Privacy & data

This is a private system built around provenance: nothing enters the graph without a recorded origin, and nothing non-essential runs without your consent.

What is stored

Your captures, the nodes, relations, tasks and files you create, the original source text you imported, and an append-only audit trail of every change. Original captured content is write-once and hashed so provenance cannot be rewritten silently.

Legal basis and purpose

The data exists to run the system for you (contract). Analytics and marketing are separate and rest on your consent alone — neither loads before you allow it, and withdrawing consent removes the script again.

Who can read it

Only you. Every table is row-level protected against your own account, writes go through ownership-checked server operations, and uploaded files sit in a private bucket keyed by your user id.

AI processing

Capture analysis sends the capture text to the configured model gateway. What MIND OS itself guarantees is the handling on this side: every proposal comes back with the verbatim quote it rests on, is recorded against a dated AI operation, and stays marked as machine-inferred. Well-supported, unambiguous proposals are written into the graph directly; anything low-confidence, ambiguous or unresolved waits in the inbox for you. Your confirmation is a separate, separately audited act — it never rewrites the machine origin of the observation. MIND OS cannot make claims on the gateway provider's behalf about what happens to text after it leaves this system; if that matters to you, do not send that capture through analysis.

Retention

Content is kept until you delete it. Deleting a source erases its captures, the AI processing records made from them and the derived machine suggestions; material you had already confirmed is kept but flagged as having lost its source and marked for review. Erasing your account removes your rows, every uploaded file including files in nested folders, and the sign-in account itself, keeping only a minimal dated receipt that the erasure happened.

Cookies and measurement

Necessary cookies cover sign-in, security and your saved interface preferences. Analytics and marketing pixels are off until you allow them, and you can change your choice at any time.