Persado MCP Agent — Privacy Policy

Persado Holdings Limited and its affiliated entities (collectively, "Persado," "we," "us," or "our") are committed to protecting the privacy and security of personal information.

This Privacy Policy ("Policy") explains how Persado collects, uses, shares, stores, and otherwise processes personal information in connection with Persado MCP Agent (the "Service").

This Policy applies specifically to personal information processed through Persado MCP Agent and describes the privacy practices applicable to the Service. Persado's general corporate Privacy Policy describes Persado's broader privacy practices and applies to other Persado products, services, websites, and business activities not specifically addressed by this Policy.

Where this Policy applies to Persado MCP Agent, it governs the processing of personal information through the Service. Where this Policy does not address a particular matter, Persado's general Privacy Policy may apply.

1. About Persado MCP Agent

Persado MCP Agent is a Persado application and service built on the Model Context Protocol ("MCP").

Persado MCP Agent operates within AI assistant platforms and host applications that support MCP, including supported Microsoft 365 experiences and other supported host platforms (each, a "Host Platform").

Persado MCP Agent enables authorized users to access and interact with Persado capabilities through a Host Platform. Depending on the version of the Service, the integrations enabled by an organization, and the permissions granted to the Service, Persado MCP Agent may enable users to score and improve marketing content and, where available, take related actions on the user's behalf.

The specific capabilities available through Persado MCP Agent may vary based on the configuration of the Service, the Host Platform, and the integrations enabled by the applicable organization.

2. What Persado MCP Agent Does

Persado MCP Agent may provide the following capabilities:

Scoring

Persado MCP Agent may score marketing copy for predicted performance, compliance risk, brand fit, or other characteristics supported by the applicable Persado service.

Optimization

Persado MCP Agent may generate optimized alternatives to marketing copy provided by the user and may provide scores or other information relating to those alternatives.

Sending Messages

Where enabled, Persado MCP Agent may send a message generated or specified by the user to a messaging destination specified by the user, such as a Microsoft Teams chat, on the user's behalf.

Work-Management and Issue-Tracking Integrations

Where enabled, Persado MCP Agent may read and, where requested by the user, create or update items in connected work-management or issue-tracking services, such as Jira.

The specific capabilities available to a user depend on the version and configuration of Persado MCP Agent and the integrations enabled by the user's organization.

Where a capability that acts on a user's behalf or connects to a third-party service is not enabled, Persado MCP Agent does not perform that action.

3. Information Persado MCP Agent Processes

Persado MCP Agent processes information reasonably necessary to carry out the request made by an authorized user and to operate, secure, maintain, and support the Service.

Persado MCP Agent does not require users to create a separate Persado account solely to use the Service. Where supported, the Service relies on identity and authorization information provided by the applicable Host Platform or identity provider.

Depending on how Persado MCP Agent is configured and used, the Service may process the following categories of information.

3.1 Content Provided to the Service

This may include:

• Marketing copy submitted for scoring or optimization;
• Prompts, instructions, and requests submitted through the Service;
• Content supplied in connection with a requested action; and
• Information contained in or associated with content that a user asks the Service to process.

Content submitted to Persado MCP Agent may be transmitted to Persado's processing services to provide the requested functionality, including generating scores, recommendations, optimized alternatives, or other outputs.

3.2 Identity and Profile Information

Persado MCP Agent may receive basic identity and profile information made available by the Host Platform or identity provider, such as:

• Name;
• User identifier;
• Email address;
• Organization or account information; and
• Preferred language or other basic profile information made available through the applicable authorization process.

This information may be used to authenticate and authorize users and, where applicable, to carry out actions on their behalf.

3.3 Information Required to Perform Requested Actions

When a user invokes a capability that acts on the user's behalf, Persado MCP Agent may process the information necessary to complete that specific action.

For example, this may include:

• A recipient and message content when sending a message;
• Information necessary to identify a destination or account;
• Projects, records, item metadata, or item content that the user asks the Service to read;
• Information necessary to create or update an item in a connected work-management or issue-tracking service; and
• Other information necessary to complete an action expressly requested by the user.

Actions that create or change information in a connected service are performed using the permissions and authorization associated with the signed-in user and, where required by the Service, after the user confirms the action.

3.4 Technical and Diagnostic Information

Persado MCP Agent may generate and process limited operational information necessary to operate, secure, maintain, and troubleshoot the Service.

This may include information such as:

• Request timestamps;
• Service and transaction identifiers;
• Error messages;
• Diagnostic information;
• Authentication and authorization events; and
• Other technical information reasonably necessary to maintain the security and functionality of the Service.

4. Information We Do Not Intentionally Seek

Persado MCP Agent is not designed to require users to submit sensitive personal information for scoring, optimization, or other ordinary Service functionality.

