Melven

Privacy Policy

Last updated: December 2025

1. Introduction

Vestra AI ehf. ("we", "us", or "our") operates Melven (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

Account Information

When you create an account, we collect information provided by your authentication provider (such as your email address and name).

Server Information

When you submit a server for indexing, we collect the information from your discovery.xml file, including server name, URL, descriptions, categories, and any images you provide.

Usage Data

We automatically collect certain information when you use the Service, including your IP address (for rate limiting), browser type, and pages visited.

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain the Service
  • Display your MCP server information to other users
  • Authenticate your identity
  • Enforce rate limits and prevent abuse
  • Communicate with you about the Service
  • Improve and optimize the Service
  • Comply with legal obligations

4. External Images

When you submit a server with images (logos, covers, tool icons), we store references to those image URLs. Images are loaded directly from your server when users view your listing. You are responsible for ensuring these images remain accessible.

5. Data Sharing

We do not sell your personal information. We may share your information with:

  • Service providers who assist in operating the Service (e.g., hosting, authentication)
  • Law enforcement when required by law
  • Other parties with your consent

Server information you submit is publicly displayed on the Service.

6. Data Retention

We retain your account information for as long as your account is active. Server information is retained until you remove the discovery.xml file from your server and request re-indexing, or until we remove it.

7. Your Rights

Depending on your location, you may have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your personal information
  • Object to or restrict processing
  • Data portability

To exercise these rights, please contact us at vestra@vestra.is

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

9. Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet is 100% secure.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at vestra@vestra.is

Vestra AI ehf.
Iceland