Privacy Policy

Introduction

MindovAI ("we", "us", "our") operates the platform available at mindovai.com (the "Platform"). This Privacy Policy explains how we collect, use, store, share and protect the personal data of users, professionals who submit usage signals, and AI product vendors who claim or list their profiles on our Platform.

By using MindovAI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform. This policy complies with applicable data protection legislation including the EU General Data Protection Regulation (GDPR) and French data protection law.

1. Data We Collect

1.1 Usage signals (professionals)

When you submit a usage signal on MindovAI, we collect the following data:

• AI product used
• Usage frequency (slider value)
• Dependency level (scale 1–5)
• Usage duration
• Your professional role
• Your industry / sector
• Your company size
• Your country of origin (automatically detected via IP address)
• Submission timestamp
• Whether the submission is a seed signal (is_seed flag)
• Paid plan usage and perceived value (if you use a paid AI product)

All usage signals are anonymous by default. We do not collect your name or email address when you submit a signal. Your IP address is used only to determine your country and is not stored in association with your signal.

1.2 Newsletter subscription

If you subscribe to the MindovAI weekly newsletter, we collect your email address. You can unsubscribe at any time via the link included in every email.

1.3 Vendor account data

When you claim or submit a product profile as a vendor, we collect:

• First and last name
• Professional email address
• Your role at the company
• Product name, website, description, pricing, features and integrations (as provided by you)
• Logo and visual assets (if uploaded)
• Documentation and changelog URLs (if provided)
• IP address at time of submission (for domain verification)
• Verification token and timestamp

1.4 Technical data

When you visit the Platform, we may automatically collect technical data including your browser type and version, operating system, referral URL, pages visited, time spent on pages, and IP address. This data is used solely for analytics and security purposes.

1.5 MindovAI browser extension (observed usage)

MindovAI offers an optional browser extension that measures how much you actually use AI products. Installing it is voluntary, and it measures nothing until you connect it to your MindovAI account and explicitly grant consent.

The extension holds a list of recognised AI products, downloaded from MindovAI. It reads only the domain name of your active tab, and compares it against that list on your own device. When the domain matches a recognised product, and only then, the extension records a usage session. Domains that are unknown or not covered are ignored: nothing about them is stored, and nothing about them is sent to MindovAI.

For recognised AI products, the extension may collect:

• The AI product you used, identified by its MindovAI product ID
• The start time and end time of each usage session
• The active usage time within that session, in seconds
• Your time zone offset, used to attribute a session to the correct local day and to count active days
• A random session identifier, generated on your device
• The version of the extension
• An anonymous installation identifier, sent once when you connect the extension. It is a random value, is not derived from your device, browser or account, and is regenerated when you disconnect
• Technical information needed to authenticate the extension and synchronise your sessions securely, such as access and refresh credentials, their expiry, and the date they were last used

When you connect the extension, this data is linked to your MindovAI account. We also derive the local day of each session, and the number of active days, from the session times and your time zone offset.

1.6 What the extension never collects

The extension does not read the content of the pages you visit, and it does not have the browser permissions that would allow it to. It never collects:

• Prompts you write
• Responses returned by AI products
• Page content or the DOM
• Files
• Clipboard content
• Cookies
• Passwords
• Form fields
• Keystrokes
• Page titles
• Full URLs
• Conversation identifiers
• Query strings
• Your general browsing history

One conversation with an AI product is therefore indistinguishable from another. We know that you used a product, and for how long. We do not know what you did with it.

2. How We Use Your Data

Signal data: To calculate adoption scores, update rankings, generate trend indicators, and display aggregated statistics on the Platform. Signal data is always displayed in aggregate form — individual responses are never publicly attributed to any person.

Newsletter email: To send you the MindovAI weekly adoption report and platform updates. We use a third-party email service provider (Resend) to deliver emails. Your email is never sold or shared with third parties for marketing purposes.

Vendor account data: To verify your identity as a legitimate representative of your product, create and manage your vendor profile, send you your secure access link, and communicate with you about your profile and the Platform.

Technical data: To monitor and improve Platform performance, detect and prevent fraud or abuse, and ensure security.

Observed usage data: To show you your own AI stack, your usage over time and your weekly insights in your contributor dashboard. Observed usage is private by default. Nothing is shared publicly automatically. You control what you choose to share in your AI stack or on your public profile, and detailed data such as precise session times, individual sessions and timestamps stays private by default and is never published as an individual history.

