Privacy Policy

This Privacy Policy explains how Mindrasil ("Mindrasil," "we," "us," or "our") collects, uses, discloses, and protects information when you use our website, custom project catalog, configurator, checkout, subscription plans, and related services (collectively, the "Service"). This policy applies to all users of the Service, including visitors to our site, customers who configure and purchase projects, and subscribers to our ongoing development plans.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

a) Information You Provide Directly:

Account Information: When you create an account, we collect your name, email address, and business name. Your account authentication is handled through AWS Cognito.

Billing Information: When you make a payment, we collect the billing details necessary to process it through our external processor, PayPal. We do not store full credit card numbers on our servers — that information is handled directly by our payment processor.

Project Configuration Data: The selections, options, and notes you provide while configuring a project in our catalog and checkout, as well as any brief, file, or requirement you share with us to plan and deliver your project.

Communications: Information you provide when contacting our team, including contact form submissions, newsletter subscriptions, in-platform chat messages, support tickets, and emails.

Meeting Scheduling: If you schedule a meeting with our team, the booking information (name, email, time) is handled through our scheduling provider, Calendly, which is also subject to its own privacy policy.

b) Information Collected Automatically:

Usage Data: Information about how you interact with the Service, including pages visited, catalog services viewed, features used, and actions taken.

Technical Data: Your IP address, browser type, operating system, and device information.

Log and Monitoring Data: Server logs and error-monitoring data (via Sentry) — such as stack traces, the page or endpoint where an error occurred, and browser/device information — that help us detect and fix technical issues.

Cookies and Similar Technologies: We use a session cookie to keep you logged in, a cookie to remember the items in your cart before checkout, browser local storage for preferences like dark mode or language, and — only if you accept them — analytics cookies from Google Analytics. See Section 7 for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

To Provide and Maintain the Service: To operate the catalog, configurator, checkout, project delivery, and subscription plans.

To Process Transactions: To process deposits, milestone payments, and subscription charges through PayPal. We may add additional payment processors in the future; if we do, we'll update this policy before that happens.

To Communicate with You: To send service-related notices, updates, and administrative messages, including coordinating meetings and project milestones.

To Provide Support: To respond to your inquiries and support tickets.

To Improve the Service: To understand how the Service is used and develop new features, using Google Analytics (via Google Tag Manager) when you consent to analytics cookies.

To Ensure Security: To monitor and protect the security of the Service, and to detect and prevent spam, abuse, and automated attacks through Google reCAPTCHA.

For Legal Compliance: To comply with applicable laws, regulations, and legal processes.

For Aggregated Analytics: To create aggregated, anonymized data that does not identify you, which we may use to understand overall Service usage.

3. Legal Basis for Processing (GDPR/EEA Users)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal information depends on the context:

Performance of a Contract: When we process your account information and deliver a project or subscription you have purchased.

Legitimate Interests: For our operational purposes, security, and improvement of the Service, where these interests are not overridden by your data protection rights.

Consent: When we ask for your consent to process your information for specific purposes, which you can withdraw at any time.

Legal Obligation: When we need to comply with legal requirements.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

a) With Your Consent

When you direct us to share information with third parties.

b) With Service Providers

We engage trusted third-party companies to perform services on our behalf, including:

• Cloud infrastructure and hosting (Amazon Web Services)
• Account authentication (AWS Cognito)
• Payment processing (PayPal)
• Meeting scheduling (Calendly)
• Transactional email delivery
• Fraud and abuse prevention (Google reCAPTCHA)
• Website analytics (Google Analytics, via Google Tag Manager) — only with your consent
• Technical error monitoring and logging (Sentry)

These providers are contractually obligated to protect your information and may only use it for the purposes we specify.

c) For Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

d) For Legal Compliance and Protection

When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Mindrasil, our users, or the public.

e) Aggregated and Anonymized Data

We may share aggregated, anonymized data that cannot reasonably be used to identify you.

5. Data Retention

We retain your information only for as long as necessary to:

• Provide you with the Service
• Fulfill the purposes described in this Privacy Policy
• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements

Account information is retained while your account is active. You can request deletion of your account and associated data as described in Section 6.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: Request copies of your personal information.

Rectification: Request correction of inaccurate or incomplete information.

Erasure: Request deletion of your personal information.

Restriction: Request restriction of the processing of your personal information.

Data Portability: Request the transfer of your data to another organization.

Objection: Object to our processing of your personal information.

Withdraw Consent: Withdraw consent when we rely on it for processing.

To exercise these rights, contact us using the information in Section 13. We may need to verify your identity before fulfilling your request.

7. Cookies and Tracking Technologies

We use essential cookies and browser local storage to:

• Keep you securely logged in
• Remember the items in your cart before you complete checkout
• Remember preferences like dark mode or language

These essential cookies are always active, since the Service cannot function properly without them.

With your consent, we also use Google Analytics (via Google Tag Manager) to understand how visitors use our Service — pages visited, features used, and general navigation patterns. We ask for this consent through a cookie banner shown on your first visit; analytics cookies are only set after you accept, and never before. You can decline them, and you can change your choice at any time by clearing your browser's local storage for this site and revisiting.

We do not use third-party advertising cookies. You can also control cookies through your browser settings; disabling essential cookies may affect features like staying logged in or your cart.

8. Data Security

We implement technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit via TLS/SSL
• Account authentication managed by AWS Cognito
• Access controls on our infrastructure
• Secure development practices

Despite our efforts, no security measure is perfect or impenetrable. We cannot guarantee the absolute security of your information.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our cloud infrastructure is hosted. Where applicable law requires it, we will adopt the corresponding safeguards for such transfers.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or services, including our payment processor and our scheduling platform. This Privacy Policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on our website and, where appropriate, through email notification. The "Last Updated" date at the top indicates when changes were made.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, contact us at:

Mindrasil Email: privacy@mindrasil.com Website: mindrasil.com/contact