# Privacy and data handling

DIDWW MCP shares account information with a connected MCP client only when it
is needed to respond to a request. Information received by the MCP client is
also processed by its AI provider under that provider's terms and privacy
policy.

## Account information

Depending on the request and the permissions assigned to the DIDWW user for the
active account, information sent through DIDWW MCP can include:

- phone numbers and supported service configurations
- account balances, invoices, orders, payments, refunds, and masked saved-card
  information
- export parameters, processing status, and download links for inbound and
  outbound call records and SMS logs
- identities, addresses, verification information, required document types,
  missing document requirements, and secure-upload request status
- account users, assigned roles, and pending invitations
- the active DIDWW account and other accounts available to the user

The MCP client receives only the information required to complete the requested
action and permitted by the DIDWW user's access to the active account.

## Roles and account permissions

DIDWW uses the roles assigned to the user for the active account to determine
which actions are permitted. Available roles include **Admin**, **Porting**,
**Technical**, **Commercial**, **Billing**, and **Compliance**. MCP responses
return the Admin role under its internal name, `SuperAdmin`.

An MCP client may display an action that the user's role does not permit. If
the action is requested, DIDWW refuses it and identifies the active account,
the required roles, and the roles currently assigned to the user.

Permissions are evaluated separately for each DIDWW account. Switching the
active account can therefore change the information and actions available to
the MCP client.

If another accessible account has the required permissions, ask the MCP client
to switch to that account. Otherwise, ask an account owner to assign
the required role in the DIDWW User Panel.

## Protected information

DIDWW masks protected values such as payment-card details and service
credentials. DIDWW MCP does not return complete payment-card numbers,
passwords, API keys, or two-factor authentication codes.

Do not enter any of the following information in an MCP client conversation:

- your DIDWW password
- API keys
- complete payment-card information
- two-factor authentication codes
- identity or address documents

## Operational records

DIDWW records MCP connection and request activity for security, service
operation, abuse prevention, and troubleshooting. Depending on the activity,
these records can identify:

- the DIDWW user and active account
- the connected MCP client
- the date and time of the activity
- the source IP address and user agent
- the requested account area or action
- whether the request completed or returned an error

Operational records do not contain your DIDWW password or two-factor
authentication code.

## Secure document uploads

Documents are not sent through the MCP client conversation. When documents
are required, DIDWW provides a secure, one-time browser link that identifies:

- the purpose of the upload
- the related identity, address, phone numbers, or verification
- the link expiration time

Files are encrypted in the browser before upload. The link works once and
stops working after the displayed expiration period. If the link expires,
request a new secure upload link.

Do not paste documents into the conversation or send them as conversation
attachments.

## Data exports

Export contents are not returned in the MCP client conversation. When an
export is ready, the MCP client provides a download link. DIDWW returns a
direct link that opens the file without a User Panel sign-in, and a User Panel
link that requires a signed-in DIDWW user.

Warning

The direct link grants access to the export file to anyone who has it. It
remains valid until the file is deleted. Treat it as confidential, do not
forward it, and do not post it outside the conversation.

Completed export files remain available for one month. If a file is no longer
available, create a new export.

## Connected MCP clients

Each connected MCP client appears in the DIDWW User Panel with its recent
activity, last IP address, user agent, and available actions.

To review connected clients:

1. Open the account switcher in the upper-right corner.
2. Select **Account Settings**.
3. Select the **MCP Clients** tab.

Select **Revoke** to disconnect one MCP client or **Revoke all** to disconnect
every listed client. A revoked connection cannot be restored. To use the
client again, add or select the DIDWW connection and complete authorization
again.

## Privacy, security, and support

- For information about how DIDWW processes personal data, see the [DIDWW
  Privacy Notice](https://www.didww.com/privacy-notice).
- To protect your DIDWW account with two-factor authentication, see
  [Account security](../account-settings/two-factor-auth.html).
- For information about DIDWW security certifications, see
  [Certifications and memberships](../certifications-and-memberships.html).
- For assistance, contact [DIDWW Customer Support](mailto:support%40didww.com) or use
  the [DIDWW contact page](https://www.didww.com/contacts).

On this page