Privacy Policy

We collect data in the following contexts:

• Waitlist registration: Email address, country of residence, and your referral source when you join the MindPilot for Students waitlist.
• Demo requests: Name, school name, role, contact email, phone number, and any notes submitted through the request-a-demo form.
• Resource downloads: Email address, role, school size, primary challenge, and how you heard about us — collected when you request a free guide.
• Cookie consent: A simple flag stored in your browser indicating whether you have accepted or declined cookies. No tracking data is stored.
• Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps. This data is used solely for security and uptime monitoring.

We collect data only for specific, legitimate purposes:

• To manage and communicate with our waitlist and pilot partners
• To respond to demo requests and schedule consultations
• To deliver resources to people who request them
• To understand our audience so we can build more relevant products
• To maintain the security and performance of our website

We do not sell your data. We do not use advertising trackers. We do not build advertising profiles.

Personal data is stored in Upstash (a Redis-compatible cloud database) hosted on servers in the United States. Data transmitted between your browser and our servers is encrypted using TLS. We access stored data only through authenticated, server-side API routes — your data is never exposed client-side or through public endpoints.

We use Resend to send transactional emails (confirmations, resource delivery). Resend receives only the email address necessary to deliver the message.

We retain personal data for as long as it is relevant to its original purpose. Specifically:

• Waitlist entries are retained until MindPilot for Students launches and the program is completed.
• Demo request data is retained for 12 months or until a relationship is established, whichever comes first.
• Resource request data is retained for 12 months for internal product research purposes.

We use a single functional cookie to remember your cookie consent preference. This cookie does not track your activity, store personal data, or transmit information to third parties. It expires after 12 months.

We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for any processing based on consent
• Object to processing where we rely on legitimate interests

To exercise any of these rights, email us at privacy@mindpilotinfra.com. We will respond within 14 business days.

We use the following third-party services, each with their own privacy policies:

• Upstash: Database storage — upstash.com/privacy
• Resend: Transactional email delivery — resend.com/privacy
• Vercel: Website hosting and edge delivery — vercel.com/legal/privacy-policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We will not notify you by email of routine changes, but material changes that affect your rights will be communicated directly if we hold your contact details.

If you have questions about this policy or how we handle your data, contact us at privacy@mindpilotinfra.com.