Skip to content
MndUP
  • Talk
  • Flows
  • Runs
  • Library
User
Sign in
TalkFlowsRunsLibraryUserSign in

Privacy policy

How MndUP handles your data.

MndUP (mndup.com) is document-screening software in which a panel of AI analysts reads many documents against an organisation's own rules, code checks every quote against the source, and a person makes the decision, recorded in a sealed decision record.We take data privacy seriously. Every AI model call is routed through a policy-aware resolver that honours your organisation's data-location setting: anywhere (any, the default), EU only (eu_only), or only on a dedicated computer with the local edition (local_only).

What we store

  • Account details (email, display name, hashed password).
  • Conversations, MNDs, documents, flows, and the artifacts they produce.
  • Policy-audit records capturing every model-resolution decision.
  • Messages sent through the contact form on mndup.com: your name, organisation, email address and message. We store them so we can reply; they are not used for marketing.

Page counts on the public website

The public pages of mndup.com are counted without cookies and without any third-party script. For each page view the server writes one line to its log: the page's path, its language, the referring site's name (never the full address of the page you came from) and the kind of visitor (a person, a named search or AI crawler, or another automated client). It never records your IP address, cookies, query strings or the browser's identity string (its user agent). The lines are kept in AWS CloudWatch in the EU (eu-west-1) and are used only to count visits.

What we do not store

  • Content generated or processed under local_only never leaves your machine. The one exception: named public-register lookups (for example Bolagsverket and SCB) may send an organisation number.
  • Your IP address, with a page count or with a contact-form message.

Who processes your data

We never sell your data. MndUP is hosted in the EU on AWS eu-west-1. Cloud AI providers process the content of a model call as processors on your organisation's behalf, and only when your organisation's data-location setting allows it: AWS Bedrock in the EU, and other model providers your organisation chooses. Web and public-register lookups, and connectors your organisation turns on (webhooks, Drive, storage exports), send their requests to those services. A data processing agreement is available on request through the contact form.

Your rights

MndUP does not offer self-service data export or account deletion. If you want a copy of your data, or want your account and its data removed, ask an admin of your organisation to raise the request from your organisation's settings (Organisation → GDPR requests). Your organisation's admin reviews and files the request; MndUP staff then approve or reject it and, for an approved request, carry it out and record when it was completed. This satisfies our obligations under Articles 15 and 17 of the GDPR.