Privacy Policy

Last updated: March 2026

Overview

DSers MCP Product ("the Service") is an open-source MCP server that automates product import from AliExpress, Alibaba, and 1688 to Shopify or Wix stores via the DSers platform.

Data Collection

The Service collects only the data necessary to function:

• DSers account credentials (email and password) — provided by the user during the OAuth authorization flow. These are encrypted using AES-256-GCM and stored solely within the access token issued to the MCP client. No credentials are persisted on our servers.
• Product data — product titles, prices, images, and variants retrieved from DSers during import operations. This data is processed in-memory and not stored after the request completes.

Data Storage

The Service operates statelessly. No database or persistent storage is used on the server side. User credentials exist only inside the encrypted access token held by the MCP client (e.g., Claude).

Data Retention

Access tokens expire after 24 hours. Authorization codes expire after 10 minutes. No user data is retained beyond the lifetime of these tokens.

Third-Party Sharing

The Service communicates with the following third-party services on behalf of the user:

• DSers API (bff-api-gw.dsers.com) — to authenticate the user and perform product import and push operations.

No data is shared with any other third parties, analytics services, or advertising networks.

Usage

Credentials are used exclusively to authenticate with the DSers API for the purpose of importing and pushing products as instructed by the user through the MCP client.

Contact

For privacy-related inquiries, please open an issue on the GitHub repository.