Privacy Policy

1. Introduction

Welcome to MindBoard.ai, a product of MindBoard AI, Inc. ("we," "our," or "us"). We are committed to protecting your privacy and handling your information responsibly. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use the MindBoard.ai platform (the "Service"). By accessing or using our Service, you agree to the terms of this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Account Information: Name, email address, password, and demographic details you provide when registering.
• Billing Details: Payment method information (e.g., credit card data) provided to our payment processors.

2.2 Content and Usage Data

• Your Content: Text, files, documents, and media you upload or generate via the platform (e.g., knowledge boards, AI-generated outputs).
• Usage Metrics: Interaction logs, feature usage, session duration, IP addresses, browser and device data, and Research Agent queries.

2.3 Cookies and Tracking Technologies

• Cookies: We use cookies to remember preferences, enable features, and analyze site traffic. You can manage cookie settings via your browser or in our Cookie Policy.
• Analytics: We employ tools like Google Analytics to understand usage patterns and improve the Service.

2.4 Third-Party Services

• Integrations: When you connect third-party apps (e.g., cloud storage), we collect metadata and content you authorize.
• Social Login: If you sign in with a service (e.g., Google), we receive account identification details from that provider.

3. How We Use Your Information

We use data to:

1. Provide & Maintain the Service: Authenticate users, deliver AI features, generate and store your knowledge boards.
2. Improve & Innovate: Aggregate and anonymize usage data to train and refine our AI models, unless you opt out in your account settings or by contacting support@mindboard.ai.
3. Communicate: Send account-related notices, billing reminders, product updates, and marketing emails (you may unsubscribe anytime).
4. Legal Obligations: Comply with applicable laws, enforce our Terms of Service, and protect rights and property.

3.1 Lawful Basis for Processing (GDPR)

Where EU/UK law applies, we process your personal data based on:

• Contract: To provide the Service you requested.
• Legitimate Interests: To improve our Service and prevent fraud.
• Consent: For marketing communications (you may withdraw consent anytime).
• Legal Obligations: To comply with applicable laws and regulations.

3.2 AI Processing

We use AI to analyze patterns and improve our models on aggregated, anonymized data. Individual content is not reviewed by humans unless you request support or otherwise give explicit permission.

4. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Payment processors (e.g., Stripe), hosting providers (e.g., Supabase), analytics vendors—under confidentiality agreements.
• Affiliates & Subsidiaries: Within the MindBoard AI, Inc. family, for internal operations and support.
• Legal Requests: Government authorities or courts, as required by law or to protect legal rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

5. International Transfers

Your data may be stored and processed in the United States or other jurisdictions. We take steps to ensure adequate protection, such as Standard Contractual Clauses for transfers from the EU.

6. Data Security

We implement industry-standard security measures (encryption in transit, access controls) to safeguard your data. However, no system is completely secure; you use the Service at your own risk.

7. Data Retention

• Account Data: Retained until you delete your account or as required by law.
• Backups: Persist up to 90 days post-deletion.
• Usage & Logs: Retained for up to 24 months for analytics and support, then anonymized or deleted.

8. Your Privacy Rights

8.1 General Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the right to:

• Access: Obtain a copy of your personal data.
• Rectification: Correct inaccurate or incomplete data.
• Deletion: Request erasure of your personal data.
• Portability: Receive your data in JSON format.
• Restriction or Objection: Limit processing or object to certain uses.
• Opt-Out of Sale: (California residents) We do not sell data; no action needed.

8.2 Region-Specific Rights

• EU/UK Residents: Right to lodge a complaint with a supervisory authority.
• California Residents: Right to non-discrimination for exercising privacy rights.
• Nevada Residents: Right to opt-out of sale (not applicable as we do not sell data).

8.3 Children's Privacy

Users under 18: Ages 13–17 may use only with verifiable parental consent. We do not knowingly collect personal data from children under 13.

9. Cookies & Tracking

For details on cookies and opt-out mechanisms, please see our Cookie Policy. You can control cookies via your browser settings.

10. Data Breach Notification

In the event of a confirmed data breach affecting your personal data, we will notify you via email within 72 hours of discovery.

11. Third-Party Links & Content

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their policies.

12. Changes to This Policy

We will update this Privacy Policy as needed. For material changes, we will notify you via email at least 30 days in advance; for non-material changes, at least 7 days in advance. The "Effective Date" at the top reflects the latest revision.

13. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

• Data Protection Officer: privacy@mindboard.ai
• Support: support@mindboard.ai
• Legal: legal@mindboard.ai
• Mailing Address: MindBoard AI, Inc., 28 Geary St STE 650 #11, San Francisco, California 94108, United States

Thank you for reviewing our Privacy Policy.