SECURITY
Security
Here is what we actually do to protect your data — nothing more, nothing less.
Last updated: September 2026
Transport and storage
- The website and APIs are served over HTTPS
- Data is stored in a database hosted by Supabase, which encrypts data at rest with AES-256
- Row-level security is enabled on user data tables: each account can only read and write its own data
Who can see your mind maps
- Your mind maps are private by default
- You decide when a share link is on or off; turning it off disables the old link right away
- You can delete any mind map at any time, or export it as PNG, Markdown or XMind
- To close your account and delete all your data, email support@mindlm.io
AI processing
- When you generate a mind map, the content you submit is sent to third-party AI model services for processing
- MindLM never uses your content to train AI models
Payments
- Payments are handled by Stripe; MindLM never sees or stores your card number
Contact
To report a security issue or ask a question, email support@mindlm.io.
For security concerns or to report vulnerabilities, contact support@mindlm.io