Users should not intentionally submit sensitive personal information through Persado MCP Agent unless such submission is necessary for a specific authorized use of the Service and is permitted by the applicable organization's policies and agreement with Persado.

Persado does not knowingly collect sensitive personal information from children through Persado MCP Agent.

5. How Persado MCP Agent Uses Information

Persado uses information processed through Persado MCP Agent for the following purposes:

• To provide scoring and optimization functionality;
• To generate requested content, scores, recommendations, or other outputs;
• To authenticate and authorize users;
• To provide the functionality requested by the user;
• To carry out actions that the user has requested the Service to perform on the user's behalf;
• To connect to and interact with third-party services that the user or user's organization has authorized;
• To operate, maintain, secure, and troubleshoot the Service;
• To detect, prevent, investigate, and address fraud, abuse, security incidents, and technical problems;
• To monitor and analyze Service performance and reliability;
• To maintain, improve, and develop Persado MCP Agent and related Persado products and services; and
• To comply with applicable legal, regulatory, contractual, and security requirements.

Persado does not use personal information processed through Persado MCP Agent for advertising.

Persado does not sell personal information processed through Persado MCP Agent.

6. How Persado MCP Agent Acts on Your Behalf

Where Persado MCP Agent offers capabilities that act on your behalf, those capabilities operate using permissions and authorization granted through the applicable Host Platform or identity provider.

Depending on the integration, Persado MCP Agent may use delegated permissions or access tokens issued and managed by the Host Platform or relevant identity provider.

The Service uses those permissions to perform actions as the authenticated user or on behalf of the organization, as applicable.

Persado MCP Agent requests and uses only the permissions necessary for the capabilities it provides.

Where an action would create, modify, send, or otherwise cause an external side effect, the Service may require the user to confirm the action before it is performed.

Users and administrators may be able to review, modify, or revoke the Service's permissions through the applicable Host Platform, identity provider, or administrator controls.

7. How Information Is Shared

Persado MCP Agent shares information only as reasonably necessary to provide the functionality requested by the user, operate the Service, or comply with applicable law.

7.1 Persado Processing Services

Information submitted to Persado MCP Agent may be transmitted to Persado's processing services to provide scoring, optimization, content generation, or other requested Persado functionality.

7.2 Host Platforms

Persado MCP Agent interacts with the applicable Host Platform to authenticate users, receive authorized requests, provide requested functionality, and return results.

The Host Platform may separately process information in accordance with its own privacy policy and terms.

7.3 Third-Party Services

Where a user or organization enables an integration with a third-party service, Persado MCP Agent may transmit or receive information from that service as necessary to perform the action requested by the user.

Examples may include Microsoft Teams, Jira, or other connected services supported by the applicable version of Persado MCP Agent.

Persado MCP Agent does not independently determine the purposes for which a user chooses to use a third-party service. Third-party services may process information under their own privacy policies and terms.

7.4 Service Providers

Persado may use third-party service providers to host, operate, secure, maintain, support, or otherwise provide services necessary for Persado MCP Agent.

Such service providers may process personal information only as necessary to provide services to Persado and subject to appropriate contractual and confidentiality obligations.

7.5 Legal and Safety Requirements

Persado may disclose information where reasonably necessary to:

• Comply with applicable law, regulation, legal process, or governmental request;
• Establish, exercise, or defend legal rights;
• Enforce applicable agreements, policies, or terms;
• Protect the rights, property, safety, or security of Persado, our users, customers, employees, or others; or
• Detect, prevent, investigate, or respond to fraud, security incidents, or other unlawful activity.

8. Persado as a Processor or Service Provider

Where an organization uses Persado MCP Agent and determines the purposes and means of processing personal information, Persado may process personal information on that organization's behalf as a processor, service provider, or equivalent role under applicable data protection law.

In those circumstances, Persado processes personal information in accordance with the applicable customer agreement and the organization's documented instructions, subject to applicable law.

The organization using Persado MCP Agent may determine what information is made available to the Service, which capabilities are enabled, and how the information is used within the organization.

If you use Persado MCP Agent through an organization, that organization may be the appropriate party to contact regarding requests concerning personal information that Persado processes on the organization's behalf.

9. Artificial Intelligence and Automated Processing

Persado MCP Agent uses Artificial Intelligence and related technologies as part of its scoring, optimization, and other functionality.

Depending on the functionality being used, information submitted through Persado MCP Agent may be processed by Persado's Artificial Intelligence systems to generate scores, recommendations, optimized alternatives, content, or other outputs requested by the user.

Persado may use automated technologies to process information as necessary to provide, secure, support, maintain, and improve the Service, subject to the applicable customer agreement and instructions.

Where Persado processes personal information on behalf of an organization, such processing is subject to the organization's instructions and the applicable contractual arrangements.

