Privacy Policy

Mindra helps organisations and creators turn their recordings, photos, flyers and plans into posts, clips and short videos, plan when they go out, post them to the accounts they connect, and see how they did. This policy explains what Mindra collects, why, who helps us run it, where it goes, how long we keep it, and your rights. Mindra runs Mindra (“we”).

Mindra is new, and this policy will change as Mindra does. When it changes, we’ll update the date above, and we’ll email you before an important change applies.

What we collect

• Your account: your name, email address and password, and when you confirmed you’re 18 or older. Passwords are stored as a one-way hash, so nobody at Mindra can read them.
• What you upload: video and audio recordings, photos, flyers, content plans (pasted or as a file), logos, the music you choose, and text you paste in. Photos are made smaller and the details cameras add, such as the location, are removed. Video and audio are kept as you upload them, with any details your device added; the clips and videos Mindra makes from them don’t carry those details.
• What Mindra makes from them: transcripts with timestamps, summaries, quotes, the text read from flyers, written posts, clips and videos, and the changes you make to them.
• Your brand profile: what kind of organisation you are, what you offer and at what price, your audience, voice, content pillars, links, logo, colours and photos. If you ask Mindra to fill it in from your website, it reads that site’s main page.
• Campaigns: their goals, dates, platforms, budget (for your own reporting) and targets.
• Conversations with the assistant: what you ask, its answers, the page you asked from, and what you applied or discarded from its suggestions.
• Feedback: what you send with the feedback form on Home, how you said Mindra is working for you, and the page you sent it from. The team reads it to improve Mindra.
• Accounts you connect: each account’s name, id and picture, and the access tokens the service gives Mindra to post for you. See Connected accounts below.
• Post results: the views, likes, comments and shares the platform reports for a post Mindra posted, one you shared yourself that Mindra found on your connected account, or one whose link you pasted in, read for a month after it goes out. Mindra reads the numbers only, not the comments or who left them.
• Clicks on Mindra links: when you choose to count the clicks on a web address in a post, Mindra puts a short link (mindra.online/l/…) in its place. When someone clicks it, Mindra counts the click by day and hour, by the country Cloudflare says it came from, by the kind of device (phone, tablet or computer) and by where it came from (such as an app or a search engine), then sends them on. It doesn’t keep the person’s IP address, their browser’s details or any cookie, and link previews (WhatsApp, Facebook and the like) aren’t counted.
• Reminders: if you turn on phone notifications, your browser’s push address for that device. Reminder emails include the post’s text.
• Payments, if you pay for a plan: the plan, amounts and dates, each payment’s reference, how it was paid, the card’s brand and last four digits, and Paystack’s customer and subscription codes. Your full card number never reaches Mindra: you enter it on Paystack’s page.
• Usage records: how much each workspace uses (AI writing, assistant messages, recording hours), so we can apply plan limits and keep costs in check, and when you last used Mindra. These records hold amounts and dates, not your content.
• Technical logs: like most websites, our servers keep short-lived logs, such as IP addresses and the pages requested, to keep Mindra running and secure.

Why we use it

The law requires a reason for each use (the Nigeria Data Protection Act 2023, section 25). Ours are:

AI

Mindra uses AI to write summaries, posts, plans and video drafts, to read flyers and plans, to make AI pictures, and for the assistant. Mindra itself doesn’t train AI models on your content. AI makes drafts for you to check; it doesn’t make decisions about you or anyone else.

• Writing and reading run on Anthropic’s Claude API. Under Anthropic’s commercial terms, what Mindra sends it isn’t used to train its models.
• AI pictures are made with Google’s Gemini API on its paid service, from the description you write and up to three photos you choose. Google marks each picture with its invisible SynthID watermark.
• The assistant runs on Anthropic’s Claude API. Under Anthropic’s commercial terms, what Mindra sends it isn’t used to train its models. It sees your brand profile, campaigns, Planner, results and the page you ask from, and reads more only when your question needs it.
• Transcription is done by Deepgram. We ask Deepgram not to use your recordings to improve its models.

Each provider may keep requests for a limited time to detect misuse, under its own terms.

Connected accounts

Connecting an account is optional. Without one, Mindra reminds you when it’s time to post. You can connect YouTube channels and LinkedIn profiles; Facebook Pages, Instagram professional accounts, TikTok and X are coming, and this section applies to them once they’re available.

