Privacy and data handling#

DIDWW MCP shares account information with a connected MCP client only when it is needed to respond to a request. Information received by the MCP client is also processed by its AI provider under that provider’s terms and privacy policy.

Account information#

Depending on the request and the permissions assigned to the DIDWW user for the active account, information sent through DIDWW MCP can include:

  • phone numbers and supported service configurations

  • account balances, invoices, orders, payments, refunds, and masked saved-card information

  • export parameters, processing status, and download links for inbound and outbound call records and SMS logs

  • identities, addresses, verification information, required document types, missing document requirements, and secure-upload request status

  • account users, assigned roles, and pending invitations

  • the active DIDWW account and other accounts available to the user

The MCP client receives only the information required to complete the requested action and permitted by the DIDWW user’s access to the active account.

Roles and account permissions#

DIDWW uses the roles assigned to the user for the active account to determine which actions are permitted. Available roles include Admin, Porting, Technical, Commercial, Billing, and Compliance. MCP responses return the Admin role under its internal name, SuperAdmin.

An MCP client may display an action that the user’s role does not permit. If the action is requested, DIDWW refuses it and identifies the active account, the required roles, and the roles currently assigned to the user.

Permissions are evaluated separately for each DIDWW account. Switching the active account can therefore change the information and actions available to the MCP client.

If another accessible account has the required permissions, ask the MCP client to switch to that account. Otherwise, ask an account owner to assign the required role in the DIDWW User Panel.

Protected information#

DIDWW masks protected values such as payment-card details and service credentials. DIDWW MCP does not return complete payment-card numbers, passwords, API keys, or two-factor authentication codes.

Do not enter any of the following information in an MCP client conversation:

  • your DIDWW password

  • API keys

  • complete payment-card information

  • two-factor authentication codes

  • identity or address documents

Operational records#

DIDWW records MCP connection and request activity for security, service operation, abuse prevention, and troubleshooting. Depending on the activity, these records can identify:

  • the DIDWW user and active account

  • the connected MCP client

  • the date and time of the activity

  • the source IP address and user agent

  • the requested account area or action

  • whether the request completed or returned an error

Operational records do not contain your DIDWW password or two-factor authentication code.

Secure document uploads#

Documents are not sent through the MCP client conversation. When documents are required, DIDWW provides a secure, one-time browser link that identifies:

  • the purpose of the upload

  • the related identity, address, phone numbers, or verification

  • the link expiration time

Files are encrypted in the browser before upload. The link works once and stops working after the displayed expiration period. If the link expires, request a new secure upload link.

Do not paste documents into the conversation or send them as conversation attachments.

Data exports#

Export contents are not returned in the MCP client conversation. When an export is ready, the MCP client provides a download link. DIDWW returns a direct link that opens the file without a User Panel sign-in, and a User Panel link that requires a signed-in DIDWW user.

Warning

The direct link grants access to the export file to anyone who has it. It remains valid until the file is deleted. Treat it as confidential, do not forward it, and do not post it outside the conversation.

Completed export files remain available for one month. If a file is no longer available, create a new export.

Connected MCP clients#

Each connected MCP client appears in the DIDWW User Panel with its recent activity, last IP address, user agent, and available actions.

To review connected clients:

  1. Open the account switcher in the upper-right corner.

  2. Select Account Settings.

  3. Select the MCP Clients tab.

Select Revoke to disconnect one MCP client or Revoke all to disconnect every listed client. A revoked connection cannot be restored. To use the client again, add or select the DIDWW connection and complete authorization again.

Privacy, security, and support#