Festapp

Festapp MCP privacy information

Provider and selected environment

Festapp MCP is provided by Michael Bujnovský, registration number 06455361, Přívozská 1704/24, Moravská Ostrava, 702 00 Ostrava, Czech Republic. Contact: [email protected]. The organizer responsible for event data and the applicable account/service terms remain those of the environment you select.

Optional delegated access

You choose one verified Festapp environment for each connection, then select organizers or events and approve functions. The connection's scopes and client data profile further limit your current account rights. A shared endpoint grants no access to other environments. You can maintain separate named connections and revoke them in the selected environment's account connection settings.

The connected client receives the results of operations you request within that permission boundary. Depending on the client profile and approved functions, results can include event and organizer information, ticket artwork, order identifiers and symbols, counts, amounts, payment status, and operational records including personal data. Operator profiles can expose authorized customer or registration details; the restricted public ChatGPT order-summary profile withholds order customer names, contacts, notes, registration responses and field definitions. Identifiers and symbols are still personal data when they can be linked to a person.

Where explicitly approved and supported, tools can change event configuration, registrations, orders or other authorized records and can initiate the application effects described by the operation. Approving a connection alone performs no such operation. Check the displayed function, affected records and side effects before requesting a write. The ordinary application's authorization and transaction rules apply.

Authentication and technical records

The first-party account service verifies your login. The connecting client receives OAuth credentials for this MCP service, not your application password or application refresh token. The broker issues an independent backend session for the approved connection. The service stores encrypted session and grant state and bounded security/operation records such as hashed actor/connection identifiers, client, tenant, operation, request ID and outcome. It does not intentionally log access tokens or returned customer content. Expiry, refresh and revocation are enforced by the connection service and current account permissions.

Your choice and the client's use

Connecting is optional. Data returned to the chosen client may enter its conversations, storage or workflows and is subject to that provider's terms and your account settings. Only authorize clients and disclosures appropriate for your event and purpose. The existing public ChatGPT connection is intended for organizers and must not be used for children's data or government identifiers; do not put these in event names or ticket artwork.

Revocation stops future access through the connection and removes its independent backend session. It does not erase data already returned to a client; manage that data with its provider. For access, correction, deletion and other data requests, contact the responsible organizer or [email protected] as appropriate. Your selected environment's privacy information continues to describe its ordinary account and event processing.