Shipajay connector privacy policy

Effective 2 November 2026

This policy covers the Shipajay MCP connector at https://api.shipajay.kz/api/public/mcp, which AI assistants such as Claude and ChatGPT use to read the public catalogue of Saryagash sanatoriums. Booking and payment on shipajay.kz are covered by the main privacy policy.

Who we are

Bronda LLP (ТОО «Bronda»), BIN 260340018510, ул. Ы.Алтынсарина, стр. 33, п. Коктерек, Сарыагашский район, Туркестанская область, 160900, Kazakhstan. Contact: [email protected].

What the connector receives

Only the arguments of a tool call: search text, a treatment, a price limit, a sanatorium's short name, dates, the number of adults, children's ages, a room type and a language. The tools do not accept names, phone numbers, email addresses, documents or medical information, and the assistant is told not to ask the guest for diagnoses.

With each request our servers also see the network address (IP) of the caller. When you use an assistant, this is normally the assistant provider's server, not your device.

There is no account or sign-in, and the connector sets no cookies.

What it returns

Public catalogue data only: sanatoriums, rooms and prices, procedures, terms, free places on dates and price quotes. It never returns other people's data, bookings or medical records.

How we use and store data

Tool arguments are used only to answer that call. They are not written to logs or a database.
Our server log records the tool name, whether the call succeeded, and the time, to keep the service working.
The caller's IP address is kept in a rate-limit counter that expires after one minute or 24 hours, depending on the limit.
Standard access logs of our network and hosting providers (IP address, time, address requested) are kept for up to 90 days for security.
We do not use this data for advertising or profiling, do not sell it, and do not use it to train AI models.

Sharing

Cloudflare protects and delivers our site and API, and processes requests in transit.
Our servers are hosted by cloud providers in Kazakhstan.
Government authorities, only on a lawful request under the laws of Kazakhstan.

Your conversation with an assistant is handled by its provider (for example Anthropic or OpenAI) under that provider's privacy policy. We receive only the tool calls described above.

Retention

Rate-limit counters: up to 24 hours. Server and access logs: up to 90 days. Tool arguments: not retained.

Your rights and contact

You can ask what we hold about you, and ask us to correct or delete it, under the Law of the Republic of Kazakhstan «On personal data and their protection». Write to [email protected] or WhatsApp +7 708 274 46 94.

If this policy changes, we update the date above.

Кратко по-русски

Подключение для ИИ-ассистентов получает только параметры поиска и поездки (даты, число взрослых, возраст детей и т. п.) — никаких имён, телефонов и медицинских данных; входа и cookies нет.
Параметры вызова не сохраняются и не пишутся в журналы; в журнале — только название инструмента, итог и время.
IP-адрес вызывающего сервера хранится в счётчике ограничения запросов не дольше 24 часов; журналы доступа — до 90 дней.
Данные не продаются, не используются для рекламы и обучения моделей.
Вопросы и запросы на удаление: [email protected], WhatsApp +7 708 274 46 94.