We collect the minimum needed to run the Service:

• Account information: your email address and profile name, via our authentication provider (Auth0). We never see or store your password.
• Conversations and files: the messages you send, files you upload, and deliverables the agent generates for you.
• Dossier content: the documents you drop into a shared dossier, the pages, deliverables and journal entries created there, and the members you invite.
• Memory: a short profile of your goals and preferences, extracted from your conversations so the agent remembers them from one session to the next. You can read and erase it from the app.
• Billing status: your subscription plan and its state, via Stripe. We never see or store your card details.
• Usage events: anonymous product events (e.g. a page view, a checkout started) used to improve the funnel and the product.
• Your API keys (BYOK): if you connect your own AI-provider keys, they are stored encrypted at rest and used only to serve your own requests.
• Your AI subscription sign-ins: if you sign in with your own Claude or ChatGPT account so that Claude Code or Codex runs your chats, that sign-in is created and kept by the vendor's own app inside a private sandbox reserved for your account. Ormind does not read it. Your requests then go to that vendor under your own agreement with them.

To answer your requests, your messages and files are sent to third-party AI model providers (such as Anthropic, OpenAI, Google, and others) under their API terms. API-submitted content is not used by these providers to train their models under their standard API terms.

Web research performed by the agent queries third-party search and scraping services with the search terms needed for your request, never with your identity.

The memory profile described above is extracted once a day by a model running on Ormind's own provider accounts, even when you use your own API keys or your own Claude or ChatGPT subscription for the conversation itself. This is so that an exhausted or revoked personal key never silently switches your memory off.

If you connect your dossier to an AI assistant you already use (Claude, ChatGPT or another MCP client), that assistant reads and writes your dossier with your own rights and under its vendor's privacy policy; every action it takes is journaled in your name.

• Members: content in a shared dossier is visible to its members according to their role (reader, contributor, editor, owner). Documents you drop in are seen by the other members.
• Journal: actions in a dossier (a document filed, a page written, a member invited) are recorded in the dossier journal and attributed to the member who performed them.
• Invitations: when you invite someone, we send them an email with your name and the dossier name.
• Public links: if you create a public link to a document, anyone with the link can view that document. You can revoke a public link at any time.
• Notifications: we send transactional messages (invitations, activity you subscribed to, results you asked for) by email and, if you enabled it on your device, by push notification. You can disable push notifications in your device settings. We do not send marketing emails without your consent.
• Google Calendar (optional): if you connect Google Calendar, Ormind creates a dedicated calendar named "Ormind" and uses that connection only to add or update the appointments you explicitly choose, with their title, dates, location, description and reminder. Dates found in your documents stay suggestions until you review them. Ormind does not request access to your other calendars or your availability.

Deliverables you generate (reports, websites, slide decks) are hosted at a shareable URL so you can send them to clients. Anyone with the link can view a deliverable, so treat the URL as the sharing control, and don't put content in a deliverable you wouldn't share with its audience.

• We never sell your personal data.
• We never use your content to train AI models.
• We never show your conversations or deliverables to other users.
• We never store your payment card details (Stripe does, as a PCI-compliant processor).

The Service is hosted on servers in the European Union (OVH, France). Conversation history and generated files are retained while your account is active so you can return to them; you can request deletion at any time (see below).

We use browser local storage for your login session and preferences (e.g. theme). Our authentication (Auth0) and payment (Stripe) providers set the cookies they need to function. We do not use third-party advertising trackers.

You can, at any time:

• Request a copy of the data we hold about you
• Request deletion of your account and all associated data (conversations, files, deliverables, stored keys)
• Remove your connected API keys instantly from the app
• Disconnect your Claude or ChatGPT sign-in instantly from the app, which signs the vendor's app out; deleting your account removes the sandbox entirely
• Cancel your subscription (see the Terms of Service)

Send any such request to contact@ormind.ai and we respond within 30 days.

If we make material changes to this policy, we will post the updated version here and notify registered users by email or in-app notice. Continued use of the Service after changes take effect constitutes acceptance.