Adoption data: Aggregated observed usage may contribute to MindovAI adoption data and adoption metrics according to the methodology published by MindovAI. As of the date of this policy, observed usage does not feed the Adoption Score shown on product pages.

Aggregated data: To produce market intelligence reports, data exports and API access sold to data buyers. This data is always aggregated and anonymised. We do not provide individual usage histories or directly identifying information as part of these aggregated datasets.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Legitimate interest (Article 6(1)(f)): Processing usage signals to operate and improve the Platform and its adoption index.
• Consent (Article 6(1)(a)): Sending newsletters and marketing communications. You may withdraw consent at any time.
• Consent (Article 6(1)(a)): Measuring your usage of AI products through the MindovAI browser extension. Tracking only starts after you explicitly grant consent when connecting the extension, and no session is accepted by our servers without it. You may withdraw your consent at any time by turning tracking off or by disconnecting the extension, without affecting the lawfulness of processing carried out beforehand.
• Contract performance (Article 6(1)(b)): Processing vendor account data to provide the vendor dashboard and profile services.
• Legal obligation (Article 6(1)(c)): Retaining certain records as required by applicable law.

4. Data Sharing

We do not sell your personal data. We may share data in the following circumstances:

• Service providers: We use Vercel (hosting), Resend (email delivery), and analytics providers who process data on our behalf under data processing agreements.
• Aggregated data buyers: MindovAI may provide or license anonymised, aggregated adoption data to AI vendors and research organisations. Observed usage collected through the browser extension may be included in these aggregates, in the same way as submitted signals. We do not provide individual usage histories or directly identifying information as part of these aggregated datasets.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights and safety of MindovAI, its users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity, which will be bound by this Privacy Policy.

5. Data Retention

• Usage signals: Retained indefinitely as part of the adoption index, in anonymised and aggregated form.
• Newsletter subscriptions: Retained until you unsubscribe. Deleted within 30 days of unsubscription.
• Vendor account data: Retained for as long as your vendor profile is active, plus 12 months after deletion request.
• Verification tokens: Deleted automatically after 48 hours of issuance.
• Technical logs: Retained for 90 days for security and performance monitoring.
• Browser extension usage data: Retained for as long as your account exists, so that your usage history stays available to you. There is no automatic expiry today. You can delete all of it at any time from the extension settings, and it is deleted with your account.
• Extension credentials: Access credentials are short lived and refresh credentials expire on their own. They are revoked immediately when you disconnect the extension.

6. Your Rights

Under the GDPR and applicable data protection law, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of rectification: You may request correction of inaccurate or incomplete data.
• Right of erasure: You may request deletion of your personal data where we have no legitimate reason to continue processing it.
• Right of restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Controlling the browser extension

If you use the MindovAI browser extension, you can act on your data directly from the extension settings, without contacting us. Each control does the following:

• Pause tracking: Measurement stops on your device for the duration you choose, and our servers reject any session covered by that pause.
• Turn tracking off: The extension stops measuring entirely, and our servers stop accepting new sessions for your account. Data already recorded is kept until you delete it.
• Disconnect the extension: Your extension credentials are revoked on our servers, and the local session, the pending queue and the anonymous installation identifier are cleared from your browser. Sessions already synchronised to your account are kept until you delete them.
• Delete your observed usage: All of your recorded usage sessions and the per product usage summaries derived from them are permanently deleted from your account. This does not delete your MindovAI account or the usage signals you submitted yourself.

You can also uninstall the extension at any time from your browser. Uninstalling stops all measurement and removes the data stored locally by the extension, but it does not delete sessions already synchronised to your account: use the deletion control above, or contact us, if you want those removed.

To exercise any of these rights, contact us at privacy@mindovai.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority (in France: Commission Nationale de l'Informatique et des Libertés — CNIL, www.cnil.fr).

7. Cookies & Tracking Technologies

MindovAI uses cookies and similar tracking technologies to operate and improve the Platform. We use the following types of cookies:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with the Platform. Data is aggregated and anonymised.
• Preference cookies: Used to remember your settings and preferences.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include HTTPS encryption, access controls, secure tokenisation for vendor verification links, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

MindovAI is operated from France. Our infrastructure providers (Vercel, Resend) may process data in the United States and other countries. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

MindovAI is not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately at privacy@mindovai.com and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification to registered vendors. We encourage you to review this policy periodically.

12. Contact & Data Controller

MindovAI is the data controller for personal data processed on this Platform.

For any privacy-related questions, requests or complaints:

• Email: privacy@mindovai.com
• Website: mindovai.com
• Response time: within 30 days of receipt