Legal

Privacy Policy

Last updated August 29, 2026

1. Key Terms.

It would be helpful to start by explaining some key terms used in this policy:

We, us, or our: s3cura Inc., d/b/a mindHub, and its affiliates.

Personal information: Any information relating to an identified or identifiable individual.

Services and Site: the mindHub website located at trymindhub.com (the “Site”), the mindHub workspace application, and related features, including chats, maps, and access to Third-Party AI Models.

Third-Party AI Models, Model Creators, Model Providers, and Model Routers: mindHub provides access to third-party large language models and AI tools (“Third-Party AI Models”). Each Third-Party AI Model is developed by a “Model Creator” and made available for inferencing by one or more “Model Providers,” which may be the same entity as the Model Creator or a different entity. mindHub currently sources access to Third-Party AI Models through a third-party model routing platform (each a “Model Router”), which in turn sources such models from multiple Model Providers.

2. Personal Information We Collect About You.

We may collect and use the following personal information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:

(a) Category: Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers). Type: Name, postal address, IP address, email address, account name.

(b) Category: Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including his or her name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Type: Name, address, telephone number, credit card number, debit card number, other financial information.

(c) Category: Account and Billing Information. Type: Account and billing information, including payment card details processed by our third-party payment processor and subscription plan information (e.g., mindHub Open, Free, Plus, or Pro).

(d) Category: User Content. Type: Content you submit to the Services, including prompts, messages, uploaded files, documents, and other content you input into chats or maps (“User Content”), and the AI-generated output returned to you in response (“AI Output”), including any posts, comments, questions, or answers you publish on the Services.

(e) Category: Commercial information (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies). Type: Your subscription tier and usage of Third-Party AI Models.

(f) Category: Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer's interaction with an Internet website, application, or advertisement). Type: Information regarding your interaction with the Services, including which AI models you select, how you branch or merge chats, and feature usage.

(g) Category: Geolocation data. Type: IP address and location, including your region and country of access.

(h) Category: Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

(i) Category: Counting users who have visited website pages or opened an email and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). Type: Web beacons, pixel tags, and single-pixel gifs.

(j) Category: Social Profiles and Links. Type: Links or handles to social media or professional profiles you choose to provide or connect, such as LinkedIn, Instagram, or X.

(k) Category: Additional Personal Identifiable Information. Type: Other information you choose to enter into your profile or the Services, such as education, work experience, or date of birth.

This personal information is required to provide the Services to you. If you do not provide the personal information we ask for, it may delay or prevent us from providing the Services to you.

Aggregated and De-Identified Data. We may create aggregated, anonymized, or de-identified data derived from the personal information described above (“Aggregated Data”), which does not identify you or any other individual. Once personal information has been aggregated and de-identified such that it can no longer reasonably be used to identify you, it is no longer considered personal information under this Policy, and we may use Aggregated Data for analytics, benchmarking, product improvement, research, and other lawful business purposes.

3. Information Collection and Tracking Technologies.

When you download, access, or use the Site or Services, we may use technology to automatically collect or utilize the following categories of cookies and similar tracking technologies:

(a) Strictly Necessary Cookies: Required for the operation of the Services. These cannot be disabled.

(b) Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences and settings.

(c) Analytics Cookies: Help us understand how visitors interact with the Services by collecting and reporting information anonymously, including, without limitation, through our internally built analytics platform, Google Analytics, and Vercel Analytics.

(d) Advertising Cookies: Used to deliver relevant advertisements and track the effectiveness of marketing campaigns. These may be set by our third-party advertising partners.

Cookies. A cookie is a small file placed on your computer or smartphone. Cookies are small text strings that the websites visited by a user install on the user's terminal, and are re-transmitted to the site that installed them upon further requests by the user. When you also receive cookies sent by other sites or web servers during site navigation, those cookies are considered third-party cookies. You may be able to refuse to accept cookies by activating the appropriate setting on your computer or smartphone; however, if you select this setting, you may be unable to access certain parts of our Services.

Web Beacons. Pages of the Services and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited pages or opened emails and for other related Service statistics, such as recording the popularity of certain content and verifying system and server integrity.

4. How Your Personal Information is Collected.

We collect most of this personal information directly from you — by phone, text, email, or via our website, including when you sign in using your mindHub account credentials or via Google Sign-In. We may also collect information: from publicly accessible sources; directly from a third party (e.g., our payment processor, cloud hosting provider, or other service providers); from a third party with your consent (e.g., your bank or credit card company); from cookies and similar technologies on our website; from web beacons on our website and in emails; and via our IT systems, including automated monitoring of our websites and other technical systems, such as our computer networks and connections, communications systems, email and instant messaging systems.

5. How and Why We Use Your Personal Information.

Under data protection law, we can only use your personal information if we have a proper reason for doing so, e.g.: to comply with our legal and regulatory obligations, for the performance of our contract with you or to take steps at your request before entering into a contract, for our legitimate interests or those of a third party, or where you have given consent. A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests.

The sections below explain what we use and process your personal information for and our reasons for doing so:

(a) Use: To provide products to you, including processing your User Content through the Third-Party AI Model(s) you select and returning the resulting AI Output to you. Reason: For the performance of our contract with you.

(b) Use: To prevent and detect fraud against you or mindHub. Reason: For our legitimate interests or those of a third party.

(c) Use: Conducting checks to identify our customers and verify their identity; screening for financial and other sanctions or embargoes; other processing necessary to comply with professional, legal and regulatory obligations. Reason: To comply with our legal and regulatory obligations.

(d) Use: Gathering and providing information required by or relating to audits, enquiries, or investigations by regulatory bodies. Reason: To comply with our legal and regulatory obligations.

(e) Use: Ensuring business policies are adhered to, e.g., policies covering security and acceptable use of Third-Party AI Models. Reason: For our legitimate interests or those of a third party.

(f) Use: Operational reasons, such as improving efficiency, training and quality control of our own platform and analytics. Reason: For our legitimate interests or those of a third party.

(g) Use: Ensuring the confidentiality of commercially sensitive information, including User Content submitted to Third-Party AI Models. Reason: For our legitimate interests or those of a third party; to comply with our legal and regulatory obligations.

(h) Use: Statistical analysis to help us manage our business, e.g., in relation to our financial performance, customer base, Service range, or model usage. Reason: For our legitimate interests or those of a third party.

(i) Use: Preventing unauthorized access and modifications to systems, including your User Content and AI Output. Reason: For our legitimate interests or those of a third party; to comply with our legal and regulatory obligations.

(j) Use: Updating and enhancing customer records. Reason: For the performance of our contract with you; to comply with our legal and regulatory obligations; for our legitimate interests or those of a third party.

(k) Use: Statutory returns. Reason: To comply with our legal and regulatory obligations.

(l) Use: Marketing our products to existing and former customers and third parties who have previously expressed an interest in our products, via email through our Google Workspace and Amazon Web Services infrastructure. Reason: For our legitimate interests or those of a third party.

(m) Use: External audits and quality checks. Reason: For our legitimate interests or those of a third party; to comply with our legal and regulatory obligations.

Legal Bases for Processing. Where required by applicable law, we rely on the following legal bases to process your personal information: (i) Performance of a Contract; (ii) Legitimate Interests; (iii) Consent, which you may withdraw at any time; and (iv) Legal Obligation.

6. Third-Party AI Models and User Content.

The Services allow you to submit User Content to Third-Party AI Models, which are created by Model Creators, made available for inferencing by Model Providers, and, as applicable, accessed by mindHub through a Model Router. mindHub currently sources access to Third-Party AI Models through OpenRouter, a Model Router that in turn sources models from multiple Model Providers, including models created by Google, Anthropic, OpenAI, DeepSeek, Alibaba, Z.ai, Meta, ByteDance, MiniMax, Moonshot, xAI, and Nvidia, among others; this list may change and expand over time as mindHub adds or removes access to additional models. When you use the Services, your User Content and related metadata may be transmitted to the applicable Model Router, Model Provider, and/or Model Creator in order to generate AI Output. Each Model Creator, Model Provider, and Model Router processes such information subject to its own privacy policy and terms, in addition to this Privacy Policy. mindHub does not itself use your User Content or Aggregated Data to train, fine-tune, or improve any proprietary AI model, as mindHub does not currently develop its own AI models at this time; however, the applicable Model Creator or Model Provider may use your User Content for their own model training or improvement purposes in accordance with their respective terms and policies. We encourage you to review the privacy policies of the Model Creators, Model Providers, and Model Routers made available through the Services. We do not control, and are not responsible for, how Model Creators, Model Providers, or Model Routers use, retain, or secure information submitted to their models. Please avoid submitting sensitive personal information, trade secrets, or confidential information as User Content unless you understand and accept these risks.

7. Children's Privacy.

Our Services are not intended for individuals under the age of 13, or such higher age of digital consent as applies in your jurisdiction, and we do not knowingly collect personal information from children under the age of 13. If we learn that we have collected personal information from a child under the age of 13, we will take reasonable steps to delete such information promptly. If you believe we have collected personal information from a child under the age of 13, please contact us at support@trymindhub.com.

8. Promotional Communications.

We may use your personal information to send you updates by email about our products, including exclusive offers, promotions or new products, or new features, through our Google Workspace email infrastructure. We have a legitimate interest in processing your personal information for promotional purposes (see above “How and why we use your personal information”). This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.

We will always treat your personal information with the utmost respect and never sell it to other organizations for marketing purposes.

You have the right to opt out of receiving promotional communications at any time by: (a) contacting us at support@trymindhub.com; (b) using the “unsubscribe link” in emails; or (c) updating your marketing preferences in your account settings.

We may ask you to confirm or update your marketing preferences if you instruct us to provide further products in the future, or if there are changes in the law, regulation, or the structure of our business.

We routinely share personal information with:

(a) Our affiliates;

(b) Model Creators, Model Providers, and Model Routers (including OpenRouter), as described in Section 6 above, in order to generate AI Output in response to your User Content;

(c) Service providers we use to help deliver the Services, including our payment processor (Stripe) and our cloud hosting and storage provider (Amazon Web Services);

(d) Analytics providers, including, without limitation, Google Analytics and Vercel, and our own internally built analytics platform;

(e) Other third parties we use to help us run our business, such as marketing agencies or website hosts, which utilize their own terms and conditions and privacy policies, including, without limitation, Google Workspace for email communications;

(f) Third parties approved by you, including Google, where you choose to sign in via Google Sign-In, or social media sites you choose to link your account to;

(g) Our insurers and brokers; and

(h) Our banks.

We may disclose and exchange information with law enforcement agencies and regulatory bodies to comply with our legal and regulatory obligations.

We may also need to share some personal information with other parties, such as potential buyers of some or all of our business or during a re-structuring. We will typically anonymize information, but this may not always be possible.

No Sale of Personal Information. mindHub does not sell your personal information in exchange for monetary consideration. To the extent any disclosure of personal information to third-party advertising or analytics partners may constitute a “sale” or “sharing” as those terms are defined under the California Consumer Privacy Act (“CCPA”), you may exercise your right to opt out as described in Section 16 of this Policy.

10. Personal Information We Disclosed for a Business Purpose.

In the preceding 12 months, we have disclosed for a business purpose to one or more third parties the following categories of personal information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household:

Identifiers (e.g., a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers);
Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including his or her name, address, telephone number, and payment card or other financial information;
Commercial information, including your subscription plan and use of specific Third-Party AI Models (e.g., records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
Internet or other electronic network activity information (e.g., browsing history, search history, and information regarding a consumer’s interaction with an Internet website, application, or advertisement);
Your User Content and the resulting AI Output, to the extent disclosed to Model Creators, Model Providers, or Model Routers solely to generate the AI Output you request;
Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

11. Third-Party Websites and Links.

The Services may contain links to, or integrations with, third-party websites or services that are not owned or controlled by mindHub, including, without limitation, Google Sign-In. mindHub has no control over, and is not responsible for, the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party website or service before providing personal information to it.

12. Where Your Personal Information is Held.

Information may be held at our offices and those of our group companies, third party agencies, service providers, representatives and agents, including our cloud hosting and storage provider, Amazon Web Services, and our Model Creators, Model Providers, and Model Routers, as described above (see Section 9, Who We Share Your Personal Information With). Some of these third parties may be based outside the European Economic Area (EEA). For more information, see Section 14 below (Transferring Your Personal Information Out of the EEA).

13. How Long Your Personal Information Will Be Kept.

We retain your personal information, including your account information, User Content, and AI Output, for as long as you maintain an account with mindHub, unless and until you request deletion of your account and associated data. Following a valid deletion request, we will delete or anonymize your personal information within a reasonable time, except to the extent we are required or permitted to retain certain information: (a) to respond to any questions, complaints, or claims made by you or on your behalf; (b) to show that we treated you fairly; or (c) to keep records required by law.

Account and billing information is retained as long as necessary to process transactions, plus any period required by applicable tax and accounting laws. Internet or other electronic network activity information and geolocation data may be retained for up to twenty-four (24) months from collection, unless aggregated and de-identified, in which case it may be retained as Aggregated Data. Personal information used to send promotional communications is retained until you opt out of marketing communications or withdraw consent, where consent is required.

14. Transferring Your Personal Information Out of the EEA.

To deliver the Services to you, it is often necessary for us to share your personal information outside the European Economic Area (EEA), e.g.:
including with our offices outside the EEA;
With our cloud hosting provider (Amazon Web Services) and our service providers, Model Creators, Model Providers, and Model Routers located outside the EEA;
If you are based outside the EEA; or
Where there is an international dimension to the products we are providing to you.

The following countries to which we may transfer personal information have been assessed by the European Commission as providing an adequate level of protection for personal information: Canada and, with respect to entities certified under the EU-U.S. Data Privacy Framework, the United States.

Non-EEA countries do not have the same data protection laws as the United Kingdom and EEA. We will, however, ensure the transfer complies with data protection law and all personal information will be secure, including through the use of appropriate safeguards such as standard contractual clauses where required.

Right to Access: The right to be provided with a copy of your personal information (the right of access).

Right to Rectification: The Right to require us to correct any mistakes in your personal information.

Right to be Forgotten: The right to require us to delete your personal information, including your User Content, in certain situations.

Right to Restriction of Processing: The right to require us to restrict processing of your personal information in certain circumstances, e.g., if you contest the accuracy of the data.

Right to Data Portability: The right to receive the personal information you provided to us, in a structured, commonly used, and machine-readable format and/or transmit that data to a third party in certain situations.

Right to Object: The right to object (1) at any time to your personal information being processed for direct marketing (including profiling) and (2) in certain other situations to our continued processing of your personal information.

Right Not to be Subject to Automated Individual Decision-Making: The right not to be subject to a decision based solely on automated processing (including profiling performed by Third-Party AI Models) that produces legal effects concerning you or similarly significantly affects you, each as further described under the General Data Protection Regulation. For further information on each of those rights, including the circumstances in which they apply, see the guidance from the UK Information Commissioner's Office (ICO) on individual rights under the General Data Protection Regulation.

16. Your Rights Under the CCPA.

(a) Disclosure of Personal Information We Collect About You, including the categories of personal information collected, the sources of that information, our business purposes for collecting it, the categories of third parties with whom we share it (including Model Providers), and the specific pieces of personal information we have collected about you.

(b) Right to Deletion, subject to certain statutory exceptions, including deletion of your User Content and associated AI Output from our records and direction to service providers, including Model Providers, to delete such information.

(c) Right to Opt Out of Sale or Sharing. As described in Section 9 above, mindHub does not sell your personal information for monetary consideration. To the extent any disclosure of personal information to third-party advertising or analytics partners constitutes a “sale” or “sharing” under the CCPA, you may opt out by contacting us at support@trymindhub.com.

(d) Right to Limit Use of Sensitive Personal Information, to the extent we collect Sensitive Personal Information as defined by the CCPA.

(e) Protection Against Discrimination. You have the right not to be discriminated against by us because you exercised any of your rights under the CCPA.

17. California Invasion of Privacy Act.

The California Invasion of Privacy Act (CIPA) prohibits the use of tracking technologies, such as pen registers and trap and trace devices, by providers of electronic or wire communication services without consent of the user of the service. By using the pages of our website and emails, you consent to the use of pen registers and trap and trace devices in accordance with Cal. Penal Code § 638.51(b)(5).

18. Keeping Your Personal Information Secure.

We have security measures in place to prevent personal information, including your User Content, from being accidentally lost or used or accessed in an unauthorized way, including through our use of Amazon Web Services infrastructure. We limit access to your personal information to those who have a genuine business need to access it. In the event we become aware of a security incident involving unauthorized access to, or acquisition, disclosure, or use of, your personal information, we will take reasonable steps to investigate and will notify you and any applicable regulator where we are legally required to do so.

19. How to Exercise Your Rights.

If you would like to exercise any of your rights as described in this Privacy Policy, including with respect to your User Content or AI Output, please email us at support@trymindhub.com. Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period.

If you choose to contact us directly by email, you will need to provide us with: (a) enough information to identify you; (b) proof of your identity and address (e.g., a copy of your driver’s license or passport and a recent utility or credit card bill); and (c) a description of the right you want to exercise and the information to which your request relates. We may deny a request for access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person’s behalf.

Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

We will respond to verifiable requests within forty-five (45) days of receipt. If we require additional time (up to an additional forty-five (45) days), we will notify you of the extension and the reason for it.

20. Appeal Process.

If we decline to take action on your request, we will notify you of our reasons. You may appeal our decision by contacting us at support@trymindhub.com with the subject line “Privacy Rights Appeal.” We will respond to appeals within sixty (60) days.

We hope that we can resolve any query or concern you raise about our use of your information. The General Data Protection Regulation also gives you the right to lodge a complaint with a supervisory authority in the European Union or European Economic Area state where you work, normally live, or where any alleged infringement of data protection laws occurred.

22. Changes to This Privacy Notice.

This privacy notice was published on August 29, 2026, and last updated on August 29, 2026. We may change this privacy notice from time to time; when we do, we will inform you via our website or other means of contact such as email.

23. How to Contact Us.

s3cura Inc., d/b/a Mindhub

401 E 32nd Street, Apt. 802

Chicago, IL 60616

support@trymindhub.com

24. Do You Need Extra Help?

If you would like this notice in another format (for example, audio, large print, braille), please contact us (see How to Contact Us above).