Privacy Policy

1. Who We Are

This Service is operated by ProcessMind Solutions, a Brazilian individual entrepreneurship (Empresário Individual) registered under Simples Nacional. Full legal-entity registration details are available on request.

2. Information We Collect

• Account information: your email address, for every account.
• Request-access information: if you sign up via "Request access" (no invite code yet), we also collect your name and how you heard about us — this is deleted once an invite code is issued for you, not kept as ongoing account data.
• Agent configuration data: the agent files you import, create, or edit within the Service.
• Chat and import content: the instructions and content you submit through the chat interface or import dialog.
• Usage metadata: which agent, which AI provider and model, timestamps, token counts, and call duration — logged for every AI call attempt, whether it succeeds, fails, or is blocked.
• Google account information (only if you sign in with Google): your Google email address and account identifier. We do not receive or store your name from Google.
• Session cookie: a signed token that keeps you logged in.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Maintain an audit trail of AI usage, for security and to keep track of shared API cost.
• Respond to your requests and communicate with you about your account.
• Process access requests and issue invite codes.

We do not sell your personal data.

4. Third-Party AI Providers

Content you submit through the chat and import interfaces is sent to whichever AI provider this deployment is currently configured to use — Anthropic, and/or an OpenAI-compatible vendor (e.g. NVIDIA), depending on an admin setting. Their own privacy policies govern how they handle that content once it reaches them, not this one.

5. Who Can See Your Content — Including the Admin

The admin of this deployment can always see metadata about your AI calls — which agent, when, how many tokens — to audit the shared API key. New accounts are created with "Share my prompts with the admin" on by default — you can turn it off at any time from your Account settings, and you're asked about this choice once, right after you first sign up. When it's on, the admin can also see the actual text of your instructions and the AI's replies. This choice is not retroactive in either direction: turning it off does not hide past shared calls; turning it back on does not expose past private ones.

6. Data Sharing

We do not sell your data. It is shared only with the AI provider processing your request (§4) and, according to your own consent choice, with the admin (§5). We do not share your data with any other third party.

7. Cookies & Session Tokens

The Service uses a single session cookie to maintain your login state. This cookie is required for the Service to function and is cleared when you log out or when your session expires. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Data Security

Passwords are hashed and never stored in plain text. Session tokens are cryptographically signed. We take reasonable technical measures to protect your data against unauthorized access, loss, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your account information and agent data for as long as your account is active. Usage metadata (the activity log) is currently retained indefinitely — a retention or purge policy is planned but not yet built.

10. Your Rights

Depending on your location, you may have rights under frameworks like the GDPR (EU/UK) or CCPA (California) to access, correct, or request deletion of the personal data we hold about you. Contact us to exercise these rights — at this scale, requests are handled manually rather than through a self-service tool. Please note that deleting your account may result in permanent loss of your agent configurations.

11. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

13. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact ProcessMind Solutions at mbmorote@gmail.com.