Privacy Policy
Last Updated: September 1, 2026
1. Local-First Architecture and Data Privacy
At MTLG Labs, we respect your privacy. MCP Studio is built from the ground up as a local-first desktop software application.
We do not collect, store, or transmit your code, tool definitions, tool arguments, MCP traffic payloads, or server schemas to any remote server. Everything executes exclusively on your machine.
2. Information We Process & How It Is Handled
A. Purchase & Order Data (Paddle.com)
When you purchase a Pro License, transaction and payment data (such as your name, billing address, email address, payment method, and country) are processed directly and securely by our Merchant of Record, Paddle.com Inc.. MTLG Labs never stores or has access to your full credit card details or bank credentials. Paddle provides us only with order metadata (your email, assigned license key, and order status) required to validate your license.
B. License Activation & Offline Grace
When you activate a Pro License key in the desktop app, the key is verified cryptographically. License checks support full offline grace periods, allowing you to use MCP Studio completely disconnected from the internet.
C. AI Model API Keys & Configuration Storage
Any API keys you input for cloud LLM providers (e.g. OpenAI, Anthropic, Gemini) are encrypted and stored locally in your operating system's credential vault. They are only transmitted directly from your computer to the respective provider's API endpoints when you run simulations.
D. Application Telemetry
MCP Studio contains no tracking pixels, analytics SDKs, or remote telemetry. We do not track your clicks, session durations, or tool usage statistics.
3. Third-Party Services & Links
MCP Studio allows developers to connect to third-party endpoints, including local stdio processes, remote SSE endpoints, and AI provider APIs. When you configure external integrations, their respective privacy policies and terms govern those data transfers.
4. GDPR, CCPA & International Compliance
Because we do not store personal operational data, you retain complete sovereignty over your data. If you wish to inspect or request deletion of your purchase email record from our license fulfillment ledger, you may contact us at any time.
5. Security
We implement security standards across our build pipelines and releases, including code signing, hash verification, and dependency vulnerability scanning.
6. Contact Our Data Protection Officer
For privacy inquiries, data deletion requests, or questions regarding this policy, please reach out to: