Privacy Policy

Effective: July 31, 2026. This policy replaces the version dated August 14, 2023.

Undermind AI, Inc. (“Undermind,” “we,” “us”) provides an AI-powered research platform. This Privacy Policy describes how we collect, use, and disclose personal data when you use our websites at www.undermind.ai and app.undermind.ai, our browser extensions, integrations, and agent or programmatic interfaces, and related services (together, the “Services”).

How this policy applies to you. Undermind serves both individual researchers and organizations:

Enterprise and organizational deployments. If your organization has a separate written agreement with us (an enterprise subscription agreement or order form), the content and data we process on the organization’s behalf are governed by that agreement, not by this policy. Enterprise agreements are tailored to each organization’s requirements and typically include enhanced commitments such as segregated data handling and dedicated security, confidentiality, and data-use terms; the specific protections for each organization are those set out in its agreement. This policy still describes the basic account information we handle as a business (for example, registration details).
Individual use. If you use Undermind under your own account, this policy describes how we collect, use, protect, and disclose your personal data, and the rights and choices available to you.

Personal data we collect

Data you provide:

Account information — name, email address, password, and, if you subscribe to a paid plan, billing details. Payments are processed by our payment processor, Stripe; we do not store full payment card numbers.
User Content — the content you submit to or use with the Services: search queries, prompts, uploaded documents and files, and content retrieved at your direction through our browser extension, integrations, agent interfaces, or third-party agents you connect, using your own accounts, subscriptions, or institutional access.
Communications — the contents of messages when you contact us (for example, support requests) and associated contact details.
Other information you choose to provide — for example, survey responses or event registrations.

Data collected automatically:

Log and usage data — IP address, browser type and settings, dates and times of access, features used, actions taken, and interactions with the Services.
Device information — device type, operating system, and browser.
Approximate location — the general area of your device inferred from its IP address, used for security and service operation.
Cookies and similar technologies — we use essential cookies to operate the Services (for example, keeping you signed in) and analytics cookies to understand usage. Our Services do not currently respond to browser “Do Not Track” signals.

How we use personal data

To provide, operate, maintain, and secure the Services;
To improve and develop the Services, including developing and improving our search, analysis, and AI features;
To communicate with you about the Services, including service updates and, with your consent where required, marketing (you can opt out at any time);
To process payments and manage subscriptions;
To prevent fraud, abuse, and security threats; and
To comply with legal obligations and protect the rights, safety, and property of Undermind, our users, and others; and
For other purposes at your direction, with your consent, or as otherwise permitted by law.

We may aggregate or de-identify personal data so it no longer identifies you and use or disclose that information for any lawful purpose, provided that we will not attempt to re-identify it (except as required by law) and we require any recipients to commit to the same.

How we disclose personal data

Service providers — vendors that support the Services under our instructions, including cloud hosting, AI model providers, payment processing, analytics, email, and customer-support tooling.
Organization administrators — if you use the Services as part of a team or organization account, or you registered with an email address associated with an organization that later purchases a plan, that organization’s administrators may receive information about your account and use of the Services (including account details and usage information), and your account may be moved under the organization’s plan and administration, as described in our Terms of Use.
Publicity — as described in our Terms of Use, we may identify you or your organization as a customer on our site and in customer lists; you may opt out by emailing support@undermind.ai.
Third parties you connect or direct — if you connect third-party agents, integrations, or applications to your account (for example, through our agent or programmatic interfaces), or otherwise direct us to disclose information, we disclose it as needed to provide what you requested; the recipient’s handling of that information is governed by its own terms and policies.
Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, personal data may be disclosed during diligence and transferred to a successor.
Legal reasons — where required by law or legal process, or where reasonably necessary to protect the rights, safety, or property of Undermind, our users, or the public, or to enforce our Terms of Use.

We do not sell personal data, and we do not share personal data for cross-context behavioral advertising or process it for targeted advertising.

Retention

We retain personal data for as long as needed to provide the Services and for legitimate business purposes such as security, dispute resolution, and legal compliance. Retention periods depend on the type of data, its sensitivity, and our purpose for processing it.

Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You can exercise these rights by emailing support@undermind.ai (or, where available, through your account settings). We will verify your identity before acting on requests; authorized agents may submit requests on your behalf with proof of authorization; and, where applicable law provides, you may appeal a decision by replying to our response. You will not be discriminated against for exercising your rights. You may also lodge a complaint with your local data protection authority.

United States state privacy disclosures

For residents of states with comprehensive privacy laws: the categories of personal data we collect are identified above (identifiers, commercial information, internet activity, approximate geolocation, and the contents of User Content and communications), collected from you and your devices for the purposes described above, and disclosed to the categories of recipients described above. We do not sell personal data or share it for cross-context behavioral advertising, and we do not process sensitive personal data to infer characteristics about consumers.

International data transfers

We process and store personal data in the United States. If you use the Services from the EEA, the United Kingdom, or Switzerland, we transfer personal data to the United States and other jurisdictions in reliance on adequacy decisions where available and otherwise on Standard Contractual Clauses (and the UK Addendum). For a copy of the relevant safeguards, contact support@undermind.ai.

Lawful bases (EEA/UK users): we process personal data as necessary to perform our contract with you (providing the Services), for our legitimate interests (improving and securing the Services, communicating with users) balanced against your rights, to comply with legal obligations, and with your consent where we ask for it (which you may withdraw at any time).

Children

The Services are not directed to children and are not intended for anyone under 18, consistent with our Terms of Use. We do not knowingly collect personal data from children under 13; if you believe a child has provided us personal data, contact support@undermind.ai and we will delete it.

Security

We use technical, administrative, and organizational measures designed to protect personal data, including encryption in transit and at rest and access controls. No system is completely secure; please use a strong, unique password and contact us immediately at support@undermind.ai if you suspect unauthorized access to your account.

Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date and, where required by applicable law, provide additional notice.

Contact

Questions or requests: support@undermind.ai

Undermind AI, Inc., 1111B South Governors Avenue, STE 3611, Dover, DE 19904