Privacy Policy

Information We Collect

• Account & identity data — name, email, and organization membership, managed through our authentication provider.
• Business data you enter — products, variants, inventory, bills of materials, orders, purchase orders, invoices, shipments, and related records.
• Integration credentials — API keys and tokens you provide to connect sales channels, fulfillment platforms, and other systems, stored encrypted.
• Operational metadata — logs, timestamps, and diagnostic information used to run and secure the service.

How We Use Your Data

We use your data solely to provide and improve the Foundry IMS service: syncing inventory, processing orders, generating reports, securing your account, and providing support. We do not sell your data, and we do not use your business data to train machine-learning models.

The Foundry IMS Connector for AI Assistants

Foundry offers a connector (an MCP server at mcp.foundryims.com) that lets you manage your catalog and assemblies from AI assistants such as Claude and ChatGPT. When you use it:

• You authorize access explicitly. The connector uses OAuth — you sign in and consent before any access is granted. You can revoke access at any time.
• Access is scoped to your permissions. The connector acts only within the organization and permissions of the authenticated user or API key. It cannot reach data you could not already access in Foundry.
• The connector is a thin gateway. It reads and writes your Foundry data through our standard API in response to your requests. It does not independently store your business data, and it does not send your data to third parties beyond the API calls needed to fulfill your request.
• Your conversations stay with the AI provider. The content of your chats is governed by the privacy policy of the AI assistant you use (for example, Anthropic's policy when you use Claude). Foundry does not receive or retain your conversation history.

Data the connector returns to your AI assistant

Responses to connector tool calls are limited to the following categories, all drawn from your own organization's records:

• Catalog & inventory data — products, variants, SKUs and barcodes (UPC/GTIN/MPN), pricing, cost and margin figures, stock and buildable quantities, bills of materials, bundles, brands, categories, and the custom field definitions and values you created.
• Channel listing data — per-channel SKUs, listing status and prices, and the platform record identifiers and storefront domain of each sales channel you connected.
• Organization identifiers — your organization's name and the internal record identifiers (UUIDs) used to address records across calls.
• Operational metadata — record timestamps and sync/listing status.
• Product image links — served as credential-free public URLs, never as signed storage URLs.

Connector responses do not include customer or order personal data (the connector has no order or customer tools), other users' account details, or stored credentials and secrets of any kind.

Service Providers

We rely on trusted infrastructure and service providers to operate Foundry — including cloud hosting, database, authentication, and edge/CDN providers. These providers process data only on our behalf and under contractual confidentiality and security obligations.

Data Retention

We retain your data for as long as your account is active or as needed to provide the service. Deleted records are soft-deleted and purged on a rolling schedule. You may request export or deletion of your data at any time.

Security

We protect your data with encryption in transit and at rest, scoped access controls, and audit logging. No system is perfectly secure, but we work continuously to safeguard your information.

Your Rights

You may access, correct, export, or delete your data, and revoke integrations or connector access, at any time. Contact us using the details below to exercise these rights.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, notifying you directly.

Contact

Questions about this policy or your data? Email us at [email protected].