Privacy Policy

1. Collected Information

We collect the following information:

• Account information: name, email, password, and demographic information.
• Usage information: log data such as IP address, device type, browser, and time of access.

2. Usage of Information

We use your data to:

• Provide, improve, and secure our Services.
• Manage your account and verify your identity.
• Support research activities.
• Communicate updates, support, or service-related notices.

No personal data is sold or shared with advertisers or unrelated third parties.

3. Data Storage and Security

• All data is stored on Google Cloud Platform (GCP) with AES-256 encryption at rest and TLS encryption in transit.
• Access to production data is limited to authorized team members under strict role-based permissions.
• We regularly review logs, update credentials, and monitor for potential vulnerabilities.

4. Data Retention and Deletion

• We retain your data only as long as needed for operational, legal, or educational purposes.
• You can request deletion of your account and associated data at any time by emailing hi@tmind.ai.
• Once verified, your data will be securely deleted from production systems within 30 days.

5. Data Sharing and Subprocessors

To deliver our Services, we work with trusted vendors who meet strong security and compliance standards:

• Google Cloud Platform (GCP) — cloud hosting and storage
• Stripe — payment processing

Each subprocessor is contractually bound to protect your data under applicable privacy regulations.

6. Your Rights

Depending on your location and applicable laws, you may have the right to:

• Access, correct, or delete your personal data
• Request a copy of your data
• Withdraw consent for processing

Requests may be sent to hi@tmind.ai and we will respond within 30 days.

7. Educational Privacy (FERPA Compliance)

For institutional users in the United States, DME complies with the Family Educational Rights and Privacy Act (FERPA).

When our Services are used by educational institutions (such as universities, colleges, or training programs), all student records and information are the property and under the control of the institution.

DME is a service provider ("school official" under FERPA), processing data on behalf of the institution according to their instructions. We do not share, sell, or disclose student information to unauthorized third parties.

Educational institutions may request deletion or return of student-related data at any time by contacting salesforce@datamadeeasy.org.

8. Compliance

DME aligns with the following frameworks and principles:

• HIPAA (Health Insurance Portability and Accountability Act) — for protection of any health-related data
• FERPA (Family Educational Rights and Privacy Act) — for educational institutions using our training services

9. Updates to This Policy

We may update this Privacy Policy occasionally to reflect product or regulatory changes. If updates are significant, we will notify you via email before they take effect.

10. Contact Us

If you have any questions or concerns, please contact us at salesforce@datamadeeasy.org.