Privacy Policy

Scope

This Privacy Policy governs the processing of personal data by Nebulae, a company registered with the Belgian National Bank and Company Registry under enterprise number 0667.958.628, with registered offices at Bremenhulstraat 18, 9260 Serskamp, Belgium (hereinafter "Nebulae", "we", "us" or "our"), in connection with all products and services offered under the Parmind brand. This includes the Parmind web application (parmind.app), the native macOS application, the native iOS and Android applications, the Parmind browser extension, and any Parmind landing or marketing pages we operate (collectively, the "Service").

"You" or "User" refers to the individual accessing or using the Service. By creating an account and using the Service, you acknowledge and consent to the collection and processing of personal data as described in this Policy.

A. Data we collect

1. Account and profile information

To create and maintain your account, we collect basic profile information such as your name and email address. This data is used to operate the Service and provide a personalised experience. It is associated with your account and retained for as long as the account remains active.

2. User-generated content

The primary data we process consists of content you choose to add to Parmind: notes, mind maps, uploaded files (including images, videos, and PDFs), links, and any other material stored within the Service. All content is stored in data centres located in the European Union (Frankfurt) and is encrypted at rest using industry-standard measures. You retain ownership of your data at all times. We process this content solely to provide the Service, including search, organisational features, and AI-assisted functionality.

Parmind is built on a cloud-based architecture, which enables us to deliver powerful search and AI capabilities. We apply encryption at rest, strict access controls, and continue to develop additional safeguards to protect your data.

3. Usage and analytics data

We collect usage information to understand how the Service is used and to inform product improvements. Analytics collection is optional and users may opt out where that option is made available. We may use cookies and similar technologies on our marketing pages; where required by applicable law, we will seek your consent and provide appropriate controls via a cookie management interface.

4. Performance and error data

We collect technical data relating to application performance and errors — such as crash reports and diagnostic logs — in order to identify and resolve issues. This data is generally not directly associated with your identity, but may contain technical details about your device or session.

B. Third-party data processors

We engage third-party service providers to operate and improve the Service. These providers process data on our behalf and are required to handle it in accordance with applicable data protection legislation. Our primary processors include:

• Auth0 — Authentication and identity management.
• OpenAI, Google, and other AI providers — When you use AI features (such as asking Parmenides a question), relevant portions of your notes and your query may be transmitted to third-party AI model providers to generate a response. Only content pertinent to your request is shared. This content may include personal or sensitive information if such information has been stored in your notes. We may engage additional or alternative AI and observability providers over time as we operate and develop the Service.
• Amplitude — In-app usage analytics (opt-out available).
• Hotjar — Anonymous session recordings on our marketing pages.
• Sentry — Application performance monitoring and error diagnostics.

Each processor's use of data is governed by its own privacy policies and data processing terms. We select processors that meet appropriate data protection and security standards.

C. Your rights

Under applicable data protection legislation, including the General Data Protection Regulation (GDPR), you are entitled to exercise the following rights in relation to your personal data. Requests may be submitted to [email protected]. We aim to respond within three (3) working days. Depending on the nature and complexity of the request, a full response may take up to thirty (30) days. Where a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee.

• Withdrawal of consent — You may withdraw your consent at any time in respect of processing activities for which consent has been obtained.
• Right of access — You may request a copy of the personal data we hold about you, together with an explanation of how and why it is processed.
• Right of rectification — You may request the correction or completion of inaccurate or incomplete personal data.
• Right of erasure — You may request the deletion of your personal data and account. We do not delete user data unless explicitly requested to do so. Deletion requests may be submitted to [email protected].
• Right to data portability — You may request your personal data in a structured, commonly used, machine-readable format. We are developing a self-service data export feature; in the meantime, requests may be submitted to [email protected].

D. Data retention and security

Personal data is retained for as long as your account is active and as necessary to fulfil the purposes described in this Policy or to comply with applicable legal obligations. We do not delete account or content data without an explicit request from the User.

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration, and destruction.

E. Changes to this Policy and contact

We may update this Privacy Policy periodically. The "Last updated" date at the top of this page will be revised accordingly. Where changes are material, we will make reasonable efforts to notify you. Continued use of the Service following an update constitutes acceptance of the revised Policy, to the extent permitted by applicable law.

For any questions or requests relating to this Privacy Policy or the processing of your personal data, please contact us at [email protected].