Privacy: PlanningLedger for AI assistants
Last updated: 21 October 2026
Who we are
PlanningLedger is a trading name of Alpha Maven Ltd, a company registered in England and Wales under company number 09070132, with its registered office at Unit 302, The Finsbury Business Centre, 40 Bowling Green Lane, London EC1R 0NE. Alpha Maven Ltd is the data controller for the personal data described here. Contact us at hello@planningledger.com.
This policy covers the PlanningLedger connector at mcp.planningledger.com, which you use from an AI assistant. Our website has its own policy at planningledger.com/privacy.
What we keep
- Your email address, which you prove with a six-digit code we email you. We use it to sign you in and to count your daily allowance, and we record when you first and last signed in.
- Your assistant's registration: the name it gives itself and the address it asks us to return you to after sign-in.
- The inputs of each tool call your assistant makes: the tool's name and what it asked for, such as a council, an application reference, a postcode or a search phrase, with the time, whether the call worked and how long it took. We use them to run the allowance, to keep the service working, and to learn what people ask so we can improve it.
We never receive your conversation with your assistant, only the inputs it chooses to send to one of our tools, and we never store a conversation. We do not log what our tools send back. We store sign-in codes and access tokens only as one-way hashes.
What we don't do
We don't sell your data, show advertising, or use your inputs to train AI models. Our tools are database queries: no AI model of ours writes anything from your inputs. The one exception to "nothing leaves our systems" is a search phrase: it is sent, on its own, to the embedding model that turns it into a search vector, which DeepInfra runs for us in the United States. Nothing that identifies you goes with it.
Cookies
One essential cookie on mcp.planningledger.com, set when you sign in, so that connecting another assistant doesn't need a new code. It lasts 30 days. There are no analytics or advertising cookies.
Where it is processed
On our own servers in Helsinki, Finland. Sign-in emails are sent through SMTP2GO's EU service. Your conversation is handled by your assistant's provider (for example Anthropic or OpenAI) under its own privacy policy.
Legal basis
Signing you in and counting your allowance are needed to provide the service you ask for (UK GDPR Article 6(1)(b)). Keeping the inputs of tool calls to run, protect and improve the service is in our legitimate interests (Article 6(1)(f)).
How long we keep it
Tool-call inputs are deleted after 12 months. Sign-in codes expire after 15 minutes, access tokens after an hour and refresh tokens after 30 days. We keep your email address while you use the connector. Ask us and we delete everything of yours within 30 days.
Planning records
The records our tools return come from statutory public registers published by local planning authorities, which apply their own redaction before publishing. Quotes are capped at 40 words and are never taken from neighbours' letters or application forms.
Your rights
Under UK GDPR you can ask to see, correct or erase the personal data we hold about you, object to our processing, and ask for a copy to take elsewhere. Email hello@planningledger.com and we will reply within one month. If you are unhappy with our reply you can complain to the Information Commissioner's Office (ico.org.uk).