Last updated: October 02, 2026
The data controller for this Service is:
| Purpose | Legal Basis |
|---|---|
| Providing and maintaining the Service | Contract performance |
| Billing and payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Product improvement and analytics | Legitimate interest |
| Legal compliance | Legal obligation |
We may anonymize or aggregate data for statistical analysis. Such data cannot be linked to a specific individual.
| Type | Purpose | Can be disabled |
|---|---|---|
| Strictly necessary | Maintaining login, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing | Targeted advertising (if applicable) | Yes |
You can adjust your preferences through your browser settings or our cookie management center.
We do not sell your personal information, including as defined under applicable laws such as CCPA. We share information only in the following circumstances:
In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, as required by applicable law. Please keep your account credentials secure and do not share them with others.
| Data Type | Retention Period | Action on Expiry |
|---|---|---|
| Account information | During active use; 90 days after account deletion | Secure deletion or anonymization |
| Transaction records | As required by law (typically 7 years) | Deletion or archiving |
| Support records | 3 years | Secure deletion |
| Security audit logs | 12 months | Secure deletion |
To exercise any of the following rights, contact us at privacy@undermind.ai. We will process your request within 30 calendar days.
| Right | Description |
|---|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Receive a copy of your personal data |
| Right to rectification | Correct inaccurate or incomplete data |
| Right to erasure | Request deletion of your data under specific conditions |
| Right to restrict processing | Pause data processing under specific conditions |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interest or marketing |
| Right to withdraw consent | Withdraw consent for processing based on consent at any time |
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.
With your consent, we may send you marketing communications about our Service. You can unsubscribe at any time by clicking the "unsubscribe" link in any email, disabling marketing notifications in your account settings, or contacting us. Opting out does not affect service-related notifications such as billing or security alerts.
Our servers and partners may be located in various jurisdictions, including the United States. When we transfer data across borders, we protect it through Standard Contractual Clauses (SCCs) or equivalent data protection agreements with recipients.
This Service is intended for users who are at least 18 years old. We do not knowingly collect information from individuals under 18. If you believe a minor has provided us with data, please contact us immediately and we will delete it as soon as possible.
This Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to information we collect directly. We are not responsible for the data practices of third parties, and we encourage you to review their policies before engaging with them.
We may update this Privacy Policy from time to time. For material changes, we will notify you at least 15 days in advance via email or a prominent notice on the Service. The "Last updated" date at the top of this page will reflect the effective date. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.