Privacy notice
Last updated: 1 November 2026
Salah Eddine Jari EI – Martech ("we") runs MCPilot, a service that lets people read their company's Oracle Eloqua data from AI assistants such as ChatGPT and Claude. This notice explains what personal data we handle, why, for how long, and your rights.
1. Who is responsible
- For our own website, accounts, billing and support, we are the controller: Salah Eddine Jari EI – Martech, Rue des Etats Unis, 77300 Fontainebleau, contact@mcpilot.eu.
- For the Eloqua data your company reads through the service (contacts, accounts, activities, form submissions, custom objects), your company is the controller and we act as its processor, under our Data Processing Agreement.
2. What we collect and why
| Data | From whom | Why (purpose) | Legal basis |
|---|---|---|---|
| Name, work email, company, Eloqua instance, message | Contact form | Reply to you | Your consent (tick box) |
| Eloqua user ID, user name, display name, email, Eloqua instance; role and status | People who sign in with Eloqua | Run your account; let your administrators manage access | Contract |
| Eloqua access tokens (encrypted) | Eloqua, when you sign in | Read Eloqua on your behalf, with your own Eloqua rights | Contract |
| Activity log: who used which tool, when, the request (e.g. a search term) and the result size, never the Eloqua data returned | Use of the service | Security, support, and audit by your team's administrators | Legitimate interest (security) and contract |
| Instance map: names and structure of Eloqua assets (e.g. custom object and field names) | Eloqua scan | Help the AI understand your Eloqua setup | Contract |
| Shape report: the names of the fields and the type of each value in one sample of each kind of Eloqua answer, never the values | Eloqua scan | Keep the service working with every company's Eloqua; seen only by us | Legitimate interest |
| Plan, payment status, Stripe customer reference; billing name, address and VAT number | You and Stripe | Billing, invoices, tax | Contract and legal obligation |
| A session cookie | Your browser | Keep you signed in to our web pages | Strictly necessary |
Eloqua record contents (e.g. a contact's details) pass through our server to your AI app when you ask for them. We do not store them, except where you typed them into a request, which then appears in the activity log (for example a search for an email address).
CSV export. When you ask your AI app for a CSV file, the rows are read from Eloqua with your own login and sent to your browser through our server as they are produced. They are not stored on our server. The download link works once and for a few minutes only. The activity log records that an export happened and how many rows, never the rows.
Who sees the activity log.
- You see your own entries.
- If you are in a team, the team's administrators also see the entries of the team's members (what was asked, and the result size, never the Eloqua data), so that they can supervise use of the team's plan.
- We, as the operator of the service, can see all entries, for security and support. When one of us signs in to an account to help with a support request, this is recorded in a separate log that only we can read.
We do not sell data, use it for advertising, or train AI models on it.
3. How long we keep it
| Data | Kept for |
|---|---|
| Activity log | 30 days |
| Contact messages | Until handled, then 12 months (24 months at most) |
| Account and user data, instance map | While the account is active; deleted 30 days after its trial or subscription ends or it leaves a team (whichever is latest), after an email a week before; or earlier on request |
| Team invitations (the invited email) | Until answered, cancelled or expired (7 days), then 90 days |
| Former team members (name and email, shown to the team's administrators) | 12 months after they left or were removed |
| A closed team (its name and billing record; nobody is in it any more) | 90 days after it closed |
| Eloqua tokens | As above, and removed earlier after 90 days without use (you then sign in to Eloqua again) |
| Shape report | Replaced at each scan, deleted with the account |
| Database backups | 30 days |
| One-way fingerprint of a deleted account's Eloqua instance (and user, for a personal account), to prevent repeated free trials | 3 years |
| Invoices and accounting records | 10 years (French accounting law) |
4. Who receives it (subprocessors)
| Provider | Role | Location |
|---|---|---|
| Microsoft Azure (Microsoft Ireland Operations Ltd) | Hosting, database, backups, monitoring, email sending | EU (France Central) |
| Stripe Payments Europe Ltd | Payments and invoices (we never see card numbers) | EU; may transfer to the US under the EU-US Data Privacy Framework and standard contractual clauses |
Your AI provider (e.g. OpenAI for ChatGPT, Anthropic for Claude) receives the answers you ask for, because you or your company chose to connect it. How it processes your conversations is governed by your own agreement with that provider. Oracle (Eloqua) is your company's own supplier.
5. Security
Hosting in the EU, encryption in transit (TLS 1.2+) and at rest; Eloqua tokens are additionally encrypted (AES-256-GCM) with a key kept in a separate key vault; read-only access to Eloqua, limited to each person's own Eloqua rights; access logs; daily backups.
6. Your rights
You can ask to access, correct, delete, restrict or receive a copy of your data, and object to processing based on legitimate interest. Write to contact@mcpilot.eu. We answer within one month. If your data belongs to your company's Eloqua (you are one of its contacts), we pass your request to that company, which decides.
You can also complain to the CNIL (www.cnil.fr) or your local data protection authority.
7. Cookies
We only use one cookie, needed to keep you signed in to our pages. It ends when you close the browser. No analytics, advertising or tracking cookies, so no consent banner is needed.
8. Changes
We will post any change here and, for important changes, tell account owners by email.