pmnt MCP — Privacy Policy

Last updated: November 7, 2026

This policy explains how the pmnt Model Context Protocol (MCP) server (the 'MCP Service') handles data. It applies when you create invoices through an AI assistant such as Claude, ChatGPT, Perplexity or Antigravity. It supplements the PMNT Privacy Policy.

1. Data we process

  • Your pmnt user ID (the sub value of your sign-in token). We use it to find your pmnt account and to check your trial or subscription.
  • The business and the bank account (IBAN) in your pmnt account that the invoice uses.
  • Payment purpose.
  • Amount in UAH, if you give one.
  • Other invoice options that you give: template, label, payment category, validity period, message for the payer, private note and delivery requirement.

We use this data only to create the invoice and its NBU-standard payment QR code.

2. Sign-in tokens

Your AI assistant gets an access token from the pmnt sign-in service (sso.tulz.dev). The token lets the assistant create invoices for you and, if you allow it, read your email address. The MCP Service checks the token on each request. It does not store the token. The sign-in service keeps a record of each token so that it can cancel it. An access token expires after about 1 hour. A refresh token expires after up to 30 days, or when it is cancelled.

3. Data we do NOT collect

The MCP Service does not collect your chat history or conversation content, your location, your password or payment card data.

4. How data is shared

  • pmnt account service (app.pmnt.app) gets your user ID and the invoice data. It stores the invoice in your account.
  • Cloud object storage behind a CDN stores the QR code images of your invoices.
  • Your AI assistant provider: Anthropic (Claude), OpenAI (ChatGPT), Perplexity or Google (Antigravity) sends your request to us and gets the tool result. The result contains the invoice data, the business name, the IBAN and the payment link. Their own privacy policies cover your chats.
  • Sentry gets error reports from the MCP Service and from the pmnt account service. An error report can contain request data, for example invoice data. Error reports do not contain sign-in tokens.
  • Payers: a person who has the payment link can open the payment page. The page shows the business name, the IBAN, the amount and the payment purpose.

We do not sell your data. We do not post it to public services or social media.

5. Data retention

Invoices stay in your pmnt account until you delete them. If you delete a business or a bank account, its invoices are deleted too. Statistics about visits to a payment page are kept for up to 2 years, also after you delete the invoice. Server logs are not copied to a separate log store. They stay only in the server's own log files, which are deleted when they rotate or when the server is redeployed. Error reports are kept for up to 90 days.

6. Legal basis

Personal data is processed in accordance with the Law of Ukraine 'On Personal Data Protection' and the GDPR.

7. Your rights and controls

You can cancel the assistant's access at any time in the connector or MCP server settings of the assistant. You can delete invoices at app.pmnt.app. For other privacy questions, or to delete your account, contact support+legal@pmnt.app.