1. Scope and contact
This policy applies to the Mindify Map website, AI mind map generator, Google sign-in, sharing tools, and subscription features. Mindify Map is responsible for the product experience and the personal information described here. For privacy questions or requests, email support@mindifymap.com.
2. Information we process
Account information
When you sign in with Google, we receive your Google account identifier, verified email address, display name, and profile image. We do not receive or store your Google password or Google access token.
AI requests and usage
We process the topic, goal, and detail setting you submit so Cloudflare Workers AI can generate a map. We record usage counts, generation outcomes, and token totals to enforce allowances and monitor cost and reliability. Signed-in generations are added to the account's cloud map history. Guest generations are associated with a one-way IP-derived visitor identifier for ownership and abuse controls but are not shown in an account history.
Maps and share links
The current map is cached in your browser. Generated maps for signed-in users, later edits, ownership, versions, share settings, and collaboration memberships are stored in Cloudflare D1. A read-only link lets recipients view but not edit the map and may require a password. A collaboration link requires recipients to sign in and lets participants edit the same current map. Anyone who receives a valid link may use the access it grants, so choose recipients carefully.
Billing information
Stripe processes subscription checkout and payment details. Mindify Map receives identifiers, subscription status, plan, billing period, and payment status. We do not receive or store full card numbers or card security codes.
Technical and analytics data
We process IP-derived anti-abuse identifiers, browser and device information, page activity, referrals, and product events. Google Analytics and Microsoft Clarity help us understand product usage and improve the service.
3. How we use information
- Provide AI generation, editing, sharing, export, login, and billing features.
- Apply free and paid usage limits and prevent abuse.
- Maintain account sessions and synchronize subscription status.
- Measure reliability, improve product flows, and understand feature adoption.
- Respond to support, refund, security, and privacy requests.
- Comply with legal obligations and protect the service and its users.
4. Legal bases
Where data protection law requires a legal basis, we process information to perform our contract with you, pursue legitimate interests such as security and product improvement, comply with law, and obtain consent where required. You can withdraw consent without affecting processing that was already lawful.
5. Service providers and transfers
We use Cloudflare for hosting, database, security, and AI inference; Google for sign-in and analytics; Microsoft for Clarity analytics; and Stripe for checkout, subscriptions, fraud prevention, and payment processing. These providers process data under their own terms and may process it in countries other than yours. We do not sell your personal information.
6. Cookies and local storage
We use an HttpOnly session cookie to keep signed-in users authenticated, a short-lived OAuth state cookie to protect Google sign-in, browser local storage to save the current map, and analytics technologies to measure product use. Blocking essential storage can prevent login or map persistence from working.
7. Retention and security
Account, map ownership, map content, collaboration membership, and subscription records are kept while your account is active and as needed for billing, fraud prevention, disputes, and legal obligations. Sessions expire after 30 days unless renewed. Deleting an account removes its owned maps and share records; you may contact us to request account or map deletion. Usage and analytics records are retained only as long as reasonably needed for operations and reporting. We use HTTPS, hashed session tokens, PBKDF2-hashed share passwords, access controls, version conflict checks, and hosted Stripe Checkout, but no online service can guarantee absolute security.
8. Your choices and rights
Depending on your location, you may ask to access, correct, delete, restrict, or export personal information, or object to certain processing. You may also lodge a complaint with your local data protection authority. Email us from the address associated with your account so we can verify the request.
9. Children
Mindify Map is not directed to children who cannot legally consent to use an online service in their jurisdiction. If you believe a child provided personal information without appropriate permission, contact us so we can review and delete it.
10. Changes
We may update this policy as the product or legal requirements change. We will post the revised date here and provide additional notice when a change materially affects your rights.