Privacy / v0.2

Collect less. Keep review data private.

This policy covers the public submission workflow and its editorial notification path.

Data collected

Tool submissions collect the organization and product information supplied, evidence links, the submitter’s name, work email, relationship to the tool, and optional notes. The server stores a one-way hashed request fingerprint and a truncated user-agent string for abuse prevention.

Purpose

Data is used to verify evidence, contact the submitter about the review, prevent automated abuse, notify the editorial team, and maintain an editorial audit trail. Contact information is not published with a profile.

Access and retention

Submission records are restricted to the moderation workflow. Declined or duplicate submissions should be deleted or minimized after the review and dispute window; accepted evidence may be retained as part of the editorial record.

Processors and contact

Cloudflare processes site requests, Supabase stores the private moderation queue, and Resend delivers the submission alert to the editorial inbox. Privacy questions can be sent to hello@getminds.ai.