Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) is entered into by and between you (“User”) and 3axislabs Inc., a corporation duly incorporated under the laws of Delaware (referred to as “MindMap AI,” “we,” “us,” or “our”). This Policy explains how we collect, use, share, and safeguard the information you provide to us, and it assists you in making informed decisions when using our service. We encourage you to read this Policy carefully to make informed choices about how you engage with our services.

PLEASE NOTE, BY CONTINUING TO USE OR ACCESS OUR SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS POLICY IN ITS ENTIRETY. IF YOU DO NOT AGREE TO ANY PART OF THIS POLICY, YOU MUST IMMEDIATELY CEASE USING OUR SERVICES.

2. Personal Information We Collect

Personal information is any data that can be used to identify you. We collect personal information related to you (“Personal Information”) to provide and enhance our services. This includes:

2.1 Personal Information You Provide

We collect Personal Information when you create an account, make transactions, or contact our support team and communicate with us:

• Account Information: When you create an account, we collect details associated with your profile, such as your name, role, email address, contact information, account credentials, payment information, and transaction history (collectively, “Account Information”).
• User Content: We collect any data you provide in the form of content or files you upload, including text inputs, images, audio, and other files (“Content”).
• Feedback on your use of our Services: We appreciate feedback, including ideas and suggestions for improvement or reporting concerns about an Output in response to an Input ("Feedback"). If you report an Output in response to an Input—for example, by using the report option—we will store the entire related conversation as part of your Feedback.
• Communication Information: If you reach out to us, such as via email or social media, we collect relevant Personal Information, including your name, contact information, and the contents of your messages (“Communication Information”).
• Other Information You Provide: We collect other information you may share, such as details you provide during events, surveys, or to verify your identity or age (collectively, “Other Information You Provide”).

2.2 Personal Information We Receive from Your Use of the Services

When you interact with our services, we collect certain data about your visit and usage (“Technical Information”):

• Log Data: We gather information your browser or device sends automatically, including your IP address, browser type and settings, date and time of your requests, and your interactions with our services.
• Usage Data: We collect information about your usage, including the types of content you engage with, features accessed, actions taken, time zone, country, access times, device information, and connection details.
• Device Information: We collect information about your device, such as device name, operating system, device identifiers, and browser type. Information may vary based on your device and settings.
• Location Information: We may determine the general location of your device through your IP address for security purposes, to detect unusual login activity, or enhance user experience.

2.3 Information We Receive from Other Sources

We may receive data from trusted partners, including security providers to protect against fraud and threats, and marketing vendors to help us reach potential customers.

We also utilize information from publicly available sources to improve the models powering our services.

3. Use of Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services.
• To process transactions and send transactional communications (e.g., confirmation of purchases, account-related updates).
• To personalize your user experience, including suggesting relevant content or features.
• To ensure legal compliance, including preventing fraud or enforcing our Terms of Service.
• To send you marketing communications, where permitted, that may be of interest to you. You can opt out of marketing communications at any time.

4. Legal Basis for Processing Personal Data

We process your personal data based on the following legal grounds:

• Performance of a contract: We process personal data to fulfill our obligations under a contract with you, such as providing the services you requested.
• Legitimate interests: We process your data for legitimate interests, such as improving our services and enhancing security, as long as these interests do not outweigh your rights.
• Consent: In cases where consent is required, we will seek your explicit consent for the processing of your personal data. You may withdraw consent at any time.
• Compliance with legal obligations: We may be required to process your data to comply with legal obligations, including regulatory requirements and court orders.

5. Data Sharing and Disclosure

We will not sell, trade, or rent your personal information to third parties except as described in this policy. We may share your data in the following circumstances:

5.1 Vendors and Service Providers

To support our business operations and provide certain functionalities and services, we may share personal data with third-party vendors and service providers. These may include providers of payment processing (such as Stripe for subscription features), hosting services, cloud storage, customer support platforms, web analytics, email communication software, marketing tools, and other information technology services. These providers may access, process, or store personal data only for the purpose of performing their designated services for us and in accordance with our instructions.

These service providers also include third-party AI model providers. To provide AI features such as mind map generation and summaries, we send the content you submit, including text inputs, uploaded files, and prompts, to AI model providers that process it on our behalf solely to perform the function you requested.

5.2 Affiliates

We may share personal data with our affiliates, meaning entities that are controlled by, control, or are under common control with our company. These affiliates are permitted to use personal data in ways consistent with this Privacy Policy.

5.3 Account Administrators (for Business Accounts)

If you join a business or organizational account with us, administrators of that account may access and manage your account information, including your email address and content, as necessary to administer your participation. Additionally, if you create an account using an email associated with an organization, we may share certain account information, like your email address, with the organization to facilitate account management.

5.4 Sharing Links of Mind Maps with Other Users

Certain features within our services allow you to share information with others by creating links to mind maps you have created. These links can be shared in two ways: privately or publicly.

• Private Sharing: Privately shared links are accessible only to those who have the URL. We do not publicly share these URLs, so access is restricted to individuals you choose to share the link with.
• Public Sharing: Publicly shared mind maps are available for anyone to view and access.

Please note that inappropriate content in publicly shared mind maps may be subject to removal by us to ensure community standards. Information you choose to share through either option is governed by the terms and privacy policies of the recipients or viewers, and we encourage you to review and understand these terms before sharing your information.

