Privacy Policy

Public posts and your account

Thoughts, questions, answers, usernames, avatars and profiles are public. My Mind is a personal view of public thoughts, not private storage. We store your email, a bcrypt password hash, session-revocation version, usage counts and optional account details. Passwords are processed for authentication but are not stored in plaintext. Do not post confidential information.

AI and service providers

Thought text is sent to OpenAI for semantic embeddings. We store those numeric vectors and related connections. Processing may fail or produce no meaningful match. Hosting and database infrastructure use Vercel and Neon; Resend processes transactional email; Stripe processes payments. Google Fonts receives browser requests for fonts. Approved sponsor media can also send your IP address to the advertiser or embedded media provider when loaded; image and embedded-frame requests suppress referrers, direct video hosts can receive connection metadata, and video playback is user controlled. Providers have their own terms and retention practices; deleting data here does not guarantee immediate deletion from provider logs or backups.

Security and analytics

An httpOnly session cookie keeps you signed in. Fixed-window rate-limit records can contain IP addresses, email addresses or account IDs. Active limits last at most one hour; expired buckets are pruned in bounded batches during requests and can also be pruned by an operator. Cleanup may lag when there is no traffic. Vercel analytics and limited product events exclude post text, passwords, tokens, email addresses and usernames. We do not sell personal data or use thoughts for advertising targeting.

Content deletion and moderation

Owners can delete their posts. The primary database removes the post, its embedding, associated connections and linked activity. Moderation reports about deleted content retain case metadata but their copied text, author display name and reason are redacted. Reports submitted by a deleted account are removed. Deleting a post does not refund consumed monthly creation allowance. Public search engines, recipients and third-party caches may keep previously public copies; we cannot recall those copies.

Account deletion and retained records

Email support@thoughtnets.com from your registered address to request deletion. Support must verify identity before acting. For accounts without billing or administrator obligations, the assisted procedure deletes the account, public content, reset tokens, personal activity, usage counts and XP receipts, and removes account/email rate-limit keys. Shared IP security limits remain until normal expiry. Accounts linked to billing or administrator duties require manual review so deletion does not cancel a subscription, destroy financial records or strand an obligation.

Billing records and minimal moderation case metadata are not automatically purged while retention obligations are under review. Applicable retention periods, legal holds and provider backup deletion schedules must be confirmed by the service owner; no fixed period or immediate removal from every backup is promised. Support will explain unresolved retention before completing an affected request. Restoring a backup requires reapplying recorded deletions before reopening the restored service.

Contact and age

ThoughtNets is not intended for children under 13. Contact support@thoughtnets.com about this policy, access or deletion. Material changes update the date above.