• What Mindra keeps: each account’s name, id and picture; for Facebook, the id of the Facebook account that connected it, so we can act on Meta’s deletion requests; and the access token, plus a refresh token where the service gives one, encrypted. A LinkedIn connection ends after 60 days unless you reconnect.
• What Mindra does with it: it posts only what you choose, at the time you set or when you say “post now”, sending the post’s text and its photos or video. It keeps the post’s id and link. For 30 days it reads the post’s views, likes, comments and shares. When you mark a post as posted yourself, it looks through the account’s recent posts for about a day to find it, comparing titles and captions, and keeps only the match. It doesn’t read your messages, comments or followers, and never posts to a personal Facebook profile.
• YouTube: Mindra uses the YouTube API Services. By connecting a channel you agree to YouTube’s Terms of Service, and Google’s Privacy Policy applies. Mindra reads the channel’s id, name and picture, the statistics of videos it posts or finds, and the channel’s recent uploads when looking for a post. You can remove Mindra’s access in Mindra or in Google’s security settings. If Mindra can no longer use a channel’s access, the numbers read through it are deleted after 30 days.
• Disconnecting: Settings, then Connected accounts, then Disconnect deletes the connection and its tokens at once, deletes the numbers Mindra read through it, asks Google, X and TikTok to cancel Mindra’s access, and turns posts scheduled to go out there back into reminders. Posts already published stay on the platform, under its own privacy policy.

The Data Deletion page explains how to remove Mindra at each service, and what happens when Meta sends us a deletion request.

Who helps us run Mindra

We send each of these companies only what its part of the work needs:

Sending data outside Nigeria

Most of the companies above are based outside Nigeria, mainly in Germany and the United States. We send each only what its part needs, under its terms for protecting the data it receives.

People in recordings and photos

Recordings often include more than one voice: a guest speaker, a choir, an interviewee, an audience. Only upload a recording if you have the right to, and the permission of the people in it where that’s needed. The same goes for photos: only upload photos of people, especially children, with their permission (for a child, a parent’s or guardian’s). Recordings can reveal what people believe or details of their health; Mindra uses them only to do what you ask with them. The Terms of Service say more.

If you’re in a recording or photo someone uploaded, or you clicked a Mindra short link, and want to ask about your data, email titusukpono0@gmail.com. For recordings and photos, the organisation or person who uploaded them decides about their content, so we’ll usually pass your request to them, and act ourselves where the law requires.

How long we keep it

Your choices and rights

You can see, change and delete your projects, posts and clips at any time, disconnect accounts, download a copy of your data and delete your account in Settings. The Data Deletion page explains each way to delete your data. You can also ask us to:

• give you a copy of the personal data we hold about you, in a format you can reuse;
• correct it, or delete it;
• stop or limit using it, or stop using it for a particular purpose;
• review anything you think was decided about you by AI alone.

Where you gave consent, you can withdraw it at any time. Email titusukpono0@gmail.com and we’ll reply within 30 days. If you’re not satisfied, you can complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.

Cookies and storage in your browser

Mindra keeps your sign-in in your browser’s local storage, so you stay signed in until you log out, and remembers there an unfinished upload (so it can continue), your light or dark choice, which sidebar groups are open, and whether the assistant’s panel is open with which conversation. We don’t use advertising or analytics cookies. Your browser connects to Google Fonts for the website’s font, and to Jamendo when you preview a song.

Security and breaches

Mindra is served over HTTPS. Passwords are stored as a one-way hash. Your files are kept in private storage, and the links that play or download them expire within 6 hours. The tokens for every connected account are encrypted in our database. Our staff open a workspace’s content only to help when you ask, to keep Mindra secure, or when the law requires it. No system is perfectly secure. If a breach puts your data at risk, we tell the Nigeria Data Protection Commission within 72 hours of learning of it, and when the risk to you is high we tell you straight away, with what you can do.

Children

Mindra is for adults: you must be 18 or older to create an account, and you confirm it when you sign up. If you upload photos or recordings of children, you need a parent’s or guardian’s permission. To report a child’s data uploaded without it, email titusukpono0@gmail.com and we’ll remove it.

Contact

Mindra runs Mindra. For privacy questions and requests, email titusukpono0@gmail.com.