Privacy Policy
No tracking by design.
This policy covers the public Roots by Benda website and the read-only public MCP/API surface. The operating principle is simple: regulatory lookup should not require surveillance.
What We Collect
For public MCP/API access, we collect no personal data. The public MCP endpoints do not create accounts, do not set cookies, do not run analytics, do not track users, and do not store submitted user data.
MCP API
The MCP API is read-only. Authentication is not required for public MCP calls. An optional bearer key may be accepted for abuse-prevention rate limiting, but the MCP tools remain read-only and no user data is stored by the MCP service.
Website Analytics
The website uses minimal aggregate analytics only through Cloudflare Web Analytics where analytics are enabled. Cloudflare Web Analytics is designed without cookies, localStorage, cross-site tracking, or personally identifiable visitor profiles. We do not run analytics on MCP endpoints.
Data Sources
Roots by Benda data comes from public regulatory and scientific sources. Core sources include SCCS, CIR, ECHA, EPA, and EFSA, with source-linked records used for public regulatory lookup.
Third Parties
For the public website and MCP/API surface covered by this policy, Cloudflare provides hosting, network delivery, and Web Analytics. We do not sell, rent, or share MCP/API usage data with advertising networks, data brokers, or marketing platforms.
Children's Privacy
Roots by Benda is a regulatory intelligence service for professional and research use. The service is not directed at children under 13.
GDPR
The public MCP/API surface does not process personal data through accounts, cookies, endpoint analytics, tracking profiles, or stored user submissions. Because no personal data is processed by that public surface, GDPR data-controller obligations are not triggered for that surface.
CCPA
We do not sell or share personal information under the CCPA. The public MCP/API surface does not collect personal information for cross-context behavioral advertising.
Contact
Privacy or security questions can be sent to [email protected].