Last updated August 10, 2026. Questions: hello@inbin.dev.
This policy covers the public Pulse flight-deals MCP server, reachable at https://pulse.inbin.dev/mcp and via the open-source pulse-flight-deals-mcp npm package. It is a separate service from the Inbin inbox platform (see the Inbin privacy policy for that). The Pulse MCP is public and requires no account, no login, and no API key.
The server exposes two read-only tools. is_this_a_flight_deal returns the fares we have recorded for a route (price range, median, and the individual observations) so an AI agent can judge whether a price is good. top_flight_routes returns an aggregate, ranked list of the routes most checked recently. The server holds no personal data and issues no credentials.
Tool-call inputs (is_this_a_flight_deal only): when the judge tool is called, we record the query itself, the origin and destination airport codes, the price, the trip type, the free-text dates string, and a timestamp. We keep this as a demand signal, which routes people ask about, so we know which fares to track next. top_flight_routes records nothing.
No identity. We do not collect or store your name, email, account, device identifiers, or the content of your conversation with the AI. A tool-call record cannot be tied back to a person by us.
IP address: your IP is used only to enforce rate limits (to keep the free service available). It is used to form a short-lived counter and is not stored alongside your queries or used to profile you.
The fares the tools return are observations structured from public flight-deal newsletters and price alerts. They are historical observations, not live quotes and not a forecast. The tools return prices and route metadata only, never third-party email content.
We do not sell or share tool-call data with third parties for advertising. The service runs on our infrastructure provider (Vercel) and a managed database, which process requests on our behalf as subprocessors. We disclose data only if required by law.
Tool-call demand records are retained for up to 12 months and then deleted or aggregated beyond recovery. Rate-limit counters expire within minutes. Because we store no identity, there is no per-user profile to retain or delete.
The tools are read-only and store no personal data, so there is nothing to opt out of at the identity level. If you have a question or a data request, email hello@inbin.dev and we will respond.
If this policy changes materially we will update this page and its date. Continued use of the MCP after a change means you accept the update.
See also the Pulse MCP terms of use.