Privacy Policy

Welcome to MultiMind ("MultiMind", "we", "our", or "us").

We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you use the MultiMind website, applications, and related services (collectively, the "Service").

This Privacy Policy is intended to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR where applicable, and other relevant data protection laws.

By using the Service, you acknowledge that you have read this Privacy Policy.

1. Data Controller

The controller of your personal data is:

If MultiMind is later operated by a registered legal entity, this Privacy Policy will be updated with the company's legal name, registered office, and registration number.

2. Scope of this Policy

This Privacy Policy applies to:

• visitors of our website;
• registered users;
• subscribers;
• customers purchasing paid plans;
• anyone interacting with the MultiMind Service.

3. Personal Data We Collect

Depending on how you use the Service, we may collect the following categories of personal data.

3.1 Account Information

We may collect:

• email address;
• authentication provider;
• encrypted authentication identifiers;
• profile settings;
• account preferences;
• multi-factor authentication status.

We do not store your password if authentication is provided through a third-party identity provider (such as Google).

3.2 User Content

When using MultiMind, you may voluntarily submit:

• prompts;
• debate questions;
• follow-up chat messages;
• conversation history;
• AI-generated responses;
• selected AI models;
• selected AI roles;
• ratings and feedback;
• documents and files you upload to your Library;
• images you ask the Service to generate, and the prompts used to generate them;
• audio captured when you use voice input.
• other content you choose to provide.

Please do not submit confidential, highly sensitive, medical, financial, or regulated information unless absolutely necessary.

Voice input is handled by your device's or browser's built-in speech recognition. Depending on your device, the audio may be transmitted to your operating system or browser vendor (for example Google on Android and Chrome) for transcription. MultiMind receives only the resulting text and does not store the audio.

3.3 Subscription and Billing Information

If you purchase a subscription, we process:

• subscription plan;
• subscription status;
• invoices;
• payment identifiers;
• usage quotas.

Payments are securely processed by Stripe. MultiMind never stores complete payment card numbers or CVV codes.

3.4 Technical Information

We automatically collect technical information including:

• IP address;
• browser type;
• operating system;
• device information;
• language settings;
• timestamps;
• session identifiers;
• security logs;
• diagnostic information.

3.5 Usage Information

We collect information about how you use the Service, including:

• debates created;
• AI models selected;
• features used;
• response generation;
• clicks;
• settings;
• error reports;
• performance metrics.

4. How We Use Your Personal Data

We process personal data for the following purposes:

• providing and operating the Service;
• authenticating users;
• generating AI debates;
• routing requests to selected AI models;
• maintaining conversation history;
• processing subscriptions and payments;
• allocating monthly usage quotas;
• providing customer support;
• improving product quality;
• monitoring performance;
• detecting abuse and fraud;
• ensuring security;
• complying with legal obligations;
• communicating important service updates.

5. Legal Basis for Processing

Where GDPR applies, we process personal data on one or more of the following legal bases.

Contract Performance — Article 6(1)(b) GDPR

We process data to:

• create and manage your account;
• provide AI debates;
• process subscriptions;
• provide customer support;
• deliver the Service.

Legitimate Interests — Article 6(1)(f) GDPR

We process certain information for our legitimate interests, including:

• fraud prevention;
• abuse prevention;
• cybersecurity;
• product improvement;
• infrastructure monitoring;
• service reliability;
• maintaining debate history;
• enforcing our Terms of Service.

Consent — Article 6(1)(a) GDPR

Where required by law, we rely on your consent, including for optional cookies and marketing communications. You may withdraw consent at any time.

Legal Obligations — Article 6(1)(c) GDPR

We process information where necessary to comply with legal obligations, including tax, accounting, and regulatory requirements.

6. AI Processing

MultiMind allows users to compare and debate multiple AI models.

When you submit prompts, questions, or messages:

• your prompt;
• relevant conversation context;
• selected models;
• selected settings

are transmitted through OpenRouter to the selected AI model providers solely for generating AI responses.

MultiMind does not use your prompts to train its own AI models.

Third-party AI providers process submitted content according to their own privacy policies.

We recommend that you do not submit confidential or highly sensitive information when interacting with AI models.

6.1 Image Generation

Where you use image generation, your prompt is transmitted through OpenRouter to the selected image model provider (currently OpenAI and xAI) solely to generate the requested image. Generated images are stored in your account until you delete them.

6.2 Library and Document Search

When you add documents to your Library, their text is sent to an embedding provider (currently OpenAI) to produce numerical representations that make the content searchable. Both the document text and the embeddings are stored in your account until you delete them.

6.3 Training by Third-Party Providers

MultiMind does not use your content to train any AI model. Whether a third-party provider may use content routed to it for its own model training is governed by that provider's own data policy and by the routing settings we maintain with OpenRouter. We configure these settings to exclude training where the provider offers that option, but we cannot guarantee the practices of every provider.

