Privacy Policy — Alice MCP

Who we are

This policy describes how BTL Travel ("we", "us"), the operator of Alice, handles personal data in the Alice MCP connector (the "Service") — a service that lets AI assistants such as Anthropic's Claude search flights on your behalf. We are the data controller for the processing described here.

The Service searches flights and returns links to book on alice.co.il. It cannot make bookings, take payments, or change anything.

Data we process

We process four narrow categories of data:

• Search inputs — origin, destination, dates, passenger counts, cabin class, and reply language, submitted by you (or by Claude on your behalf). These are forwarded to the Alice flight-search platform, which queries airline and flight-distribution partners to find live fares for your request (see “Third parties”).
• Anonymous connection tokens — when you connect the Service to Claude, we issue OAuth tokens so your client can call the Service. They contain no name, email, or identity: the Service has no user accounts.
• Server logs — our hosting infrastructure (Microsoft Azure App Service) records standard access logs: IP address, request time, path, and status code. We use them only for security monitoring, abuse prevention, and operations.
• Service telemetry — we use Azure Application Insights to record request metrics (path, status, timing), upstream latency, errors, and the parameters of each search (route, dates, passenger counts, cabin, language). Telemetry carries no name, account, or other identity — the Service has none — and we use it only for reliability monitoring and improving the Service.

What we don't collect

• No user accounts or registration — connecting is anonymous.
• No names, email addresses, or profiles.
• No payment or booking data — the Service cannot book.
• No IP address is passed on — the Service calls the flight-search platform itself, so neither it nor any flight-distribution partner ever sees your IP address or device.
• No cookies, browser analytics, or ad tracking on this site — telemetry is server-side only (see “Data we process”).

How we use data & legal basis

We use data solely to run the Service:

• Fulfilling your searches — processing search inputs is necessary to perform the service you request (GDPR Art. 6(1)(b)).
• Security and abuse prevention — we keep server logs under our legitimate interest in running a secure service (GDPR Art. 6(1)(f)).
• Reliability monitoring — we keep service telemetry under our legitimate interest in operating and improving the Service (GDPR Art. 6(1)(f)).

We do not use your data for advertising or profiling, make no automated decisions about you, and never sell personal data.

Third parties

The Service relies on the following parties:

• Microsoft Azure — hosting and telemetry (App Service, Cache for Redis, and Application Insights; North Europe region, Ireland). See the Microsoft Privacy Statement.
• Alice flight-search platform — receives your search inputs and runs the search; operated by the same Alice organization and hosted on Microsoft Azure in the EU (North Europe).
• Airline and flight-distribution partners — to return live fares and availability, the search platform queries global distribution systems, airlines, and flight-content providers. They receive only the route, dates, passenger counts, and cabin class of the search — never your name, IP address, or any identifier.
• Anthropic (Claude) — your MCP client. Your conversation with Claude, including flight results shown there, is governed by Anthropic's privacy policy.
• Operational monitoring providers — the search platform sends technical error reports to an error-tracking provider and fare-benchmark data to a pricing partner. Neither receives your name, IP address, or any identifier.

We share personal data with no one beyond the parties listed above, and we never sell it.

Affiliate disclosure

Booking links in search results may carry an Alice affiliate identifier so that alice.co.il recognizes the search came from this connector. It does not change prices and adds no personal tracking.

Retention

Search inputs

Not retained by the connector after the response is returned.

Search records

The Alice flight-search platform keeps a technical record of the flight options returned for a search, keyed by the search parameters, so results can be served consistently and audited. These records carry no name, account, IP address, or other identifier, and cannot be linked back to you.

Access tokens

Expire after about 1 hour.

Refresh tokens

Expire after about 30 days.

Server logs

Kept for up to 3 days, then deleted.

Service telemetry

Kept for 90 days, then deleted.

Disconnecting the connector in Claude's settings revokes your tokens. Either way they expire on their own — an access token within about an hour, a refresh token within about 30 days.

International transfers

The Service and the Alice flight-search platform both run in the EU (Microsoft Azure, North Europe region, Ireland). To return live fares, the parameters of your search — route, dates, passenger counts, and cabin class — are sent to airline and flight-distribution partners, and technical error reports are sent to our monitoring provider; both may be processed outside the EEA. Those transfers carry no name, IP address, or other identifier.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of your personal data, and to object to processing. Contact us (below) and we will respond within 30 days. You may also lodge a complaint with your data-protection supervisory authority.

In practice: because tokens are anonymous and searches are never tied to an identity, disconnecting the connector from Claude removes everything associated with you — there is usually nothing left to delete. The technical search records described under “Retention” carry no identifier that could link them to you.

Security

• All traffic is encrypted in transit (HTTPS/TLS).
• Tokens are short-lived and stored in an access-controlled store.
• The Service holds no passwords or user credentials of any kind.

To report a security vulnerability, write to the contact address below with "SECURITY" in the subject — please report privately. (Maintainers: the reporting process is documented in the repository's SECURITY.md.)

Children

The Service is not directed at children under 16 and we do not knowingly process their personal data. If you believe a child has used the Service, contact us and we will investigate.

Changes & contact

We version this policy and show the effective date at the top. Material changes will appear on this page with a new effective date and version.

For privacy questions or data requests, contact: tech-support@alice.co.il.