Privacy Policy

1. Information we collect

We collect the information you provide when you create an account (name, email), the configuration of your organization, and the content of the requests you make to mindZolt.

• Account information: name, email address, and authentication details.
• Salesforce connection: encrypted OAuth tokens and your org’s instance URL.
• Usage data: the questions you ask and changes you request, used to provide and improve the service.

2. How we use Salesforce data

mindZolt accesses your Salesforce org only to perform the actions you request — running read-only queries, describing metadata, and deploying changes you have explicitly approved. We do not sell your data, and we do not use the contents of your Salesforce org to train third-party models.

3. How we store and protect data

Salesforce access and refresh tokens are encrypted with AES-256-GCM before being stored. All data is transmitted over TLS. We apply least-privilege access controls and row-level security so each organization can access only its own data.

4. Subprocessors

We rely on a small set of trusted infrastructure providers, including Supabase (database and authentication), Vercel (hosting), Anthropic (AI processing of your requests), Stripe (billing), and Resend (email). Each processes data only as needed to deliver the service.

5. Data retention

We retain your account and usage data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. Disconnecting Salesforce immediately removes your stored tokens.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information. To exercise these rights, contact privacy@mindzolt.ai.

7. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or an in-app notice before they take effect.