6.4 Model Context Protocol (MCP)

If you connect an external AI client to MultiMind through our MCP endpoint, that client can read the debates and chats you authorise it to access. The connection is made by you, and the external client's handling of that content is governed by its own terms and privacy policy, not by this one.

7. Third-Party Service Providers

To operate the Service, we rely on carefully selected service providers.

Current providers include:

Additional providers may be introduced as the Service evolves.

Each provider processes personal data only as necessary to provide its services.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Whenever personal data is transferred internationally, we implement appropriate safeguards such as:

• European Commission Standard Contractual Clauses (SCCs);
• adequacy decisions;
• contractual protections;
• appropriate technical and organisational safeguards.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Typical retention periods include:

Following account deletion, personal data will be deleted or anonymised unless legal obligations require us to retain certain information.

10. Security

We implement appropriate technical and organisational measures designed to protect personal data, including:

• encrypted connections (TLS);
• authentication controls;
• role-based access controls;
• infrastructure monitoring;
• security logging;
• encrypted data storage where applicable;
• backups;
• abuse detection;
• vulnerability management.

Although we strive to protect your information, no method of electronic storage or transmission is completely secure.

11. Cookies

MultiMind uses cookies and similar technologies.

Essential Cookies

These cookies are necessary for:

• authentication;
• maintaining user sessions;
• security;
• fraud prevention;
• operation of the Service.

Essential cookies cannot be disabled.

Functional Cookies

Functional cookies remember user preferences and improve usability.

Analytics Cookies

Where analytics services are enabled, analytics cookies help us understand how the Service is used. Where required by law, analytics cookies are used only with your consent.

12. Your Rights

Depending on your location and applicable law, you may have the right to:

• access your personal data;
• correct inaccurate information;
• delete your personal data;
• restrict processing;
• object to processing;
• request data portability;
• withdraw consent;
• lodge a complaint with your local data protection authority.

To exercise your rights, contact us at: contact@multimind.pro.

We will respond within the timeframe required by applicable law.

13. Children's Privacy

The Service is intended for users aged 16 years or older.

We do not knowingly collect personal data from children.

If we become aware that personal data has been collected from a child in violation of applicable law, we will delete it as soon as reasonably possible.

14. Automated Decision-Making

MultiMind does not use personal data for automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Whenever material changes are made:

• we will update the Last Updated date;
• where required by law, we will notify users through the Service or by email.

Continued use of the Service after such updates constitutes acceptance of the revised Privacy Policy where permitted by applicable law.

16. Contact

For questions regarding this Privacy Policy or your personal data, please contact:

17. Supervisory Authority

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the supervisory authority responsible for data protection in your country of residence or place of the alleged infringement.

If you are located in the European Union, you may contact your national Data Protection Authority (DPA). A list of EU supervisory authorities is available on the website of the European Data Protection Board (EDPB).

18. Questions

If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:

We will be happy to assist you.

19. United States — State Privacy Rights

This section applies to residents of US states with comprehensive privacy laws, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and Montana. It supplements the rest of this Policy.

Categories of personal information we collect

In the twelve months preceding the date of this Policy, we collect the following categories, as defined by the California Consumer Privacy Act: identifiers (such as email address and IP address); commercial information (subscription and transaction records); internet or network activity (usage and interaction data); geolocation data inferred from IP address at country level only; and the contents of prompts, messages and files you choose to submit.

We collect this information from you directly, and automatically from your device when you use the Service. We use it for the purposes described in section 4 and disclose it to the service providers listed in section 7.

We do not sell or share your personal information

MultiMind does not sell personal information, and does not share it for cross-context behavioural advertising, as those terms are defined under California law. We have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of consumers under 16 years of age.

Sensitive personal information

We do not collect sensitive personal information for the purpose of inferring characteristics about you. Content you voluntarily submit in a prompt may contain sensitive information; we process it only to generate the response you requested and we ask that you avoid submitting it.

Your rights

Subject to your state's law, you may have the right to know what personal information we collect and how we use it; to access a copy of it; to correct inaccuracies; to delete it; to opt out of sale, sharing, or targeted advertising; to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights.

You can exercise most of these rights directly in the app: Settings contains an option to export all of your data and an option to permanently delete your account and its contents. You may also contact us at contact@multimind.pro.

An authorised agent may submit a request on your behalf. We will ask for written proof of authorisation and may ask you to verify your identity directly.

Appeals

If we decline your request, you may appeal by replying to our decision or writing to contact@multimind.pro with the subject line "Privacy Appeal". We will respond with a written explanation within the period required by your state's law. If your appeal is denied, you may contact your state Attorney General.

20. Other Regions

Where local law grants you rights beyond those described above, we honour those rights. If you are located in a jurisdiction whose data protection law requires a designated local contact, and MultiMind does not currently designate one, you may raise any matter with us at contact@multimind.pro and we will respond directly.

MultiMind is operated from Poland. Personal data is processed in the European Economic Area and in the United States, and may be processed elsewhere by the model providers listed in section 7 depending on the models you select.