Privacy Policy

1. Information we collect

Information you provide

• Account data: your name, email address, profile image, sign-in provider, and account identifier.
• Billing data: billing email, subscription status, and Stripe customer and subscription identifiers. Payment card details are handled by Stripe and are not stored by Mind Weave.
• Workspace content: mind-map titles, groups, drawings, text, images, notes, links, scene data, and sharing settings when you use cloud-sync or sharing features.
• Communications: information you include when you contact us for support, privacy requests, or feedback.

Information collected automatically

We and our infrastructure providers may process IP address, browser and device information, request timestamps, pages or features used, referral information, diagnostic logs, and security events. We use this information to operate, secure, and improve the Services.

2. Local and cloud storage

The unsigned-in workspace stores map data and preferences in your browser’s local storage. That data remains on the device unless you export it, clear browser storage, or choose a feature that sends it to the Services.

When you sign in, Mind Weave may sync your maps to our hosted database so they are available through your account. If you create a share link, anyone who has that link may be able to access and, for an editor link, change the shared map. You are responsible for deciding what to include and who receives the link.

3. How we use information

• Provide, maintain, synchronise, and improve the Services.
• Authenticate users and protect accounts and shared content.
• Process subscriptions and provide account and billing support.
• Respond to inquiries, service messages, and legal requests.
• Monitor reliability, troubleshoot errors, prevent misuse, and investigate security incidents.
• Comply with applicable law and enforce our agreements.

4. Legal bases

Where data-protection law requires a legal basis, we process personal information as necessary to perform our contract with you, pursue our legitimate interests in operating and securing the Services, comply with legal obligations, or act with your consent. You may withdraw consent at any time, without affecting earlier processing.

5. How we disclose information

We do not sell personal information or use it for third-party behavioural advertising. We may disclose information to:

• Service providers: Cloudflare and our hosting infrastructure, Google for optional sign-in, and Stripe for subscription billing.
• Professional advisers: lawyers, auditors, insurers, and similar advisers where reasonably necessary.
• Authorities or other parties: when required by law or reasonably necessary to protect users, the public, our rights, or the security of the Services.
• Transaction participants: in connection with a merger, financing, acquisition, reorganisation, or sale of all or part of our business, subject to appropriate safeguards.
• People you choose: when you create or distribute a map share link or otherwise direct us to disclose information.

6. Cookies and similar technologies

You can control cookies and local storage through your browser. Blocking or clearing them may sign you out or remove maps stored only on that device.

7. Retention and security

We retain personal information for as long as needed to provide the Services, meet legal and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary by data type and context. Local-only map data remains in your browser until you remove it. You may delete individual cloud maps within the workspace or ask us to delete account information, subject to lawful retention needs.

We use commercially reasonable administrative, technical, and organisational safeguards, including encrypted network transmission, access controls, and signed, secure session cookies. No system is completely secure, and we cannot guarantee absolute security.

8. International transfers

Traciq and its service providers may process information in countries other than your own. Where required, we use recognised safeguards for international transfers, such as adequacy decisions, contractual protections, or another lawful transfer mechanism.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information; restrict or object to processing; withdraw consent; or lodge a complaint with a regulator. You may also have a right not to be discriminated against for exercising a privacy right. We may need to verify your identity before completing a request.

The Services are not directed to children under 18, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided information to us.

10. Changes and contact

We may update this policy from time to time. We will post the revised policy here, update the date above, and provide additional notice when required by law.

Questions or privacy requests may be sent to inquiry@mindweave.work. Please include “Mind Weave privacy” in the subject line.