Privacy Notice

Mindflov acts as the data controller for the personal data described in this notice. Contact: hello at mindflov dot com.

• Account data — name and email address, to create and secure your account.
• Login credentials — handled by our authentication provider; we never see your password.
• Content you create — the ideas, prompts, and maps you make, to provide the service (saving, sharing, exporting).
• Usage and telemetry — feature usage, generation counts, and product events, to operate the service, enforce plan limits, and improve the product.
• Device and connection data — IP address and device identifiers, for security and fraud prevention.
• Support messages — anything you send us when you ask for help.

We process account data and content to perform our contract with you; usage, device, and security data on the basis of our legitimate interests in operating and improving a secure service; marketing communications only with your consent; and certain records where required by law.

• Service providers and subprocessors — hosting, database, authentication, and analytics providers that process data on our behalf under contract.
• Paddle — our Merchant of Record. Paddle processes purchase, subscription, payment, tax, and invoicing data as an independent controller for your transaction. We do not see or store your card details.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law.

We do not sell your personal data.

Some of our providers process data outside the UK/EEA. Where they do, transfers are protected by adequacy decisions or standard contractual clauses.

We keep your data only as long as needed for the purposes above — your account data while your account is active, and operational records for a limited period afterward. Data is deleted or anonymised when no longer needed.

Depending on your country, you have rights to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent at any time. If you are in the UK or EEA, these rights apply to you under GDPR, we respond within one month, and you have the right to complain to your supervisory authority. To exercise any right, email hello at mindflov dot com.

We apply appropriate technical and organisational measures — encryption in transit and at rest, access controls, and row-level data isolation — to protect your personal data.

We use essential cookies and browser storage required to sign you in and operate the canvas. We do not use marketing cookies. You can clear cookies and site data in your browser settings at any time; doing so will sign you out.