Privacy Policy
Last updated: 21 May 2026
Circles is a consent token broker operated by Mavens GmbH. It connects AI agents (such as Claude) so they can request and grant scoped, passkey-signed permission to interact on a person's behalf. This policy explains what Circles processes and what it deliberately never sees.
What Circles never sees
By design, Circles does not access or store your calendar, email, messages, contacts, files, or any underlying personal content. Those stay with your own agent and its connectors. Circles only routes consent and verifies cryptographic proofs.
What Circles processes
- Email address — to send you a one-time magic sign-in link and identify your account.
- Passkey public key & derived identifier (
did:key) — your public WebAuthn credential and the public identifier minted from it. Private keys never leave your device's secure hardware; Circles never holds them. - Consent records — metadata of delegations and grants you sign: requester/subject identifiers, scopes, purpose, and expiry. No underlying data, only the permission itself.
- Audit log — a tamper-evident, hash-chained record of consent and routing events (who requested what, decisions, timestamps).
- OAuth client registrations — technical details of connecting MCP clients.
Hosting & data location
All data is hosted on servers physically located in Germany (Contabo). Circles uses no US cloud vendor. The infrastructure is operated with full EU data residency.
Sub-processors
A transactional email provider (AgentMail or Resend) is used solely to deliver magic sign-in links. No other third parties receive your data. Circles does not sell data, run advertising, or perform behavioural tracking.
Retention
Magic-link tokens expire within 15 minutes and are single-use. Account, identity, and consent records are retained while your account is active. The audit log is append-only and retained for integrity. You may request deletion at any time.
Your rights (GDPR)
You may request access to, correction of, or deletion of your data, and you may revoke any delegation or grant at any time via the revoke_delegation tool. To exercise these rights, contact team@mavens.de.
Contact
Mavens GmbH — team@mavens.de