1. Introduction

Mindra Inc. ("Mindra", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites or use our AI agent orchestration platform (the "Service"), whether on a free or paid plan. It should be read together with our Terms of Service.

2. Controller and Processor Roles

For account, billing, and website information, Mindra acts as a data controller. For the data, prompts, and content you submit to the Service ("Customer Data"), you are the controller and Mindra acts as a processor, processing such data on your instructions to provide the Service. Where you require a data processing addendum (DPA), contact us at info@mindra.co.

3. Information We Collect

We collect the following categories of information:

Account information — name, email, company, and credentials you provide when signing up.
Billing information — plan, transaction history, and payment details, which are processed securely by our third-party payment processor (we do not store full card numbers).
Customer Data — prompts, inputs, agent configurations, and content you submit, and the tokens or credentials you connect for integrations.
Usage and log data — API usage, credit consumption, performance metrics, device and browser information, IP address, and similar diagnostic data.
Cookies and analytics — see Section 8.

4. How We Use Your Information

Provide, operate, and maintain the Service;
Process transactions and manage subscriptions;
Send technical notices, security alerts, and support messages;
Improve and develop the Service, including using aggregated or anonymized data;
Detect, prevent, and address fraud, abuse, and security issues;
Send marketing communications where permitted (you can opt out at any time); and
Comply with legal obligations.

5. AI Models and Subprocessors

To deliver agent functionality, the Service routes Customer Data to third-party AI model providers and other subprocessors (for example, infrastructure, analytics, email, and payment providers) acting on our behalf under appropriate contractual protections. We do not sell your personal information. We use Customer Data to provide the Service to you and do not use it to train our own foundation models without your consent.

6. How We Share Information

We may share information:

With subprocessors and service providers as described above;
With third-party tools you choose to connect, as needed to perform the actions you configure;
To comply with law, regulation, legal process, or enforceable governmental request;
To protect the rights, property, or safety of Mindra, our users, or the public; and
In connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

7. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Cookies and Analytics

We use cookies and similar technologies to operate our websites, remember preferences, and measure usage with analytics tools. You can control cookies through your browser settings; disabling some cookies may affect functionality.

9. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. After account termination, we delete or anonymize Customer Data after a reasonable period, unless retention is required by law.

10. International Transfers

We are based in the United States and may process information in the U.S. and other countries. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers of personal data.

11. Your Rights

Depending on your location (including under the GDPR and similar laws), you may have the right to:

Access the personal data we hold about you;
Correct inaccurate data;
Request deletion of your data;
Restrict or object to certain processing;
Export your data (data portability); and
Opt out of marketing communications.

To exercise these rights, contact us at info@mindra.co. You may also have the right to lodge a complaint with a supervisory authority.

12. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. The Service must not be configured to collect data relating to a person under the age of 13.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by email. The "Last updated" date above reflects the most recent revision.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:
info@mindra.co
Mindra Inc., 251 Little Falls Drive, Wilmington, Delaware 19808, United States.