Privacy Policy

1. Who we are

This Privacy Policy describes how Orgmind ("Orgmind", "we", "us") collects, uses, and shares information when you visit our website, contact us, or use our services.

Privacy contact: privacy@orgmind.co. General contact: hello@orgmind.co.

2. Scope

This policy covers:

• Website visitor information (for example, basic technical logs).
• Business contact and account information (for example, trial/demo inquiries, onboarding, support).
• Customer-connected data processed through Orgmind under customer instructions (to the extent it contains personal data).

Customer contracts and a Data Processing Addendum (DPA) may apply to customer-connected data. For DPA availability, see DPA.

3. Information we collect

Information you provide:

• Business contact details (name, work email, company, role) and the content of your messages when you contact us.
• Support and onboarding information you choose to share with us.

Information collected automatically:

• Basic device and log data (IP address, browser type, pages viewed, timestamps) used to operate and secure the website and services.

Customer-connected data:

• Customers can connect Orgmind to business systems (for example, accounting, POS, CRM, ecommerce). Orgmind processes the connected data under customer instructions to provide the service.
• Orgmind is designed to minimize exposure to personal data through encrypted storage, role-based access controls, audit trails, and connector-level filtering of direct identifiers where configured.
• Depending on the customer systems and configuration, customer-connected data processed through Orgmind may include personal data.

4. How we use information

• Provide, operate, secure, and maintain Orgmind.
• Respond to inquiries, provide onboarding and support, and manage customer relationships.
• Monitor for misuse, fraud, and security incidents, and maintain auditability.
• Improve the service, including debugging and performance analysis.
• Comply with legal obligations.

5. Legal bases (GDPR/UK GDPR)

Where applicable, we process personal data based on:

• Contract (to provide the services you request).
• Legitimate interests (to secure, operate, and improve the services).
• Legal obligation (where required by law).
• Consent (only where required for a specific purpose).

6. How we share information

We may share information with:

• Service providers/subprocessors that help us run the website and services (for example, hosting, communications, security).
• Professional advisors (for example, legal) as needed.
• Authorities or other parties when required by law or to protect rights, safety, and security.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

7. International transfers

Your information may be processed in countries other than where you live. Where required, we use appropriate safeguards for international transfers.

8. Security

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit and at rest, access controls, and auditing. No method of transmission or storage is 100% secure.

9. Retention

We retain information only as long as needed to provide the services, operate and secure the platform, meet legal obligations, and resolve disputes. Retention periods depend on the data type and purpose.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and request portability of your personal data. To submit a request, email privacy@orgmind.co.

11. California disclosures (CCPA/CPRA)

California residents may have rights to know, delete, correct, and opt out of certain processing. We do not sell personal information and do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising your rights. Submit requests to privacy@orgmind.co.

12. Children

Orgmind is not directed to children and we do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the effective date.

Questions? Email privacy@orgmind.co.