5.5 Third-Party Applications and Integrations You Authorize

Certain features allow you to connect third-party applications and AI assistants, including those using the Model Context Protocol, to your account. When you authorize such an integration, the connected application may send us instructions and content on your behalf, such as map titles, topics, prompts, images, and text to be organized, and may create, read, update, or export mind maps in your account as you direct it. If an integration provides a link to an image or other resource, for example an image to attach to a map node, our servers download that resource and store it as part of your project in order to perform the requested action. We also share with the connected application the account data and content necessary for the integration, at your direction.

Content received through an integration is treated as User Content under this Policy. When you request AI features, it is processed by the AI model providers described in Section 5.1, and mind maps and related generation history created through an integration are stored, retained, and deletable in the same way as content you create directly in the Service (see Section 6).

When you connect an integration, we issue it an access token that allows the application to act on your account within the scopes presented to you during authorization. The token remains valid until it expires or you disconnect the integration; disconnecting revokes the token and stops further access and sharing. The third party's handling of data it receives is governed by its own terms and privacy policy, which we do not control. Questions about integrations and your data can be sent to support@mindmapai.app.

5.6 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of some or all of our assets, personal data may be shared during the due diligence process and transferred to the successor or acquiring entity as part of the transaction. This data transfer will be subject to the terms outlined in this policy to protect your privacy.

5.7 Legal Requirements and Protection of Rights

We may access, preserve, and disclose personal data if we believe in good faith that doing so is required by applicable law, regulation, legal process, or governmental request. We may also disclose personal data to enforce our Terms of Service, including investigating potential violations; to detect, prevent, or otherwise address fraud, security, or technical issues; or to protect the rights, property, or safety of MindMap AI, our users, or the public, as required or permitted by law.

6. Data Retention

MindMap AI is committed to respecting your privacy and ensuring transparency regarding data retention. We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by applicable law (such as tax, accounting, or other legal obligations).

In some cases, we may need to retain certain data temporarily to comply with legal requirements, respond to lawful requests, or support our security and fraud prevention efforts. We take these actions to protect our rights, comply with legal obligations, investigate potential fraud, and ensure the safety of our users. Any such retained data will be securely stored and isolated from further processing until deletion is feasible.

When we no longer have a legitimate business need to retain your personal information, we will delete or anonymize it.

7. Payment Processing

We use Stripe, a third-party payment processor, to process payments made through our platform. When you make a payment:

• Your payment information is collected and processed directly by Stripe
• We do not store your full credit card numbers or payment account details
• We may retain limited transaction records for accounting and legal purposes
• Stripe's handling of your payment data is governed by their privacy policy and terms of service
• We recommend reviewing Stripe's privacy practices at their website

While we carefully select our payment processing partners, we are not responsible for Stripe's privacy practices or security measures.

8. Security Measures

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no security measure is infallible, and we cannot guarantee absolute security of your data.

Breach Response: In the event of a security breach, we will notify affected users within 72 hours in accordance with applicable laws (such as GDPR), outlining the nature of the breach, the information affected, and measures taken to mitigate harm.

9. Your Rights (GDPR & CCPA Compliance)

All users of MindMap AI have certain rights regarding their personal data, regardless of their location. These include the ability to access, correct, or request deletion of your information, as well as to opt out of marketing communications.

To request deletion, go to "Profile" in your account settings, select "Delete Account," and confirm by providing your email address and a reason for deletion. We will process your request in line with applicable regulations. Specific rights under GDPR and CCPA are outlined below.

9.1 GDPR Compliance for European Union Users

As a user located in the European Union (EU), you have rights under the General Data Protection Regulation (GDPR), including:

• Right to Access: You may request a copy of your personal data.
• Right to Rectification: You can request corrections to inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your personal data under certain circumstances.
• Right to Data Portability: You may request that your data be transferred to another service provider in a machine-readable format.
• Right to Object or Restrict Processing: You may object to or request limitations on certain types of data processing, including direct marketing.

You may contact us to exercise these rights or request further information at support@mindmapai.app.

9.2 CCPA Compliance for California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: You have the right to request disclosure of the specific pieces and categories of personal data we have collected, sold, or disclosed about you within the past 12 months.
• Right to Delete: You can request that we delete your personal information, subject to certain exceptions allowed by law.
• Right to Opt-Out of Data Sales: While Mindmap AI does not currently sell personal data, you have the right to opt-out of any future sales of your personal data if such practices change. We will notify you and provide an updated policy if this occurs
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights, such as denying services or providing a different quality of service.

California residents can submit requests related to their rights under the CCPA by contacting us at support@mindmapai.app.

10. Data Transfers

Your personal data may be transferred and maintained on servers outside of your country, where data protection laws may differ. Where required by applicable regulations, we use safeguards to ensure your data is handled securely.

11. Children's Privacy

Our Services are not directed to or intended for children under the age of 13. We do not knowingly collect Personal Information from children under 13. If you believe that a child under 13 has provided Personal Information to MindMap AI through the Services, please reach out to us so that we can take appropriate steps to delete the information as outlined in the "Contact Information" section of this Privacy Policy. We will investigate and, if necessary, promptly delete the Personal Data from our systems. Users under the age of 18 must have permission from a parent or guardian to use our Services.

12. Changes to This Policy

We may revise this Privacy Policy occasionally. The latest version will be indicated by an updated "Revised" date and will be effective immediately upon accessibility. If significant changes are made, we may inform you by prominently posting a notice of these changes or by directly sending you a notification. We encourage regular reviews of this Privacy Policy to stay informed on how we are safeguarding your information.

13. Contact Information

For any questions or concerns regarding these Terms, please contact us at Email: support@mindmapai.app

For immediate assistance, you can also reach out through our online support portal or email our support team at the address above.