Persado MCP Agent is not designed to make decisions about an individual that produce legal or similarly significant effects solely through automated processing.

10. Data Retention

Persado retains personal information processed through Persado MCP Agent only for as long as reasonably necessary to:

• Provide the requested functionality;
• Maintain and support the Service;
• Meet legitimate operational, security, or business requirements;
• Comply with applicable legal or regulatory requirements; or
• Fulfill the obligations established under the applicable customer agreement.

Content submitted for scoring, optimization, or other requested processing is retained only as long as reasonably necessary for the applicable purpose and the operational, legal, security, and contractual requirements described above.

Operational and diagnostic information may be retained for limited periods necessary for security, troubleshooting, service reliability, and operational purposes.

Where Persado processes personal information on behalf of an organization, retention and deletion may be governed by the applicable customer agreement and the organization's instructions.

11. Data Security

Persado maintains administrative, technical, and physical safeguards designed to protect information processed through Persado MCP Agent against unauthorized access, use, alteration, disclosure, loss, or destruction.

Persado requires relevant service providers to maintain appropriate safeguards for information they process on Persado's behalf.

No method of transmission or storage is completely secure. While Persado takes commercially reasonable measures to protect personal information, Persado cannot guarantee the absolute security of information processed through Persado MCP Agent.

12. International Data Transfers

Persado operates globally and may process or transfer personal information in countries other than the country in which the information was collected.

Where required by applicable law, Persado will implement appropriate safeguards for international transfers of personal information, which may include Standard Contractual Clauses or other legally recognized transfer mechanisms.

13. Your Choices and Privacy Rights

Users control the content they choose to submit to Persado MCP Agent and the capabilities they choose to invoke.

Where applicable, users can:

• Review and manage permissions granted to Persado MCP Agent through the Host Platform, identity provider, or administrator;
• Revoke permissions granted to the Service;
• Stop using or remove Persado MCP Agent; and
• Control whether and what information they submit through the Service.

Subject to applicable law, individuals may have rights relating to their personal information, including the right to:

• Request access to personal information;
• Request correction of inaccurate or incomplete personal information;
• Request deletion of personal information;
• Request restriction of certain processing;
• Object to certain processing;
• Request portability of personal information where applicable; and
• Withdraw consent where processing is based on consent.

Where Persado processes personal information on behalf of an organization through Persado MCP Agent, you may need to exercise your rights by contacting the organization that controls the relevant information.

To submit a privacy request directly to Persado, contact:

Email: privacy@persado.com

Telephone: 1-(888)-276-0576

Persado may need to verify the identity of the requester before responding to a privacy request.

Nothing in this Policy limits any privacy rights available to individuals under applicable law.

14. Children's Privacy

Persado MCP Agent is intended for use by business users in a workplace and is not directed to children under the age of 18.

Persado does not knowingly collect personal information from children under the age of 18 through Persado MCP Agent.

If Persado becomes aware that personal information has been collected from a child in violation of applicable law, Persado will take appropriate steps to address the situation.

15. Third-Party Services and Host Platforms

Persado MCP Agent operates in connection with third-party Host Platforms, applications, services, and integrations.

This Policy describes Persado's handling of personal information in connection with Persado MCP Agent. The privacy practices of third-party Host Platforms and connected services are governed by their respective privacy policies and terms.

For example, when Persado MCP Agent is used through Microsoft 365, Microsoft may separately process information in accordance with Microsoft's applicable privacy policies and terms.

Similarly, when a user directs Persado MCP Agent to interact with a connected service such as Jira, that service may independently process information according to its own privacy policy and terms.

Persado is not responsible for the privacy practices of third parties except to the extent required by applicable law or expressly provided for in an applicable agreement.

16. Relationship to Persado's General Privacy Policy

This Policy is specifically intended to describe the processing of personal information through Persado MCP Agent.

Persado maintains a separate, general Privacy Policy that describes Persado's broader privacy practices, including practices relating to its corporate operations, websites, employees, customers, and other products and services.

The general Persado Privacy Policy is available at:

https://www.persado.com/legal/privacy-policy

This Policy should be read together with the general Persado Privacy Policy where applicable. For processing specifically associated with Persado MCP Agent, this Policy provides the Service-specific privacy information.

17. Changes to This Policy

Persado may update this Policy from time to time to reflect changes to Persado MCP Agent, changes to the information the Service processes, changes in applicable law, or changes to Persado's privacy practices.

When we make material changes, we will update the "Last Updated" date at the top of this Policy and provide additional notice where required by applicable law.

We encourage users to review this Policy periodically to remain informed about how Persado MCP Agent processes personal information.

18. Contact Us

If you have questions about this Policy or how Persado MCP Agent processes personal information, please contact Persado at:

Persado Holdings Limited

Email: privacy@persado.com

Telephone: 1-(888)-276-0576