Privacy Policy

Last updated: October 31, 2026. This policy explains what Mindveria collects, why, and how long it is kept.

1. What we collect

• Account data: your email address and a hashed password. Passwords are hashed with PBKDF2 and are never stored in readable form.
• Chats: your messages, the AI's answers, the model used, and token counts — stored so you can see your history and the app can keep context.
• Token ledger: purchases and per-message deductions, so balances are auditable.
• Uploads: files you attach are stored as files in object storage, never inside the database.
• Contact messages: anything you send through the Contact page.
• Session cookie: one httpOnly cookie that keeps you signed in. No advertising trackers.

2. Why we collect it

Only to operate the Service: authentication, chat history, token billing, abuse prevention, and support. We do not sell your data, and we do not use your chats for advertising.

3. AI providers and search

When you chat, your message and recent context (the last 20 messages plus a short summary — never your full history) are sent to the AI provider that powers the model you selected, and, in Research mode, your question is sent to a web-search provider. Those providers process the request under their own policies. We do not send them your email address or password.

4. How long we keep it

• Chats: automatically archived after 90 days without activity — messages are deleted and only a short summary is kept. You can also delete a chat at any time from the sidebar.
• Token ledger: kept for billing records.
• Account data: kept while your account is active; contact us to request deletion.

5. Security

Passwords are hashed, sessions use httpOnly cookies, and API keys live only on the server — never in the browser. No system is perfectly secure; if you suspect unauthorized access, change your password and contact us immediately.

6. Your rights

You can view and delete your chats in the app at any time. To request a copy of your data or deletion of your account, contact us via the Contact page or at support@example.com.

7. Changes

Material changes to this policy will be noted here with a new "Last updated" date.