Applies to: The Arcana Model Context Protocol (“MCP”) server and AI-client connector integrations (including ChatGPT, Claude, and similar AI clients) that access Arcana on a user’s behalf. This disclosure supplements the Arcana Privacy Policy (located at: https://www.arcana.io/privacypolicy).
What the Connector Does
The Arcana MCP server lets users of supported AI clients query Arcana’s portfolio intelligence and market data tools using natural language. Each request is a discrete, user-initiated query (for example, a portfolio risk summary, performance attribution, asset search, or a search across your research notes) that the connector executes against the user’s authorized Arcana account, returning only data that account is already permitted to see.
The connector is a read and analyze interface to existing Arcana entitlements. It does not grant access to data the account could not otherwise reach, and it respects the same permissioning as the Arcana platform itself.
Data Collected and Processed
When you use the connector, we process:
The connector does not collect personal information beyond account identifiers required for authentication. Tool inputs and outputs consist of portfolio and market data, which is institutional financial data, not personal data about individuals. The connector does not request or process names, contact details, government identifiers, payment information, or other personal data categories.
Why We Process It
Data is processed solely to:
1. Authenticate the user and authorize access to their Arcana account.
2. Execute the specific tool calls the user’s AI client requests and return results.
3. Maintain service reliability, security, and abuse prevention.
Arcana does not use connector data for advertising, profiling, or training AI models.
Who Receives Data
Arcana does not sell connector data or share it with third parties for their own purposes.
Retention
Account and portfolio data held in the Arcana platform itself is governed by the main Arcana Privacy Policy and your firm’s agreement with Arcana.
Security Safeguards
Arcana protects connector data using technical and organizational safeguards designed to prevent unauthorized access, disclosure, alteration, or destruction, including encryption in transit, encryption at rest for stored Arcana platform data, OAuth-based authorization, least-privilege access controls, and logging/monitoring for security and abuse prevention.
User Controls
