Privacy policy

The short version

• We collect what Mind Made Many needs to work: what you type into the guide, what it writes for you, and, when you keep a company, your Google account's ID and email address.
• To write your plan, your words go to Anthropic, the company that makes the Claude AI models.
• We don't sell your data or use it for advertising, and the guide never sends, buys or publishes anything for you.
• Your draft is stored on Mind Made Many's servers. Until you keep it, only the browser that started it can open it, for 7 days.
• We keep invite codes and sign-in tokens only as hashes, and your IP address only as an hourly salted hash, to stop code guessing.

What we collect, and why

Your invite code

We use it to check your invite, mark it used and start your company. Mind Made Many's database never holds the code itself: only a hash of it (a one-way fingerprint), with when it was issued, when it was used and which company it started. An invite link carries its code in the web address, so our host sees it when you open the link.

What you tell the guide

Your company's mission, your answers to the three questions (and any line you add to them), and your note if you ask the guide to make its result sharper. We use them to write your plan and this week's move, and we keep them in your company's own storage. We don't remove personal details from what you type before storing it or sending it to Anthropic, so leave out anything you don't want to share, about yourself or anyone else.

What the guide writes for you

Every version of your plan, offer, draft and seven days of actions, and a record of each attempt: when it ran, which AI model it used, how much it used and what it cost. We keep the results so you can come back to them and keep them, and the cost records so your session stays within what Mind Made Many pays for.

Your Google account

When you keep a company with Google, or sign in to a company's office, Google tells us your account's ID (the code Google uses for your account) and your email address. We store both with your seat on the company's board. There's more in Google sign-in, below.

Your company's records

Once you keep a company, Mind Made Many stores what you and its AI workers put into it: its org chart, roles, tasks, messages and decisions. It also keeps an audit log (the office's Changes tab): a record of every change, who made it and when, including sign-ins and the email address of each Google account linked to a board seat.

If you write to us

Your message and your email address, so we can answer you. [board to confirm where these emails are kept, who can read them, and for how long]

Cookies

Three cookies that Mind Made Many needs to work, listed in Cookies, below.

Your network address, to stop code guessing

To stop anyone guessing invite codes, we count how many codes are tried from each network address each hour. We don't store your IP address: only a salted hash of it that changes every hour, with a count. Counts from past hours are deleted the next time a code is tried.

Cookies

Mind Made Many sets only the cookies it needs to work. Each holds a random token (we store only its hash), is sent only to Mind Made Many's own address over a secure connection, and can't be read by scripts on the page. Mind Made Many has no analytics, advertising or tracking cookies, and its pages load nothing from other sites.

__Host-firma_start

Remembers which company this browser started with an invite, so you can come back to your draft. Set when you press Start. Lasts 7 days from when you use your invite, or until you keep the company.

__Host-firma_auth

Ties a Google sign-in to the browser that started it, so nobody else can finish it. Lasts 10 minutes.

__Host-firma_read

Keeps you signed in to your company's office. Lasts 12 hours, or 30 days if you tick "Remember me on this browser for 30 days"; without that box, it usually also ends when you close the browser. Signing out removes it.

When you unlock editing in the office, the page gets a 10-minute edit pass that it keeps in memory only, never in a cookie. Google's own sign-in pages set Google's cookies, under Google's policies.

Who else handles your data

Mind Made Many relies on these providers. Each gets only what its job needs. [confirm the list]

Anthropic (AI models)

Writes your plan. Each time the guide runs, we send Anthropic your mission and answers (and, for a sharper version, the earlier result and your note), on Mind Made Many's own Anthropic account. Anthropic first measures the exact request, then writes the result, so it receives your words even when no result follows. When your company's AI workers run in Mind Made Many's cloud, they run in Anthropic's Managed Agents service: their instructions, their task and the company information they read through Mind Made Many's tools are processed there. When a run ends, Mind Made Many stops its session and archives it; archiving doesn't delete what the session holds. [link to Anthropic's terms; how long Anthropic keeps this data, and whether it may use it for training]

Cloudflare (hosting)

Runs Mind Made Many's servers and stores every company's data, each company in its own separate storage. Like any host, it handles your connection, including your IP address and the web addresses you open, to deliver Mind Made Many and protect it. [link to Cloudflare's privacy policy]

Google (sign-in)

Confirms who you are when you sign in with Google. See Google sign-in.

Stripe (payments) [board to confirm]

Takes payment for your company's plan, if your board subscribes. You enter your card and email address on Stripe's own pages, never on Mind Made Many's. Mind Made Many keeps Stripe's ids for your company's customer and subscription and the plan's state, never your card details, and it doesn't log what Stripe sends it. Subscriptions are in Stripe's test mode for now: nothing is charged. [link to Stripe's privacy policy; Stripe's role, as processor or controller; what Stripe keeps and for how long]

If you connect your own AI agents, accounts or API keys, the work they do for your company goes to those providers under your own agreements with them.

Beyond these, data goes elsewhere only through connections you set up, or when the law requires it. [board to confirm, and to add what happens to data if Mind Made Many's business is sold or transferred]

Google sign-in

Mind Made Many asks Google only for your account's ID and email address (the openid and email scopes). It doesn't ask for your name, photo or contacts, or for access to Gmail, Drive or anything else in your Google account. Mind Made Many calls no Google service for you, and it never keeps the access token Google sends with your sign-in.

