Privacy Policy

1. Who We Are

Mindo (getmindo.io) is a visual content subscription service registered in Malta. This Privacy Policy explains how we collect, use, and protect your personal data. For any privacy-related questions, contact us at [email protected].

2. Data We Collect

We collect the following data when you use Mindo: • Account information: your email address and name, provided at signup. • Product content: product photos, brand details, and brief notes you upload to your dashboard. • Payment information: billing is processed by our payment provider (Paddle or LemonSqueezy). Mindo does not store your card details — these are handled entirely by the payment processor. • Usage data: basic logs of how you interact with our platform, such as pages visited and actions taken, used solely to improve the service.

3. How We Use Your Data

We use your data only to deliver and improve the Mindo service. Specifically: • To produce and deliver your visual content. • To communicate with you about your orders, deliveries, and account. • To send service-related emails (delivery confirmations, revision notifications). • To maintain and improve our platform. We do not use your data for advertising, and we do not sell it to any third parties.

4. Data Storage

Your data is stored securely in Supabase, hosted in the EU region. Product photos and deliverables are stored in secure cloud storage. We retain your data for as long as your account is active. Upon account deletion, your personal data and uploaded content are removed within 30 days.

5. Cookies

Mindo uses session cookies only — these are required for authentication and keeping you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No cookie consent banner is required beyond what is necessary for the service to function.

6. Third Parties

We share data with third parties only where necessary to deliver the service: • Payment processors (Paddle or LemonSqueezy) handle all billing and card data. • Supabase stores your account data and content in the EU. We do not share, sell, or rent your data to any other third parties.

7. Your Rights

As a user based in the EU or under GDPR, you have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your account and personal data. • Object to or restrict how we process your data. • Data portability — receive your data in a common format. To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. All data is transmitted over HTTPS. Access to customer data is restricted to team members who need it to deliver the service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through your dashboard. The date at the top of this page indicates when the policy was last updated.

10. Governing Law

This Privacy Policy is governed by the laws of Malta and complies with the EU General Data Protection Regulation (GDPR). For any unresolved privacy concerns, you have the right to lodge a complaint with the Malta Information and Data Protection Commissioner (IDPC).

Privacy questions? Email us at [email protected]