Privacy policy.
We collect information needed to answer inquiries, arrange sessions and support agreed work. Use a short description and leave confidential employer or customer documents out of website forms.
1. What we collect
- Site forms. When you fill out a form on this site (an inquiry or a resource request), we collect what you type: typically your name, email, company, phone number, your answers, campaign attribution, and whether you chose to receive marketing email. Fields vary by form and are labeled when optional.
- Resource access. For the Deal Pressure Test, we require your name, work email, company, and acknowledgement of the data use described here before we provide access. We record that access was requested, that its link was opened, and, when you choose to tell us, that you finished and whether it helped. A phone number is optional and requested only if you ask to discuss your results with a person; supplying it permits contact about that request only and never authorizes marketing calls or texts. We do not receive or view individual conversations you have with a custom GPT in ChatGPT.
- Inquiries. Name, email, interest, optional organization, your description and any event details are saved for Nick to review. An inquiry does not subscribe you to marketing. No automated inquiry email is sent.
- Checkout data. Purchases run through Stripe. We receive your name, email, billing address, what you bought, and payment status. Your card number goes to Stripe, never to us.
- Acceptance records. When you accept our purchase terms and complete the data-ownership attestation, we store that acceptance with your email and a timestamp.
- Intake submissions. To build your workspace, you send us intake material: answers about your role, methodology, and voice, and any files you choose to upload. This is the most sensitive thing we hold, and sections 4 and 6 cover how we limit and retire it.
- Support email. If you email us, we keep the thread so we can help you.
- Site analytics. We use Vercel's privacy-focused analytics to count visits and page views. We do not run advertising trackers.
2. What we use it for
We use personal data to provide and administer requested resources, sell, build, deliver, and maintain workspaces, measure our resource funnel, and support you afterward. We do not use your data for advertising. We send operational email about your order and, if you separately opt in, occasional product email you can leave with one click. Supplying a phone number in a Deal Pressure Test help request does not opt you into marketing calls or texts.
3. Who processes it
We use a short list of service providers. Each sees only what its job requires.
| Processor | What it does for us |
|---|---|
| Anthropic | Runs Claude for build and maintenance work and processes Cowork sessions through the account and plan used for that session. Anthropic's handling is governed by that account's plan, settings, and terms. |
| Calendly | Session scheduling, short intake, meeting information, cancellations and rescheduling when booking is activated. Calendly and Stripe handle paid session confirmation. Booking data is not forwarded in return-page URLs. |
| Stripe | Payment processing and checkout. Holds your card details; we never see them. |
| Dropbox | Optional buyer-owned workspace storage. HUMN has no access by default. If you choose maintenance sharing, it is limited to the System subfolder described in section 4. |
| Supabase | Stores inquiries, existing intake submissions, historical readiness-check results, resource requests, consent history, access events, and terms-acceptance records. |
| OpenAI | Runs linked custom GPTs inside the user's ChatGPT account. HUMN Minds cannot view individual user conversations with its GPTs. OpenAI's handling depends on the user's account, plan, settings, and terms. |
| GitHub | Private, access-controlled internal build records and checked workspace copies. Buyer material is never placed in a public repository. |
| Resend | Sends transactional email and marketing email you chose to receive, and records delivery or suppression state. |
| Vercel | Hosts this website and provides its analytics. |
| Google Workspace | Our email and internal documents, including support threads you send us. |
If this list changes, we update this page before the new processor touches client data.
4. The folder-access model
Your workspace is a local folder you own. You control where it lives and who can reach it. Your own Dropbox or another sync service is optional.
- HUMN has no standing access to your workspace by default.
- If you choose maintenance sharing, it is limited to the System subfolder. Your deal data, transcripts, and client files remain outside that share.
- For a refresh, you can grant broader access. It is scoped to the job, time-boxed, logged, and revoked when the refresh is done.
- Material you submit during intake passes through the processors listed above. You can keep heavier CRM exports or email history out of intake and load them directly into your folder during setup.
5. What we never do
- We never sell your data. Not to brokers, not to "partners", not to anyone.
- HUMN Minds does not sell or submit your data to train public AI models. A third-party AI provider's handling depends on the account, plan, settings, and terms used for that session.
- We never use one client's data for another client. Your workspace is built from your material and our own templates, nothing else.
6. Retention and deletion
Our defaults:
- Intake submissions and uploads: kept only as long as needed to build, deliver, and support your purchase or maintenance. You can ask us to delete them at any time, except for records we are legally required to keep.
- Internal build copies and quality records: kept while needed to support your purchase or maintenance, then deleted on request except for records we are legally required to keep.
- Readiness-check and terms-acceptance records: kept for as long as we could need to prove the terms of your purchase.
- Payment records: kept as required by tax and accounting law.
- Marketing contacts and marketing-consent history: kept while you are subscribed. After you leave, we retain the minimum suppression and consent record needed to honor your choice and prove it.
- Access-only resource requests, required access acknowledgements, and access events: kept while needed to operate and measure the resource, then deleted on request except for records we are legally required to keep.
- Support email: kept while you are a client, deleted on request.
Deletion on request: email hello@humnminds.ai and we will delete the personal data we hold about you, except records we are legally required to keep. We confirm when it is done. Your own workspace is untouched by any of this; it is yours and lives in your storage.
7. Your choices and rights
- Ask us what we hold about you, and we will tell you.
- Ask us to correct it or delete it.
- Leave any marketing email with one click.
- If you chose maintenance sharing, remove our System-subfolder access at any time. Updates stop; your ownership does not.
8. Contact
TGAI LLC dba HUMN Minds, Washington, USA.
Email: hello@humnminds.ai
If we change this policy, we update the date at the top and keep prior versions available on request.
HUMN