sixthrule labs

developer tools

Privacy Policy

This Privacy Policy explains what information we collect when you use our Model Context Protocol (MCP) services — including the Weather Intelligence MCP — how we use it, who we share it with, how long we keep it, and the rights you have. It serves as the umbrella privacy policy for Sixth Rule Labs MCP products (the "Services"). By using the Services, you agree to the practices described here.

1. Who we are

The Services are operated by Sixth Rule, LLC ("we," "us," or "our"), a Delaware limited liability company. For privacy questions or requests, contact us at hello@sixthrule.dev.

2. What we collect

We deliberately collect as little as possible. We do not collect your name, email address, payment card data, IP address, or the substance of your queries beyond what we need to meter usage.

• API credentials. When you register, we store the API key associated with your account, your plan tier, and the key's creation date. API keys are treated as sensitive credentials.
• Usage and call logs. For each tool call we record which API key made the call, the tool name, a UTC timestamp, and whether the call was allowed or denied under your plan. We use these records for metering and billing. Tool arguments such as latitude and longitude are processed in memory only to fulfill your request and are not retained in our database or logs.
• Pass-through to data providers. To answer a request, the Service sends the location parameters you supply (e.g., latitude/longitude or a U.S. state code) to the U.S. National Weather Service and, for certain long-range historical requests, NOAA Climate Data Online. These parameters pass through our Service and are not stored by us beyond the metering records above. We never send your API key or account identity to the weather providers.

We do not collect or store end-user names, email addresses, payment or banking data, or IP addresses, and we do not persist weather provider responses.

3. How we use information

We use the information above to operate the Service (authenticate your key and return results), meter usage against your plan, bill you correctly, and maintain reliability (diagnose errors, prevent abuse, understand aggregate usage). We do not sell your information, and we do not use it for advertising.

4. Who we share it with

• U.S. National Weather Service / NOAA. Location parameters only, as described above. NWS/NOAA data is U.S. Government public domain.
• Billing and payments (Stripe). Usage and billing data needed to charge you is processed by our payment providers under their own privacy policies.
• Hosting / infrastructure. For hosted deployments, our infrastructure providers (including Cloudflare) process and store data on our behalf under their own terms.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or the company.

Local vs. hosted deployments: in a local installation, your metering database lives on your own machine and your data does not leave it except for the outbound weather API calls described above. In hosted deployments, the metering database lives on our servers with stored credentials protected and access-controlled.

5. How long we keep it

• API keys / account records: for the life of your account.
• Usage / metering logs: up to 24 months, after which records are deleted or aggregated into anonymous statistics. Records needed for billing disputes or reconciliation may be kept longer where required.
• Billing and transaction records: up to 7 years as required for tax and accounting purposes, held primarily by our billing processors under their own policies.
• In-memory data (cached lookups, provider responses): not persisted; cleared on restart.

6. How we protect information

We restrict access to the metering database and treat API keys as sensitive credentials. For hosted deployments we encrypt or hash stored API keys at rest and apply access controls. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete your information, or to object to or restrict certain processing. You may request deletion of your account data — your API key record and associated usage logs — by emailing hello@sixthrule.dev. You can stop new data collection at any time by ceasing to use the Service and requesting deletion of your API key. We respond to verifiable requests as required by applicable law.

8. International users

The Services are operated from the United States. If you access them from elsewhere, you understand your information will be processed in the United States, where data-protection laws may differ from your country's.

9. Children

The Services are intended for developers and businesses and are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect information from children.

10. Not professional or financial advice

Data provided through the Services comes from third-party sources, including the U.S. National Weather Service and NOAA, and is provided "as is." It is not professional, financial, investment, legal, or life-safety advice. Do not rely on it as the sole source for protecting life or property; for life-safety decisions, use official NWS dissemination channels. The Services are not endorsed by, affiliated with, or certified by NOAA or the National Weather Service.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Continued use after an update means you accept the revised policy.

12. Contact

Sixth Rule, LLC
651 North Broad Street, Ste. 201
Middletown, DE 19709
hello@sixthrule.dev