Privacy Policy
This Policy explains how we collect, use, and share information when you use SecondMind.
1. Data we collect
- Account data: email, name, password hash (we never store plaintext passwords).
- Billing data: handled by Stripe (customer ID, subscription status). We do not store full card numbers.
- Customer Content: notes, inbox captures, skills, settings you create in the Service.
- Usage / technical: IP address, user agent, timestamps, login attempt logs for security.
- Service logs: when a request fails we record the technical detail of the failure (error type, the endpoint involved, and your account id) so we can fix it. Credential-shaped values are stripped before storage. These logs exist to operate the Service, not to profile you.
- AI usage records: which AI actions you ran, the credits they used, the model that served them, and token counts. We also record AI requests that failed, so we can apply fair-use limits and detect automated abuse.
2. How we use data
- Provide, secure, and improve the Service
- Authenticate users, apply fair-use limits, and prevent abuse
- Process subscriptions and communicate about billing
- Run AI features you invoke through our managed model provider
- Comply with law and enforce our Terms
3. Processors & subprocessors
We share data with the following processors so the Service can run. This list is current as of the effective date above; we will update it here before adding a processor that handles Customer Content. We may need to change our model provider at short notice — during a provider outage, for example — and will update this list when we do.
| Processor | Purpose | Data | Location |
|---|---|---|---|
| Hostinger | Hosting and storage | All account data and Customer Content | EU / US |
| Stripe | Payments | Billing identifiers, email. We never see full card numbers. | US |
| Mailgun (Sinch) | Outbound and inbound email | Email address, message content you send to your capture address | US / EU |
| DeepSeek | Default LLM processing for managed accounts | The text of captures and notes you process | China |
Transfers outside your region. Our default managed model provider, DeepSeek, processes data in China, which is not covered by a UK or EU adequacy decision. Do not process sensitive data if that transfer is unacceptable for your use case.
4. Sharing
We do not sell personal information. We share data with processors needed to run the Service, when required by law, or to protect rights and safety.
5. Retention & deletion
Account data and Customer Content are retained while your account is active.
Export
You can export everything at any time from Account → Usage & storage, as a zip of plain markdown files. Export before you delete anything you may need later.
Deleting individual items
Deleting a note, skill, or agent is immediate and permanent. There is no trash bin and no recovery period. Community listings you authored are removed when you delete or unpublish the item. Copies other people already installed remain in their vaults.
Closing your account
You can delete your account yourself from Account → Usage & storage. Deletion is immediate and permanent: we erase your account identity, notes, skills, agents, uploads, settings, API keys, jobs, and Community listings you published, and we cancel any active Stripe subscription so billing stops. You confirm with your email and password. There is no grace period and no way to restore the account afterward.
Community publications
Anything you publish to the community library is public. It is visible to other users, and copies installed by others remain with them after you unpublish or delete your account. Do not publish anything you would not want public, and do not include credentials or other people’s personal data in a published skill or agent.
What may remain after account deletion
- Billing records (invoices and payment history) retained by Stripe where required by law and their policies.
- Security / abuse markers — a minimal record that an account id was rate-limited, flagged, or suspended, and when (detail text scrubbed; no email or Customer Content).
- Service / error logs kept for a short operational period (about 30 days), with any account link removed, then overwritten.
- Backups overwritten on a rolling basis.
Deleted Customer Content is not recoverable from the live Service.
6. Security
We use HTTPS, hashed passwords (bcrypt), HTTP-only session cookies, CSRF protections on authenticated mutating requests, and access controls. No method of transmission or storage is 100% secure.
7. Your rights
Depending on your location (e.g. GDPR/CCPA), you may request access, correction, export, or deletion of personal data by emailing contact@controlgrp.com. You may also cancel your account via support.
8. Children
The Service is for adults. It is not directed to anyone under 18, we do not knowingly collect their data, and we will delete such an account and its content on becoming aware of it. Our model provider’s terms also assume an adult account holder.
9. International transfers
Data may be processed in the United States or other countries where we or our processors operate. Where required, we use appropriate safeguards.
10. Changes
We may update this Policy and will post the new effective date here.
11. Contact
contact@controlgrp.com
This document is a practical baseline, not formal legal advice. Have counsel review before public launch if you need jurisdiction-specific compliance.