You own your data. Take it or erase it any time.
Export a machine-readable copy of everything you gave us, or permanently delete your account and your personal data — both are self-service in the app, under Settings → Data & Privacy. No email, no waiting. (One narrow exception survives deletion: an unreversible trial-eligibility fingerprint, §7.)
01 Who we are
Mindscast is an AI content-marketing product operated by Silicon Awakening ("we", "us"). We are the data controller for the personal data described here. For any privacy question or to exercise a right, contact privacy@mindscast.app.
This policy explains what we collect, why, who we share it with, how long we keep it, and the controls you have. It reflects what the product actually does today.
02 What we collect
You give us
- Account identity — your email address, used to sign you in (passwordless code or Google sign-in) and to send essential service emails.
- Product sources — the landing URL, GitHub repo, or files you connect so we can build your Product Context Document (PCD). We extract structured facts from these sources; the raw source material is transient — used during extraction and not retained afterwards.
- Content & edits — the posts we generate for you and the changes you make to them.
- Social connections — when you connect LinkedIn or X, the access tokens needed to publish on your behalf. Tokens are stored encrypted and used only to publish content you approve.
We generate as you use the product
- Usage & performance — post counts against your plan, and engagement metrics of posts you published, to power your dashboard.
- Voice calibration — signals we derive from your revisions and approvals so your output sounds more like you over time.
- Trial-eligibility record — when you start a free trial we store a one-way fingerprint of your email address and, if you connect one, of your LinkedIn or X account ID. A fingerprint cannot be reversed to recover the address or the account, and it is compared only against other fingerprints. Its only purpose is to make the free trial once-per-person; it is never used for marketing, profiling, or anything else. See §7.
Payment
Card payments are handled entirely by Stripe. We never see or store your card number — we keep only your Stripe customer and subscription identifiers and your subscription status.
03 How we use it
- To build your PCD and generate, review, and publish grounded content.
- To operate your account, subscription, and billing.
- To send essential service emails (sign-in codes, trial and account notices, security confirmations).
- To improve the quality of your own output (voice calibration).
We do not sell your personal data, and we do not use it for third-party advertising.
04 Lawful bases (GDPR Art. 6)
- Contract — providing the service you signed up for: account, PCD, content generation, publishing, billing.
- Legitimate interests — securing the platform, improving your content quality, and keeping the free trial to one per person, balanced against your rights. The trial-eligibility record in §7 rests on this basis: without it, deleting an account and signing up again would reset the trial without limit.
- Consent — connecting a social account to publish on your behalf; you can disconnect it at any time.
- Legal obligation — retaining billing records where law requires.
06 Where your data lives
Your account, PCD, and generated content are stored on our servers in Germany (EU). Some sub-processors above (Stripe, AWS, OpenRouter, social platforms) process data outside the EEA, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
07 Data retention
We keep data only as long as we need it.
| Data | Kept for |
|---|---|
| Raw product sources (uploaded files, crawled pages) | Transient — used during PCD extraction, not retained afterwards |
| Account, PCD, content, connections | While your account is active |
| Deactivated account | 30-day recovery window, then permanently purged automatically |
| Account you delete yourself | Erased immediately and irreversibly, with one narrow exception — the trial-eligibility record below |
| Billing records | As required by law, then removed |
| Export audit entries | Retained for security, deleted with your account |
| Trial-eligibility record (fingerprints only) | 12 months, then deleted automatically. This one outlives account deletion — it has to, because deleting an account is otherwise the easiest way to take a second free trial. What remains is a fingerprint that cannot be reversed, and no longer records which account it came from. |
If you delete your account and later sign up again with the same email address or the same LinkedIn/X account, you can still use Mindscast in full — you simply start on a paid plan instead of another free trial.
08 Your rights (GDPR Art. 15–21)
You can, at any time:
- Access & portability — export a complete, machine-readable copy of your data (Settings → Data & Privacy → Export my data).
- Erasure — permanently delete your account and your personal data, which also cancels your subscription and revokes your social connections (Settings → Data & Privacy → Delete account). The single exception is the trial-eligibility fingerprint described in §7, which is kept for 12 months to prevent unlimited free trials and identifies nobody on its own.
- Rectification — correct your account details.
- Restriction & objection — ask us to limit or stop certain processing.
- Withdraw consent — disconnect a social account at any time.
Most of these are self-service in the app. For anything else, email privacy@mindscast.app and we will respond within one month. You also have the right to lodge a complaint with your local data protection authority.
Note on portability: your export includes the data you provided and the content generated for you. It does not include internal signals we derive to run and improve the service (for example, quality and voice-calibration models), which are not part of the data you provided.
09 Security
Data is encrypted in transit (TLS). Each tenant's data is isolated at the database level (row-level security), so one account cannot read another's. Social access tokens are stored encrypted. No system is perfectly secure, but we design for least privilege and hard isolation.
11 Children
Mindscast is a business product intended for users aged 18 and over. We do not knowingly collect data from children.
12 Changes to this policy
If we make material changes, we will update the effective date above and, where appropriate, notify you by email. Continued use after an update means you accept the revised policy.
13 Contact
Silicon Awakening — privacy@mindscast.app. For account and support questions, support@mindscast.app.