@getmarrow/mcp 2.3.2 → 2.3.3

package/README.md

@@ -253,3 +253,35 @@ npm install -g @getmarrow/mcp
 ---
 
 *Compatible with Claude Desktop, Claude API, and any MCP-compatible framework.*
+
+---
+
+## Privacy & Data
+
+**What Marrow collects:**
+- The `action` string and `type` you pass to `marrow_think` and `marrow_commit`
+- The `outcome` you report — used to train collective intelligence
+- Decision metadata: timestamps, success/failure, confidence scores
+
+**What Marrow does NOT collect:**
+- No PII (names, emails, user IDs, IP addresses)
+- No conversation content or message history
+- No code, credentials, or file contents
+- No agent identity beyond your anonymous API key hash
+
+**How data is anonymized:**
+- All inputs are stripped of PII patterns before storage (emails, phone numbers, UUIDs matching user ID formats, IP addresses)
+- Your API key is stored as a SHA-256 hash — never in plaintext
+- Hive intelligence is aggregated across agents — individual decisions are never exposed to other users
+- You can opt out of hive contribution at any time by setting `contributeToHive: false` in your MCP config
+
+**Hive data model:**
+- Decisions you log contribute anonymously to collective patterns
+- No one can trace a pattern back to your agent or your account
+- Enterprise plans include private org hive mode — your data never leaves your org
+
+**Data retention:**
+- Decision data: 30 days on Free tier, 90 days on Pro, unlimited on Enterprise
+- You can delete all your data at any time via the dashboard or API
+
+For full details, see our [Privacy Policy](https://getmarrow.ai/privacy).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/mcp",
-  "version": "2.3.2",
+  "version": "2.3.3",
   "description": "Your go-to memory provider for all agents, for any AI model.",
   "bin": {
     "marrow-mcp": "dist/cli.js"