• How we use it: to sign you in, to manage your access to your company's board, to show you which account is signed in, and to record sign-ins and account changes in your company's audit log. When you unlock editing, we pass your email back to Google so it can preselect your account.
• How we store it: your account ID, your email and when they were linked are kept with your board seat, in your company's storage. Each sign-in session's record notes the account ID too; the session's token is stored only as a hash.
• Who sees it: Cloudflare stores it for us. Your company's audit log records the email of each Google account linked to a board seat: your board can read that log, and so can your company's Director (an AI worker) once its seat is filled, so the Director's AI provider processes it too. Google knows when you sign in to Mind Made Many, under Google's own privacy policy.
• How to remove it: ask us at [contact email] to remove it, or to delete your company. Board members who also have a Mind Made Many key can unlink their Google account themselves in the office. Unlinking ends every session it opened, but doesn't delete records at once: expired session records are deleted when someone next signs in to the same company, and the audit log keeps its record of the link, with the email, for as long as the company exists. [board to confirm]

If we ever want to use your Google account data in a new way, we'll ask for your consent first.

What we don't do

• We don't sell or rent your data, to anyone.
• We don't use it for advertising or to build advertising profiles. Mind Made Many has no ads.
• We don't send, buy or publish anything on your behalf without your approval. The guide only writes drafts for you to use: it has no tools and doesn't search the web.
• We don't use your content to train AI models. [board to confirm]

Who can see your company

• Before you keep it: only the browser that started it.
• After you keep it: the people who sign in to its board, and the AI workers you put to work in it.
• Whoever gave you your invite sees only whether it has been used: never your company or what you wrote.
• Other companies, and Mind Made Many's own AI agents, can't open your company through Mind Made Many.
• The people who run Mind Made Many's hosting can technically reach stored data. [board to decide and state when, if ever, people at Mind Made Many look at first sessions or company data: for example to fix a fault, keep Mind Made Many safe, or improve the guide]

How long we keep it

• A draft you didn't keep: only the browser that started it can open it, for 7 days from when you used your invite. If that browser loses its cookie (you clear cookies, close a private window, or switch browser or device), the draft is lost to you, and we can't hand it back. After 7 days nobody can open it through Mind Made Many, but losing access doesn't delete it: it stays in Mind Made Many's storage. Deleting it: [to be confirmed by the board: automatic deletion is planned]
• A company you kept: its data doesn't expire. It stays until the company is deleted at your request; there's no delete button yet.
• Invite records: Mind Made Many keeps a small record of each invite (when it was issued and used, the company it started and what its session cost), with codes and browser tokens only as hashes and none of your content. [retention period]
• Sign-in records: a sign-in must finish within 5 minutes, and a session ends when it expires (see Cookies) or you sign out. Session records are deleted after they expire, when someone next signs in to the same company: not on a fixed schedule.
• Rate-limit counts: deleted the next time a code is tried in a later hour, as described above.
• Copies at our providers: Anthropic keeps what it processes under its own terms, and deleted data may stay in our host's recovery copies for a while. [board to confirm: Anthropic's retention, and Cloudflare's recovery window]

Getting a copy, or deleting your data

Ask us at [contact email] for a copy of your data, or to delete it.

• A company you kept: write from the email address of the Google account linked to it, so we can check it's you.
• A draft you never kept: [board to decide how we check a request about a draft that was never kept]

We'll reply within [response time]. Your board can download a copy of your company's data itself: in the office, Download company data (in the Plan panel) gives everything Mind Made Many holds about your company as a file, except credentials (keys, sign-in sessions and the like). There's no button yet to delete a whole company, so deletion requests are handled by hand. [board to approve that procedure: who handles requests, what is deleted, and what records are kept]

Your rights

You can ask us:

• what data we hold about you, and for a copy of it;
• to correct it, or to delete it;
• to stop or limit a use of it, or object to it;
• for your company's data in a form you can take elsewhere.

You can also complain to a data protection authority.

[rights under the laws that apply to Mind Made Many and its users, the legal bases for processing, and Mind Made Many's role as controller or processor, where the GDPR applies: to be added by the board's lawyer]

Keeping it safe

Mind Made Many's own credentials (invite codes, browser tokens, board keys and sign-in tokens) are stored in its databases only as hashes. Cookies can't be read by scripts on the page. Each company's data is kept in its own storage, apart from every other company. The office and start pages run under strict browser security rules.

No system is perfectly secure. If a breach affects your data, we'll tell you [how, and how quickly].

Where it's processed

Anthropic, Cloudflare, Google and Stripe run around the world, so your data may be processed outside your country. [board to confirm where data is stored and processed, and the safeguards for international transfers]

Children

Mind Made Many isn't for anyone under [minimum age]. If you think a child has given us data, tell us at [contact email] and we'll delete it.

Changes to this policy

When we change this policy, we'll post the new version here and update the date at the top. If a change affects how your data is used, we'll tell you before it takes effect [how: for example in your company's inbox].

Contact

[legal entity name], [address]. Email: [contact email].