← Mindhalo

Privacy Policy

Last updated: May 23, 2026

1. Overview

Mindhalo ("we", "us", "our") is a content intelligence platform that helps creators and businesses manage their social media presence, analyze content performance, and engage with their audience. This Privacy Policy describes how we collect, use, store, and protect your information when you use our platform at mindhalo.io and any associated services.

2. Information We Collect

Account Information

When you create a Mindhalo account, we collect your name, email address, and a hashed password. We never store passwords in plain text.

Instagram & Facebook Data

When you connect your Instagram account via Meta OAuth, we request the following permissions:

  • instagram_basic — your Instagram profile information (username, bio, profile picture, account type)
  • instagram_manage_insights — engagement metrics and analytics for your content
  • instagram_manage_comments — comments on your posts, to help you monitor and respond to engagement
  • pages_show_list — the Facebook Pages linked to your Instagram account
  • pages_read_engagement — engagement data on linked Pages

We only access data you explicitly authorize. We do not post content, send messages, or take any action on your behalf unless you initiate it within Mindhalo.

YouTube Data

If you connect a YouTube channel, we access public video metadata, view counts, and engagement metrics via the YouTube Data API. We comply with the YouTube API Services Terms of Service and the Google Privacy Policy. You can revoke access at any time via Google Security Settings.

Public Form Submissions

If you submit a contact form, consultation request, readiness quiz, or claim a freebie on a Mindhalo-powered page, we collect the information you provide (typically name and email).

Usage Data

We collect basic usage data such as pages visited, features used, and timestamps to improve the platform. We do not use third-party advertising cookies or cross-site tracking pixels.

3. How We Use Your Data

  • Display your content analytics and engagement metrics in your dashboard
  • Generate AI-powered content insights, reply suggestions, and performance analysis
  • Manage and organize your audience contacts
  • Deliver freebies and digital products you opt in to receive
  • Send transactional emails (account verification, password resets, freebie delivery)
  • Improve our platform and fix bugs

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Third-Party Services

We use the following third-party services to operate Mindhalo:

  • Meta Platform (Instagram & Facebook APIs) — to access your authorized Instagram data. Governed by Meta's Privacy Policy.
  • YouTube Data API — to access your authorized YouTube data. Governed by Google's Privacy Policy.
  • Anthropic (Claude API) — content you analyze may be sent to Anthropic's Claude API for AI-powered features (content analysis, reply suggestions, performance insights). Anthropic processes this data per their Privacy Policy and does not use API inputs to train models. No data is retained by Anthropic after processing.
  • Resend — transactional email delivery (freebie delivery, account notifications).
  • Supabase — database hosting and data storage.
  • Vercel — application hosting.

We do not share your Instagram or Facebook data with any third parties other than as described above, and only to the extent necessary to provide the Mindhalo service.

5. Data Storage & Security

Your data is stored in encrypted databases with access restricted to authorized services only. We use:

  • TLS encryption for all data in transit
  • Encrypted-at-rest database storage
  • Hashed passwords (bcrypt)
  • Encrypted storage for OAuth access tokens
  • Rate limiting on public endpoints to prevent abuse

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at [email protected].

Upon account deletion, we will:

  • Delete your account credentials and profile
  • Delete all stored Instagram and YouTube data associated with your account
  • Revoke all OAuth tokens
  • Remove stored media and assets
  • Purge audience and contact data linked to your account

Deletion is completed within 30 days of the request. Some data may be retained in encrypted backups for up to 90 days before automatic purge.

Meta Data Deletion

In compliance with Meta Platform requirements, we support a data deletion callback. When you remove Mindhalo from your Facebook or Instagram settings, we receive a notification and delete all data associated with your account within 30 days. You can also initiate deletion directly by contacting us at [email protected].

7. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your data (see Section 6)
  • Portability — request your data in a machine-readable format
  • Revoke consent — disconnect your Instagram or YouTube accounts at any time through your dashboard settings, or revoke access directly via Meta or Google's settings pages

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Children’s Privacy

Mindhalo is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected data from a person under 18, we will delete it promptly.

9. Cookies & Tracking

Mindhalo uses essential cookies only — specifically, a session cookie to keep you signed in. We do not use advertising cookies, tracking pixels, or third-party analytics services that profile users across websites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice on our website. Your continued use of Mindhalo after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us: