Privacy

Privacy at MyMynd

This pre-launch policy page confirms the design principles for MyMynd v2. A final legal policy, including the operating entity, data locations, subprocessors, retention periods and contact details, must be approved before production launch.

What the product is designed to hold

Account details, organisation memberships, billing references, documents supplied by authorised users, approved onboarding answers, agent instructions, chat activity needed to operate the service, and security audit events.

Knowledge documents

PDF and Word text is prepared in the authorised user's browser. Original source documents are stored in private Bunny Storage without a public download address, while approved searchable text and document metadata are kept in MyMynd's account-scoped database.

Voice onboarding

When an authorised user chooses to record an onboarding answer, the recording is sent securely to the approved transcription provider. MyMynd keeps the resulting transcript for review but does not retain the submitted audio recording after transcription.

Website agents and chat records

Customers may enable an agent on specifically approved website domains. Website questions and the agent’s answers are stored as written chat records for conversation continuity, customer review, security and usage accounting. Authorised workspace users can review their agent’s chat transcripts. Complete transcript emails are on by default for website agents and are sent to verified workspace owners. A workspace owner or administrator can turn them off for an agent at any time. Emailed copies are retained in the recipients’ mailboxes and must be managed by the customer. Voice conversations are stored as text transcripts; MyMynd does not retain the live voice audio. Visitors should not submit passwords, payment details or other unnecessary sensitive information.

How information is protected

Organisation data is separated by account, private files are kept outside the public web root, credentials are stored outside source control, and access to sensitive operations is authenticated and recorded.

Third-party services

Approved providers may process payment, storage, email, transcription and AI requests. Those providers and their exact purposes will be listed here before launch.