Where it runs
Ceviche MCP is part of the Ceviche app at app.ceviche.ai, served over HTTPS, on the same hosting and the same database as the rest of Ceviche. It adds no new service provider. Requests from your assistant arrive from the assistant provider's servers, not from your computer, except for apps such as Claude Code that run on your own machine.
Your choices
- Don't connect. Nothing is shared until you click Allow.
- Choose what the assistant may run. Claude lets you set each tool to always allowed, needs approval, or blocked.
- Disconnect at any time, from the assistant or from Ceviche. See Disconnect and revoke access.
- Ask us to turn it off for your team. Every connection on the team stops at its next request.
Questions
Privacy questions: see the contacts in the privacy policy at https://www.ceviche.ai/privacy, or write to your Ceviche contact. See Support.