Privacy Policy
Effective Date: August 20, 2026
At InnerMind, your privacy matters. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, create an account, or use the InnerMind platform. By using our services, you agree to the practices described in this policy.
1. Information We Collect
Sign-Up & Contact Form
When you create an InnerMind account or submit our contact form, we collect your full name, email address, and any optional information you provide about your data challenges or business context.
Usage Data
We may collect information about how you interact with our website, including pages visited, time spent, browser type, device type, and IP address. This data is collected automatically via standard web analytics tools.
Business Data (Platform Users)
When using the InnerMind platform, you may upload operational, financial, and growth data for AI analysis. This data is used solely to generate insights for your account and is not shared with third parties.
2. How We Use Your Information
We use the information we collect to:
- Create and administer your account, including trials, subscriptions, and billing
- Respond to inquiries submitted through our contact form
- Process and analyze uploaded business data to deliver AI-powered insights
- Improve the InnerMind platform and user experience
- Send product updates, announcements, and relevant communications (you may opt out at any time)
- Comply with legal obligations
3. AI Processing of Your Data
InnerMind uses artificial intelligence to analyze the business data you upload. This processing occurs to generate strategic recommendations, identify trends, and surface insights relevant to your business. AI processing runs on AWS Bedrock within our AWS account, so your documents and financials are not sent to a third-party AI vendor. Your data is never used to train any AI model, ours or a vendor's. InnerMind is a multi-tenant service: customers share the same infrastructure, and your records are separated from every other customer's by an account identifier that is derived server-side from your validated session and applied to every read and write. Dedicated, single-customer infrastructure is available on the Enterprise plan.
4. Data Storage & Security
Your data is stored on secure cloud infrastructure (Amazon Web Services). We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. While we take reasonable steps to protect your information, no system is completely secure, and we cannot guarantee absolute security.
5. Third-Party Sign-In Services
Google Sign-In and Microsoft Sign-In
When you choose to sign in with Google or Microsoft, we receive a limited set of identity information from your provider: your email address, full name, and a unique account identifier (the 'sub' claim). We use this information solely to create and authenticate your InnerMind account. We do not access your contacts, messages, files, calendar, photos, or any other data from your Google or Microsoft account.
Google API Services User Data Policy (Limited Use)
InnerMind's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not allow humans to read this data except with your explicit consent or as required by law, and do not transfer it to third parties except as necessary to provide or improve user-facing features that are prominent within InnerMind.
Revoking Access
You may revoke InnerMind's access to your Google account at any time via https://myaccount.google.com/permissions, and to your Microsoft account via https://account.live.com/consent/Manage. Revoking access will prevent future sign-ins via that provider but does not delete your existing InnerMind account. To delete your account entirely, see Section 9 (Data Retention) and contact us.
6. Data Sharing
We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:
- If required by law, court order, or governmental authority
- In connection with a merger, acquisition, or sale of assets, where your data may be transferred to a successor entity
7. The Companies That Process Your Data
Running InnerMind means a small number of other companies necessarily handle some of your data. We name every one of them here rather than referring vaguely to “trusted service providers”. Each is bound by its own contractual and confidentiality obligations, and none of them is permitted to use your data for their own purposes.
- Amazon Web Services: hosting, storage, and the AI models that analyze your data (AWS Bedrock). Your documents and financials are processed inside our own AWS account and are never sent to a consumer AI service.
- Pinecone: the search index that lets InnerMind find the right passage in your own documents when you ask a question.
- ElevenLabs: generates the two synthetic voices for the weekly podcast episode on the Pro plan. It receives the episode script, which discusses your business. Each generation is deleted from ElevenLabs as soon as the episode has been assembled, so the only lasting copy is the one in your account.
- Stripe: payment processing. Stripe receives your billing details directly through its own hosted checkout; InnerMind never sees or stores your card number.
- Intuit (QuickBooks), Google, and Microsoft: only if you choose to connect those accounts, and only to read the data you authorize. You can disconnect any of them at any time.
8. Cookies & Tracking
We use cookies and similar tracking technologies to improve your experience on our website, analyze traffic, and understand where our visitors come from. You can control cookie preferences through your browser settings. Disabling cookies may affect some functionality of the site.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request that inaccurate data be corrected
- Deletion: request that we delete your personal data
- Opt-out: unsubscribe from marketing communications at any time
- Portability: request your data in a portable format
10. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Contact-form submissions are retained until the enquiry is resolved or until you request removal. Uploaded business data is retained for the duration of your active account and deleted within 30 days of account closure upon request.
11. Children's Privacy
InnerMind is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or platform after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at: