Privacy Policy

MindCopy collects what you saved on other services and shows it back to you in one private library. This page explains what we hold, why, and how you get rid of it.

What We Store

Your account: the email address you sign in with. If you sign in with Google, also the name and profile picture Google shares with us.

Your saves: for each item, its link, title, text, author name, timestamps, public numbers such as views and likes when the service gives them, and the address of its preview image. Covers of X posts are copied into our own storage so they keep showing. Every other image, and every video, loads from the service it came from, or not at all.

What you add yourself: notes, collections, reminders, and what you watched or opened.

Your connections: the access tokens that let us read your saves. They sit in a separate table that only our server can read. They never reach your browser or phone.

Keys you make for your own AI tools: we keep only a fingerprint of each key, never the key itself. A tool you connect with a key can read your library, because you asked it to. Revoke the key and it stops at once.

Your Google and YouTube Data

Sign in with Google: we receive your email address, name and profile picture, and use them only to create your account and show you who is signed in.

Connect YouTube (only if you choose to): we ask Google for read-only access to your YouTube account. We read the videos you liked and the playlists you made, with each video's title, description, channel, preview image address, length and public numbers, plus your channel's name. MindCopy uses YouTube API Services, and by connecting YouTube you agree to the YouTube Terms of Service. How Google itself handles your data is in the Google Privacy Policy.

How we use it: only to show those videos in your own library, to let you search them, to sort them into your collections and to translate them when you open one in another language. We never post, like, subscribe or change anything on YouTube. We refresh what we keep at least every 30 days, and a video that is gone from YouTube is removed here too.

Who else sees it: nobody else can see your library. Parts of the text go to the AI services listed below, only to do the work described there. We never sell it, never use it for ads, and no person reads it unless you ask us for help with a specific save.

How it goes away: disconnect YouTube on the Connected Accounts page and we revoke our access at Google immediately, and the titles, descriptions and covers of your YouTube saves are deleted within 7 days. You can also remove MindCopy's access on your Google account's permissions page. We notice at the next sync and delete the same data within 7 days. Your links, notes and collections stay, and reconnecting brings the rest back.

MindCopy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where It Lives

In a Supabase project hosted in Frankfurt, Germany. Every row carries your user id and the database refuses to return another person's rows. The website is served by Cloudflare, and sign-in emails are sent through Resend.

What Leaves Our System

When you connect an account, we ask that service for your saved items and nothing else. We never post, like, follow, comment or change anything on your behalf.

Where a Machine Reads Your Saves

Some of what you keep has no title of its own. A post on X is just text. So that a card can be read at a glance, MindCopy sends the text of that save to an AI model and gets a short title back. The same happens when we sort a save into one of your collections, when we name a new collection, when we notice that 2 of your collection names mean the same thing, and when you open a save written in another language. To find saves and notes by meaning, their text is also turned into numbers (vectors).

Who does it: GLM-5.3-Flash through OpenRouter, or straight from Z.ai when OpenRouter is busy, and Voyage for the vectors. Through OpenRouter we only use providers that do not keep or train on what they are sent, Z.ai states the same, and our Voyage account is opted out of training.

What goes: the text, title, author name and link of the save, and your collection names. Your notes go only to Voyage, for search by meaning. What does not go: your email address, your tokens, images, videos, or anything else about you.

We do not sell your data, we do not share it with advertisers, and nothing in your library is public.

How Long We Keep It

A save stays until you remove it. Removing moves it to Trash, where you can bring it back. Delete it forever, or empty Trash, and its content is cleared, leaving an empty marker so the next sync does not bring it back.

Disconnect an account and we stop syncing it and delete its tokens. Ask us to delete your account and everything goes, tokens included.

Cookies

Only what keeps you signed in. No advertising or tracking cookies.

Contact

Write to hello@mindcopy.me for access, correction or deletion of your data.