Privacy Policy — URLmind

1. Introduction

URLmind ("we", "us", or "our") operates the URLmind API and dashboard available at urlmind.com. This Privacy Policy explains how we collect, use, and protect information about you when you use our service.

By using URLmind, you agree to the collection and use of information as described in this policy.

2. Information we collect

Account information

Your email address — provided when you sign in via magic link

Usage data

URLs you submit for research
Company profiles generated on your behalf
API requests made (endpoint, timestamp, status code)
Credits consumed and plan information
Export history (format, timestamp)

Technical data

IP address (used for rate limiting and abuse prevention)
Browser and device information (standard HTTP headers)

We do not collect payment card details — these are handled entirely by Stripe.

3. How we use your information

To deliver the service — running research jobs, returning company profiles, generating exports
To manage your account and plan
To process payments via Stripe
To enforce rate limits and prevent abuse
To send transactional emails (research completion, validation links)
To improve the service through aggregate, anonymized usage analysis

We do not sell your data to third parties. We do not use your data to train AI models.

4. Third-party services

URLmind uses the following third-party services to operate. Each has its own privacy policy.

Supabase — Database and authentication supabase.com/privacy
Stripe — Payment processing stripe.com/privacy
Anthropic — AI data extraction (Claude API) anthropic.com/privacy
Google Places API — Business data enrichment policies.google.com/privacy
Vercel — Hosting and edge network vercel.com/legal/privacy-policy
Inngest — Background job orchestration inngest.com/privacy

URLs submitted for research are crawled by our servers. Public web content is fetched and processed by Anthropic's API for extraction purposes only.

5. Data retention

Account data — retained while your account is active
Research jobs and company profiles — retained for 12 months after last activity
API request logs — retained for 90 days

You may request deletion of your account and associated data at any time by contacting us.

6. Your rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Export your company profiles at any time via the API

To exercise these rights, contact us at info@urlmind.com.

7. Cookies

URLmind uses a single session cookie set by Supabase to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics scripts.

8. Security

We use industry-standard measures to protect your data: encrypted connections (HTTPS), hashed API keys, row-level security on our database, and signed webhook payloads. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. If changes are significant, we will notify you by email. Continued use of URLmind after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at info@urlmind.com.