Privacy Policy

Last updated: July 24, 2026

1. Introduction

LocalMind ("we", "us", "our") operates the LocalMind platform. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

2. Information We Collect

Information You Provide

Account information — email address, display name, and authentication credentials (including passkeys and TOTP secrets).
Project data — project names, settings, members and invitations you create.

Information Collected Automatically

Usage data — pages viewed, features used, and interaction patterns.
Device data — browser type, operating system, and screen resolution.
Network data — IP address and approximate location (country-level), recorded in audit logs for security and accountability.

Information We Do NOT Collect

Passwords — sign-in is passwordless, so no password is ever stored.
One-time secrets in plaintext — API keys and webhook secrets are stored only as a hash or a short hint after they are shown to you once.

3. How We Use Your Information

To provide and maintain the LocalMind platform.
To send transactional notifications (webhook events, security alerts).
To keep an audit trail of sensitive actions for security and accountability.
To improve our services and fix bugs.
To comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share data with:

Infrastructure providers — hosting, database, and email delivery services.
Your configured webhook endpoints — event payloads you have subscribed to are delivered to the URLs you register.
Legal requirements — when required by law or to protect our rights.

5. Data Retention

We retain your account data for as long as your account is active. Deleting your account anonymizes your personal data while preserving audit-log integrity (your actions appear as a deleted user). Projects you delete follow a 30-day grace period before permanent removal.

6. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted storage of sensitive secrets, tenant isolation, and step-up re-verification for sensitive actions.

7. Your Rights

You have the right to:

Access and export your data.
Request correction of inaccurate data.
Request deletion of your account.
Withdraw consent for optional data processing.

8. Contact

For privacy-related inquiries, contact us at privacy@localmind.app.

2. Information We Collect

Information You Provide

Account information — email address, display name, and authentication credentials (including passkeys and TOTP secrets).

Project data — project names, settings, members and invitations you create.

Information Collected Automatically

Usage data — pages viewed, features used, and interaction patterns.

Device data — browser type, operating system, and screen resolution.

Network data — IP address and approximate location (country-level), recorded in audit logs for security and accountability.

Information We Do NOT Collect

Passwords — sign-in is passwordless, so no password is ever stored.

One-time secrets in plaintext — API keys and webhook secrets are stored only as a hash or a short hint after they are shown to you once.

4. Data Sharing

We do not sell your personal information. We may share data with:

Infrastructure providers — hosting, database, and email delivery services.

Your configured webhook endpoints — event payloads you have subscribed to are delivered to the URLs you register.

Legal requirements — when required by law or to protect our rights.