Your work stays yours.
AiSCent is macOS software with an optional remote MCP service. The app uses your paired Mac for local project, Xcode, Simulator, and App Store Connect workflows. The remote service relays approved read-only requests to that Mac; it does not currently perform remote mutations.
Information processed
When you use remote MCP, AiSCent processes pairing and device identifiers, purchase entitlement status, MCP client identifiers and redirect details, OAuth scopes, and short-lived authorization material needed to connect your client. OAuth credentials are stored as hashes with associated grant records, not as reusable raw access tokens. Pairing codes expire after 10 minutes, authorization codes after 5 minutes, access tokens after 1 hour, and refresh grants after up to 30 days or the end of the paid entitlement, whichever comes first.
Your MCP requests and results pass through the remote service and your paired Mac so the selected AI client can use the tools. Do not include passwords, private keys, signing certificates, or unrelated sensitive information in prompts. Your selected AI provider receives the prompt and tool results under its own privacy terms.
App Store and device data
App Store Connect credentials remain on your Mac in the configured local credential store. AiSCent’s remote service does not receive those credentials; your Mac uses them when carrying out a requested operation. The remote service verifies signed purchase transaction evidence with Apple to determine paid feature access.
Service providers and security
We use Cloudflare to host the remote MCP and its short-lived authorization and relay state. Apple provides purchase verification and App Store Connect. We use data only to operate, secure, support, and improve AiSCent, or as required by law. We do not sell personal information. Cloudflare and Apple process data under their own policies.
Retention and choices
Authorization records remain available as needed to validate, refresh, or revoke access and may remain after expiration to prevent replay or honor revocation. Relay requests are processed to complete the operation; we do not intentionally keep their full contents as an application history. You can stop using the remote service by disconnecting the AI client and paired Mac. For a privacy request, contact us at the address below.