⚒️ QuerySculptor

1. Acceptance of Terms

By accessing or using QuerySculptor ("the Service"), you agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use the Service.

2. Service Description

QuerySculptor is an experimental demo MCP (Model Context Protocol) server that provides tools for AI agents to build GraphQL queries programmatically. The Service is provided free of charge for demonstration and evaluation purposes.

3. Open Source License

The QuerySculptor software is licensed under the Apache License, Version 2.0. Under this license, you are granted:

• A perpetual, worldwide, non-exclusive, royalty-free license to use, reproduce, modify, and distribute the software
• The right to create and distribute derivative works
• A patent license for any patents necessarily infringed by the software

You must include the original copyright notice and license in any copies or substantial portions of the software. The full license text is available at apache.org/licenses/LICENSE-2.0.

4. Disclaimer of Warranty

THE SERVICE IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY, OR FITNESS FOR A PARTICULAR PURPOSE.

You are solely responsible for determining the appropriateness of using the Service and assume any risks associated with your use.

5. Limitation of Liability

IN NO EVENT SHALL THE CONTRIBUTORS BE LIABLE TO YOU FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICE, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF GOODWILL, WORK STOPPAGE, DATA LOSS, COMPUTER FAILURE OR MALFUNCTION, OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES.

6. Acceptable Use

You agree not to use the Service to:

• Violate any applicable laws or regulations
• Attempt to gain unauthorized access to any systems or networks
• Transmit malicious code or conduct denial-of-service attacks
• Use the Service as a general-purpose proxy for unauthorized purposes
• Abuse rate limits or attempt to circumvent security measures

7. Service Availability

As an experimental demo, we do not guarantee any level of service availability, uptime, or support. The Service may be modified, suspended, or discontinued at any time without notice.

8. Changes to Terms

We reserve the right to modify these Terms at any time. Continued use of the Service after changes constitutes acceptance of the modified Terms.

9. Contact

For questions about these Terms, please open an issue on our GitHub repository.

1. Introduction

This Privacy Policy explains how QuerySculptor ("we", "our", or "the Service") collects, uses, and protects information when you use our experimental demo service.

2. Information We Collect

2.1 Session Data

When you use the MCP tools, we temporarily store:

• Session identifiers: Randomly generated IDs to track your query-building session
• Query structure: The GraphQL queries you build during a session
• Session metadata: Timestamps and operation types

Session data is automatically deleted after 1 hour of inactivity or when you end your session.

2.2 Analytics (Optional)

If you consent, we use PostHog to collect anonymous usage analytics:

• Page views and feature usage patterns
• Browser type and general location (country level)
• Session duration and interaction patterns

You can opt out of analytics at any time using the cookie consent banner. We do not collect personal identifiers, names, email addresses, or account information.

2.3 Server Logs

For security and debugging purposes, we may log:

• IP addresses (for rate limiting)
• Request timestamps
• Error messages (without sensitive data)

Server logs are retained for up to 7 days.

3. Information We Do NOT Collect

• Personal identification information (names, emails, phone numbers)
• Authentication credentials or API keys you use with external GraphQL APIs
• The actual data returned from GraphQL query executions
• Financial or payment information

4. How We Use Information

We use collected information to:

• Provide and maintain the query-building service
• Enforce rate limits and prevent abuse
• Improve the Service based on usage patterns
• Debug issues and ensure security

5. Data Storage and Security

Session data is stored in Redis with encryption in transit. We implement security measures including:

• HTTPS encryption for all connections
• Rate limiting to prevent abuse
• Automatic session expiration
• SSRF protection for GraphQL endpoint validation

6. Third-Party Services

We use the following third-party services:

• Vercel: Hosting and serverless infrastructure
• Upstash Redis: Session storage
• PostHog: Analytics (optional, with consent)

Each service has its own privacy policy governing their data practices.

7. Your Rights

You have the right to:

• Opt out of analytics tracking
• End your session at any time (which deletes session data)
• Request information about data we hold (contact us via GitHub)

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.

10. Contact

For privacy-related questions or concerns, please open an issue on our GitHub repository.