Privacy Policy
Last updated: July 20, 2026
Overview
NeuralMind is built on a simple principle: your code stays on your machine. We designed the product to function 100% locally, with zero cloud calls for any code processing. This policy explains what data we collect (very little), why, and your rights. The full, canonical GDPR policy is maintained in the open at github.com/dfrostar/neuralmind/blob/main/docs/PRIVACY-POLICY.md.
Data We Do Not Collect
We do not collect, transmit, or store your source code, queries, file paths, graph data, synapse weights, or any file contents. The index lives entirely in your project's `.neuralmind/` and `graphify-out/` directories on your machine. The NeuralMind software has no telemetry of any kind — not opt-in, not anonymous, none. It makes zero network calls of its own; the only network traffic in your workflow is what your AI agent sends to its own model provider, which NeuralMind minimizes but does not control. Payment card data never touches our systems — it is handled entirely by Stripe.
Data We Collect
- •From the open-source software: nothing. There is no telemetry mechanism in the product.
- •Team tier license data: your email address (and optional company name) when you purchase a license, the seat email addresses you add, and license metadata (tier, seats, expiry, signature hash).
- •Payment: a Stripe customer ID for reconciliation. Card data is handled entirely by Stripe (PCI-DSS Level 1) and never touches our systems.
- •License portal: IP address and user agent are recorded in audit logs when you use the license portal, for security monitoring and fraud prevention.
- •PyPI download counts (public registry data, collected by PyPI, not by us)
- •Website visitor analytics on neuralmind.uk (see Cloudflare section below)
Data Retention
We keep Team-tier data only as long as the law and license validation require:
- •Active license data: duration of the license + 3 years after expiry
- •Audit logs (with IP): 3 years after creation, then anonymized
- •Financial records (Stripe): 7 years, required for tax compliance
- •Deleted customer records: personal data anonymized immediately; financial records retained per above
GDPR & Your Rights
Because we have minimal data collection, exercising your rights is simple:
- •Right to access: for the open-source tool we hold no personal data about you at all; Team-tier customers can request a copy of their license and audit data at [email protected]
- •Right to deletion: your index is local files you control — delete your project's `.neuralmind/` directory (or run `neuralmind reset`) and it is gone completely. Team-tier customers: email [email protected] and personal data is deleted (financial records are anonymized per the retention policy above)
- •Right to portability: your local data is already in open formats (SQLite and JSON) inside your project directory
- •EU Representative: Darren Frost, Cheval-Volant LLC, Texas, USA
Cloudflare Web Analytics
Our website uses Cloudflare Web Analytics, which is privacy-first and does not set cookies or collect personal identifiers. No individual visitors are tracked. Data is aggregated and retained for 30 days. No data is sold or shared with third parties.
Cookies & Tracking
NeuralMind does not use cookies on neuralmind.uk. The Team license portal uses a single strictly-necessary session cookie for authentication — nothing else. We have no advertising pixels, no cross-site trackers, and no fingerprinting anywhere.
Third-Party Services
- •GitHub: for source code hosting and releases. GitHub's privacy policy applies.
- •PyPI: for package distribution. Python Software Foundation privacy policy applies.
- •Cloudflare: for domain, DNS, and Pages hosting. Cloudflare's privacy policy applies.
- •Stripe: payment processing for Team licenses. Card data goes directly to Stripe; Stripe's privacy policy applies.
Changes to This Policy
We may update this policy as the product evolves. Material changes will be announced on the GitHub repository and linked from this page. Last updated: July 20, 2026.
Contact
Questions about privacy or legal matters: [email protected]