MindMaps logoMindMaps

Privacy Policy

Effective Date: June 18, 2026 Last Updated: June 18, 2026

This Privacy Policy explains how MindMaps ("we," "us," or "our") collects, uses, and protects your information when you use our Service at mindmapsapp.com. By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Information you provide:

  • Account information (name, email address, username) provided through Clerk authentication
  • Lecture slides and study materials you upload
  • Content you add to maps, including notes and annotations
  • Communications you send us, including support requests and reports

Information collected automatically:

  • Usage data such as pages visited, features used, and time spent on the Service
  • Technical information including your IP address, browser type, and device type
  • Log data including access times and error reports

Information from third parties:

  • Authentication information from Clerk (our identity provider) when you sign in with Google or email

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your uploaded content to generate knowledge maps
  • Manage your account and subscription
  • Send you transactional emails such as account confirmations and receipts
  • Respond to your support requests and reports
  • Enforce our Terms of Service
  • Comply with legal obligations

We do not sell your personal information to third parties.

3. AI Processing

When you upload lecture slides, the content is processed using OpenAI's API to generate knowledge maps. Your content is sent to OpenAI solely for this purpose. OpenAI's use of your data is governed by their privacy policy at openai.com/policies/privacy-policy. We do not use your uploaded content to train AI models.

4. Storage and Security

Your uploaded slides are converted to images and stored in Cloudflare R2 object storage. Your maps and account data are stored in a PostgreSQL database hosted on Railway. We implement reasonable technical and organizational measures to protect your data, but no system is completely secure and we cannot guarantee absolute security.

Signed URLs for slide images expire after one hour and are refreshed when you access your maps.

5. Data Retention

We retain your account data and maps for as long as your account is active. If you delete your account, we will delete your personal information and maps within 30 days, except where we are required to retain it by law or for legitimate business purposes such as resolving disputes.

Uploaded slide images stored in Cloudflare R2 are deleted when you delete the associated map.

6. Sharing Your Information

We do not sell or rent your personal information. We may share your information with:

  • Service providers who help us operate the Service (Clerk for authentication, Railway for hosting, Cloudflare for storage, OpenAI for AI processing, Stripe for payments, Resend for email)
  • Law enforcement or government authorities when required by law or to protect the rights and safety of our users
  • Successors in the event of a merger, acquisition, or sale of assets, with notice to you

All service providers are contractually required to protect your information and use it only for the purposes for which it was disclosed.

7. Public Content

Maps and courses you choose to make public are visible to all users of the Service. Your username and display name will be shown alongside public content. Think carefully before making content public, as it may contain information from your uploaded materials.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Request deletion of your personal information
  • Object to or restrict our processing of your personal information
  • Data portability

To exercise any of these rights, please contact us at mindmapshq@gmail.com. We will respond within 30 days.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child under 13 has provided us with personal information, please contact us at mindmapshq@gmail.com and we will take steps to delete that information.

10. Cookies

We use cookies and similar tracking technologies to maintain your session and remember your preferences. You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service. We do not use cookies for advertising purposes.

11. Third-Party Services

Our Service integrates with third-party services including:

  • Clerk (authentication) — clerk.com/privacy
  • Stripe (payments) — stripe.com/privacy
  • OpenAI (AI processing) — openai.com/policies/privacy-policy
  • Cloudflare (storage and DNS) — cloudflare.com/privacypolicy
  • Railway (hosting) — railway.app/legal/privacy

We are not responsible for the privacy practices of these third parties.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: mindmapshq@gmail.com
Website: mindmapsapp.com