You own your data. Take it or erase it any time.
Export a machine-readable copy of everything you gave us, or permanently delete your account and all personal data — both are self-service in the app, under Settings → Data & Privacy. No email, no waiting.
01 Who we are
Mindscast is an AI content-marketing product operated by Silicon Awakening ("we", "us"). We are the data controller for the personal data described here. For any privacy question or to exercise a right, contact privacy@mindscast.app.
This policy explains what we collect, why, who we share it with, how long we keep it, and the controls you have. It reflects what the product actually does today.
02 What we collect
You give us
- Account identity — your email address, used to sign you in (passwordless code or Google sign-in) and to send essential service emails.
- Product sources — the landing URL, GitHub repo, or files you connect so we can build your Product Context Document (PCD). We extract structured facts from these sources; the raw source material is transient — used during extraction and not retained afterwards.
- Content & edits — the posts we generate for you and the changes you make to them.
- Social connections — when you connect LinkedIn or X, the access tokens needed to publish on your behalf. Tokens are stored encrypted and used only to publish content you approve.
We generate as you use the product
- Usage & performance — post counts against your plan, and engagement metrics of posts you published, to power your dashboard.
- Voice calibration — signals we derive from your revisions and approvals so your output sounds more like you over time.
Payment
Card payments are handled entirely by Stripe. We never see or store your card number — we keep only your Stripe customer and subscription identifiers and your subscription status.
03 How we use it
- To build your PCD and generate, review, and publish grounded content.
- To operate your account, subscription, and billing.
- To send essential service emails (sign-in codes, trial and account notices, security confirmations).
- To improve the quality of your own output (voice calibration).
We do not sell your personal data, and we do not use it for third-party advertising.
04 Lawful bases (GDPR Art. 6)
- Contract — providing the service you signed up for: account, PCD, content generation, publishing, billing.
- Legitimate interests — securing the platform, preventing abuse, and improving your content quality, balanced against your rights.
- Consent — connecting a social account to publish on your behalf; you can disconnect it at any time.
- Legal obligation — retaining billing records where law requires.
06 Where your data lives
Your account, PCD, and generated content are stored on our servers in Germany (EU). Some sub-processors above (Stripe, AWS, OpenRouter, social platforms) process data outside the EEA, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
07 Data retention
We keep data only as long as we need it.
| Data | Kept for |
|---|---|
| Raw product sources (uploaded files, crawled pages) | Transient — used during PCD extraction, not retained afterwards |
| Account, PCD, content, connections | While your account is active |
| Deactivated account | 30-day recovery window, then permanently purged automatically |
| Account you delete yourself | Erased immediately and irreversibly |
| Billing records | As required by law, then removed |
| Export audit entries | Retained for security, deleted with your account |
08 Your rights (GDPR Art. 15–21)
You can, at any time:
- Access & portability — export a complete, machine-readable copy of your data (Settings → Data & Privacy → Export my data).
- Erasure — permanently delete your account and all personal data, which also cancels your subscription and revokes your social connections (Settings → Data & Privacy → Delete account).
- Rectification — correct your account details.
- Restriction & objection — ask us to limit or stop certain processing.
- Withdraw consent — disconnect a social account at any time.
Most of these are self-service in the app. For anything else, email privacy@mindscast.app and we will respond within one month. You also have the right to lodge a complaint with your local data protection authority.
Note on portability: your export includes the data you provided and the content generated for you. It does not include internal signals we derive to run and improve the service (for example, quality and voice-calibration models), which are not part of the data you provided.
09 Security
Data is encrypted in transit (TLS). Each tenant's data is isolated at the database level (row-level security), so one account cannot read another's. Social access tokens are stored encrypted. No system is perfectly secure, but we design for least privilege and hard isolation.
11 Children
Mindscast is a business product intended for users aged 18 and over. We do not knowingly collect data from children.
12 Changes to this policy
If we make material changes, we will update the effective date above and, where appropriate, notify you by email. Continued use after an update means you accept the revised policy.
13 Contact
Silicon Awakening — privacy@mindscast.app. For account and support questions, support@mindscast.app.