Privacy Policy

Last Updated: January 22, 2026

Effective Date: January 22, 2026

D&A Technologies ("we," "our," or "us") operates TransitIA, a platform that transforms API specifications into Model Context Protocols. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using TransitIA, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

What We Collect

  • • Email address (for authentication)
  • • OAuth profile data (name, avatar)
  • • OpenAPI specifications (temporarily)
  • • Usage analytics & logs

How We Protect It

  • • Industry-standard encryption (TLS 1.3)
  • • Secure cloud infrastructure (Vercel)
  • • Regular security audits
  • • Minimal data retention

Information We Collect

1. Information You Provide

  • Account Information: Email address, name, and profile picture (via OAuth providers like Google or GitHub)
  • API Specifications: OpenAPI/Swagger files you upload for MCP generation
  • Workspace Data: Project names, configurations, and generated MCP settings
  • Contact Information: Name, email, and message content when you contact support

2. Information Automatically Collected

  • Usage Data: Pages visited, features used, time spent, and interaction patterns
  • Device Information: Browser type, operating system, IP address, and device identifiers
  • Analytics: We use Vercel Analytics to understand user behavior and improve our service
  • Log Data: Server logs, error reports, and performance metrics

How We Use Your Information

We use the collected information for the following purposes:

  • • Service Delivery: To process your OpenAPI specs and generate MCP servers
  • • Account Management: To create and maintain your user account
  • • Communication: To send service updates, security alerts, and respond to inquiries
  • • Improvement: To analyze usage patterns and enhance our platform
  • • Security: To detect, prevent, and address technical issues and fraud
  • • Legal Compliance: To comply with legal obligations and enforce our terms

Data Retention Policy

OpenAPI Specifications

  • • Uploaded specs are processed to generate MCP code
  • • Specs are stored in your workspace for 30 days from last access
  • • You can delete specs at any time from your workspace
  • • Deleted specs are permanently removed within 7 days
  • • We do NOT use your specs to train AI models
  • • We do NOT share your specs with third parties
  • • Inactive workspaces (90+ days) may be archived with notification

Other Data

  • • Account data: Retained while your account is active
  • • Usage logs: Retained for 90 days
  • • Generated MCP packages: Retained until you delete them
  • • Contact submissions: Retained for 2 years for support purposes

Your Privacy Rights

Under GDPR and other privacy laws, you have the following rights:

Right to Access & Portability

You can request a copy of all personal data we hold about you in a machine-readable format. Go to Profile Settings → Export Data.

Right to Deletion ("Right to be Forgotten")

You can request deletion of your personal data at any time. Go to Profile Settings → Delete Account or contact contact@da-technologies.ma.

Right to Rectification

You can update or correct your personal information at any time through your profile settings.

Right to Object

You can object to certain processing activities, such as marketing communications (which we currently do not send).

To exercise any of these rights, contact us at contact@da-technologies.ma. We will respond within 30 days as required by law.

Cookies & Tracking Technologies

We use cookies and similar technologies for:

  • • Essential Cookies: Required for authentication and core functionality
  • • Analytics Cookies: Vercel Analytics (anonymized data) to understand usage
  • • Preference Cookies: To remember your language and theme preferences

You can control cookies through your browser settings. Note that disabling essential cookies may affect site functionality.

Third-Party Services

We use the following trusted third-party services:

  • Vercel: Hosting and infrastructure
  • Supabase: Database and authentication
  • Google/GitHub OAuth: Authentication providers (subject to their respective privacy policies)
  • Vercel Analytics: Privacy-focused analytics (no personal data collected)

Security Measures

We implement industry-standard security measures to protect your information:

  • • TLS 1.3 encryption for all data in transit
  • • Encryption at rest for sensitive data
  • • Regular security audits and vulnerability assessments
  • • Secure authentication with OAuth 2.0
  • • Access controls and logging for all administrative actions

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

International Data Transfers

D&A Technologies operates from Morocco. Your data may be transferred to and processed in countries other than your own, including outside the EU/EEA. We ensure adequate safeguards are in place through:

  • • Standard contractual clauses approved by the European Commission
  • • Our hosting provider's (Vercel) compliance with GDPR and international standards
  • • Encryption of data in transit and at rest
  • • Regular security audits and compliance reviews

If you are located in the EU/EEA, you have specific rights under GDPR, including the right to file a complaint with your local data protection authority.

Children's Privacy

TransitIA is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at contact@da-technologies.ma.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: