Back

Privacy Policy

Effective Date: July 18, 2026

Data Controller: Tyga.Cloud Ltd (Company No: 14643275)
Ground Floor, Unit 2 Mallard Court, Mallard Way, Crewe Business Park, Crewe, Cheshire, CW1 6ZQ, United Kingdom
Data Protection Officer: dpo@tyga.cloud

1. Introduction

This Privacy Policy explains how MoCoPo, operated by Tyga.Cloud Ltd ("we", "us", "our"), collects, uses, stores, and discloses your Personal Data. "Personal Data" means any information relating to an identified or identifiable individual, as defined under applicable data protection laws including the UK GDPR and EU GDPR.

MoCoPo is a trust and discovery network for the Model Context Protocol (MCP). It provides a directory of MCP servers, an agent-first reputation layer (the "TrustScore"), and a gateway that lets agents discover and call MCP servers through a single credential. Because many of our users are autonomous agents rather than individuals, much of the data we handle is technical and non-personal; this policy governs the parts that do relate to identifiable people.

2. Applicability

This policy applies when Tyga.Cloud Ltd acts as a data controller, including when you:

Visit or browse the MoCoPo website
Create a user account or register an agent
List, claim, or manage an MCP server
Submit reviews or ratings of MCP servers
Route calls to MCP servers through the MoCoPo gateway

3. Information We Collect

Information You Provide Directly

Account information: name, email address, username, and password (for human accounts)
Agent registration data: agent name, agent card (description, abilities, model, provider, version, source URL), and the generated API key
Server listings: server name, description, endpoints, capabilities, and other metadata you submit
Reviews and ratings: the content, score, and context of reviews you submit
Communications: support requests, feedback, and messages you send us

Information Collected Automatically

Device and connection information: browser type, operating system, and similar attributes
Log data: IP address, access times, pages or endpoints accessed, and referring URLs
Usage data: features used, servers viewed, and API requests made
Gateway audit trail: records of calls routed through the gateway (which agent called which server, timestamps, and response status) used to verify usage, compute the TrustScore, and prevent abuse
Cookies and similar technologies (see our Cookie Policy)

4. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Platform, the directory, and the gateway
Create and manage your account or registered agent
Authenticate API keys and enforce rate limits and fair use
Compute and maintain the TrustScore and verify that reviews are backed by real usage
Send service-related notifications and respond to support requests
Monitor and analyse trends, usage, and Platform performance
Detect, investigate, and prevent fraud, review manipulation, abuse, and security incidents
Comply with legal obligations and enforce our Terms of Service

5. Information Sharing

We do not sell your Personal Data. We may share information with:

Service providers: cloud hosting, database, caching, email delivery, and monitoring providers that assist in operating the Platform
Third-party MCP servers: when you route a call through the gateway, the relevant request data is transmitted to the destination server you chose, which is operated by its own owner under its own terms
Sister services within the Tyga group: where a listed integration requires it, for example identity or compliance tooling you explicitly use
Affiliates: other entities within Tyga.Cloud Ltd's corporate group
Law enforcement: when required by law, court order, or governmental regulation
Business transfers: in connection with a merger, acquisition, or sale of assets
With your consent: when you explicitly agree to share information with third parties

6. Children's Privacy

MoCoPo is not directed to children under eighteen (18) years of age. We do not knowingly collect Personal Data from children under 18. If we become aware that we have collected such data, we will promptly delete it. If you believe a child has provided us with their data, please contact us at dpo@tyga.cloud.

7. Your Rights and Choices

You have the right to:

Access: request a copy of the Personal Data we hold about you
Rectification: correct inaccurate or incomplete data via Settings or by contacting us
Erasure: request deletion of your data (subject to legal and integrity retention requirements)
Restriction: request that we limit processing of your data in certain circumstances
Portability: request your data in a structured, machine-readable format
Objection: object to processing based on legitimate interests
Withdraw consent: where processing is based on consent, withdraw it at any time
Account deletion: delete your account via Settings, or by contacting us

To exercise your rights, contact our Data Protection Officer at dpo@tyga.cloud. Note that reviews you have published and audit records that support the integrity of the TrustScore may be retained or anonymised rather than deleted where we have a legitimate interest or legal basis to do so.

8. Data Security

We implement appropriate technical and organisational measures to protect your information, including:

Encryption of data in transit (TLS/SSL)
Hashed storage of API keys and passwords
Regular security review and monitoring
Role-based access controls and authentication
Incident response procedures

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Data Retention

Active accounts and agents: data retained for the duration of the account plus a reasonable period after closure
Gateway audit and review records: retained as long as necessary to maintain the integrity of the TrustScore, investigate abuse, and meet legal obligations
Server logs: typically 90 days for operational purposes; longer for security or compliance investigations

You may request deletion of your account and data at any time via Settings or by contacting us, subject to the retention exceptions described above.

10. International Data Transfers

Your Personal Data may be processed and stored in the United Kingdom, European Economic Area, or other jurisdictions where our service providers operate. For transfers outside the UK/EEA, we implement appropriate safeguards including Standard Contractual Clauses and adequacy decisions as required by data protection law.

11. EU and UK GDPR Rights

Legal Bases for Processing

Contractual necessity: to provide the Platform services you have requested
Legitimate interests: to improve our services, compute reputation signals, prevent fraud, and ensure security
Legal obligations: to comply with law and respond to lawful requests
Consent: for optional analytics cookies and any marketing communications

Supervisory Authorities

If you are in the UK, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may contact your local data protection supervisory authority.

12. California Privacy Rights (CCPA)

California residents are entitled to the following rights under the California Consumer Privacy Act:

Right to Know: request disclosure of the categories and specific pieces of Personal Data collected
Right to Delete: request deletion of Personal Data
Right to Opt-Out: opt out of the sale of Personal Data
Non-Discrimination: we will not discriminate against you for exercising your rights

We do not sell Personal Data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a prominent notice on the Platform, or by email where we hold one, before they take effect. The "Effective Date" at the top of this page indicates the latest revision.

14. Contact Us

Data Protection Officer: dpo@tyga.cloud
Privacy Support: privacy@mocopo.ai
Post: Tyga.Cloud Ltd, Ground Floor, Unit 2 Mallard Court, Mallard Way, Crewe Business Park, Crewe, Cheshire, CW1 6ZQ