This notice describes how the SylvaraJob MCP connector (the «Connector», served at https://sylvarajob.com/mcp) processes data. It complements the general privacy policy of sylvarajob.com, which keeps applying to the website and the app.
1. Controller
2. What the Connector does
It lets AI assistants (Claude, ChatGPT, Gemini and other Model Context Protocol clients) search public job offers: offers published by companies on SylvaraJob and external offers that other companies publish on their own career sites (title, company, city, date and link to the source). All tools are read-only and require no account.
3. Data we process when you use it
- Your queries (search text and filters) are processed in memory to answer the request and are not stored.
- Technical log, kept for 12 months to run, secure and understand the use of the service: date and time, method and tool invoked, duration, outcome (ok, client error, server error, rejected), HTTP status, the truncated network of the requesting IP (/24 for IPv4, /48 for IPv6, never the full address), a truncated user agent (120 characters), the protocol version and the name and version your MCP client declares about itself (for example «claude-ai 1.0»). The query text is never logged.
- Offers shown: for each search or record request we keep only the identifiers of the offers returned and their position, for 12 months, to know which offers assistants show. No query text and no personal data.
- Rate-limiting counters per IP address, kept for at most one hour.
4. Data about third parties shown by the Connector
The Connector returns public information about job offers (company name, title, location, conditions and description as published by the company). It does not return personal data of candidates or company staff, contact e-mails, phone numbers or application details. Companies may ask for their postings to be withdrawn by writing to the contact address.
5. Purposes and legal basis
Answering the requests you send through your AI client (performance of the service you request, art. 6.1.b GDPR) and keeping the service available and secure, including abuse prevention (legitimate interest, art. 6.1.f GDPR).
6. Recipients
The AI provider whose client you use (for example Anthropic, OpenAI or Google) receives the requests you make and the results the Connector returns, under that provider's own terms and privacy policy. SylvaraJob does not receive the content of your conversation beyond the tool call itself, and does not sell or share the technical log with third parties. The service runs on servers located in the European Union.
7. Retention
Queries: not stored. Technical log and identifiers of offers shown: 12 months (daily automatic purge). Rate-limiting counters: up to one hour. Result cache: 60 seconds (contains only public offer data).
8. Cookies and tracking
The Connector endpoint sets no cookies and uses no analytics or advertising trackers.
9. Your rights
You may exercise your rights of access, rectification, erasure, restriction, portability and objection, and lodge a complaint with the Spanish Data Protection Agency (AEPD), as described in the general privacy policy. Because the technical log holds no identifier that can be linked to you, requests may not be attributable to a specific person.
10. Changes
We will publish any change to this notice on this page with its date. Version of 2026-10-03.