LandAI is operated by Pato Apps LLC. This supplement describes the MCP connection and accompanies the existing LandAI privacy policy. Effective date: October 12, 2026.
Connecting an AI assistant uses your existing LandAI account. LandAI processes the account identifier and email, the requesting AI application's identity, your consent and connection status, and connection credentials and their expiry. The AI application receives a revocable connection credential, not your LandAI password. Firebase verifies sign-in; existing RevenueCat and Stripe integrations determine subscription access. Premium access and usage limits are checked when tools run.
LandAI receives the address, selected parcel identifier or coordinates and lookup options provided by your connected assistant. Address search uses Google Places. Supported parcel requests use LandAI's parcel records or ReportAll as applicable. Results can include recorded owner names, site or mailing addresses available in the record, parcel identifiers, parcel details and boundary geometry. Property-line diagrams are generated from returned geometry. These results, diagrams and requested usage summaries are sent to the AI provider you connected, such as OpenAI or Anthropic.
Recorded ownership does not establish who currently lives at a property. The connection does not provide occupants' private telephone numbers or email addresses.
Information is processed to authenticate the connection, retrieve requested records, enforce the shared Premium allowance, prevent duplicate reservation charges for matching retries, secure the service and diagnose failures. The MCP server is hosted on Hetzner. Encrypted connection backups can be stored on Hetzner Storage Box. Google, ReportAll, subscription/authentication providers and your chosen AI provider process the information needed for their respective services. LandAI's existing privacy policy describes its wider service practices.
Pending connection requests expire after ten minutes; approval sessions and authorization codes expire after two minutes; access credentials expire after fifteen minutes; refresh credentials expire after thirty days and rotate when used. Expired or revoked connection objects are removed during subsequent store writes. Disconnected grants are eligible for cleanup after one hour when no associated connection objects remain. Registered AI-client metadata has no automatic expiry; credential expiry and disconnecting a user grant do not delete that registration. These lifetimes govern authentication and do not describe deletion of account records, usage records, logs or backups.
For access, correction or deletion requests, contact privacy@landai.app. Requests are subject to identity verification and applicable legal limits. Revocation, an allowance reset and a deletion request are different actions; do not assume revocation erases historical records or backups.
You approve each new connection and can disconnect it through the LandAI AI-connections page. Disconnecting prevents further use of that grant; it does not delete existing conversations held by the AI provider or all LandAI account and usage records. The AI provider's own privacy policy and account settings govern its conversation handling. The existing LandAI policy provides privacy-request contact privacy@landai.app and the contact page.
The privacy contact is monitored by LandAI. For a deletion request, identify your LandAI account and the information concerned; do not send passwords or connection tokens. LandAI will review the request under its existing privacy policy. To delete conversations retained by an AI provider, use that provider's controls or contact it directly.