Privacy Policy
Last updated: August 2026
1.Data we collect
We collect: email address, display name (provided by you), authentication provider data, research session data (AI interactions you choose to save), subscription and payment metadata, and anonymized usage analytics. We do not collect sensitive personal data beyond what is necessary for platform functionality.
2.How we use your data
Your data is used to: authenticate your account, provide AI copilot services, track your research project progress across Minds, process payments, and improve platform performance. We do not sell your data to third parties.
3.AI and your research data
Research data you enter into AI copilots is processed by Google Vertex AI solely to generate your responses. Your research data is not used to train AI models — not ours, and Google contractually commits that Vertex AI inputs are not used to train its foundation models. Saved session data is stored in your personal Firestore record in India (Mumbai) and is accessible only to you.
4.Data security
Your data is stored in India, in Google Cloud's Mumbai region (asia-south1). It is encrypted in transit (TLS) and at rest (Google Cloud, Google-managed keys). Authentication uses Firebase Auth with industry-standard security. We implement session timeouts and cross-tab logout for account protection.
5.Data retention
Account data is retained for the duration of your account. Saved research sessions are retained until you delete them. Payment records are retained as required by Indian tax law. Upon account deletion, personal data is removed within 30 days. Any research outputs you have exported are yours to keep — they remain available to you even after your subscription ends.
6.Your rights
You have the right to: access your data, request correction, request deletion, and export your data. To exercise these rights, contact privacy@rsminds.com or visit our Data Rights portal.
8.Data Fiduciary (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023 (India), the Data Fiduciary responsible for processing your personal data is:
- Entity: Yogatraya AIResearch LLP
- Registered address: [Address — to be updated by owner]
- Contact: legal@rsminds.com
9.Grievance Officer
As required under DPDP §10, we have appointed a Grievance Officer to address concerns about the processing of your personal data:
- Name: Rajesh SK
- Email: grievance@rsminds.com
- Response SLA: 30 days from receipt of complaint, per DPDP §10
10.Cross-border data transfers
Your account data and saved research sessions are stored in India, in Google Cloud's Mumbai region (asia-south1)— your stored data does not leave India. AI features are processed by Google Vertex AI via Google's globalendpoint solely to generate your results; these AI requests may be processed outside India under Google Cloud's Data Processing Addendum. Google Cloud's standard data processing agreements apply.
11.Withdrawing consent
You may withdraw consent for data processing or request deletion of your personal data at any time via our Data Rights portal. Withdrawal of consent will result in loss of access to RSMinds services. We will process your request within 30 days per GDPR Art 12 and DPDP §13.
12.Children's data (DPDP §9)
Under DPDP §9, we require verifiable consent for users under 18. Sign-up requires attestation that you are 18 years of age or older. If we discover an account belonging to a user under 18 without parental consent, we will delete it within 7 days of discovery and notify the registered email address.