Privacy Policy

§ 01 Introduction

This Privacy Policy describes how Invisible Minds (“Invisible Minds,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit invisibleminds.ai or any subdomain operated by us (including product experiences such as Your Zero Mind), create an account, take an assessment, subscribe to a product, or otherwise interact with our services (collectively, the “Services”).

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

§ 02 Who We Are

Invisible Minds is operated by Invisible Minds LLC, located at 11931 Montgomery Road, Cincinnati, OH 45249. For any questions about this Privacy Policy or your personal information, contact us at privacy@invisibleminds.ai.

Our co-founders are Mitch Van Dusen and Dan Hackett.

§ 03 Information We Collect

3.1 Information You Provide Directly

• Account information: your name, email address, password (stored as a salted hash), and any profile details you add.
• Payment information: when you subscribe to a paid product, payment details are collected and processed by our payment processor, Stripe. We do not store full card numbers on our servers; we store only limited identifiers (such as the last four digits and card brand) returned to us by Stripe.
• Assessment and product responses: when you use an assessment or a recurring practice product, you may share reflections, intentions, beliefs, observations, and other free-text content. This content is stored and used to generate your results and ongoing experience.
• Communications: if you email us, reply to a product email, or otherwise contact us, we retain the content of those communications and your contact details.

3.2 Information Collected Automatically

• Usage data: pages visited, features used, timestamps, referring URLs, and similar information.
• Device and connection data: IP address, browser type and version, operating system, device identifiers, and approximate location derived from IP.
• Cookies and similar technologies: described in Section 9 below.

3.3 Information From Third Parties

• Authentication providers: if you sign in via a third-party provider (for example, Google), we receive basic profile information from that provider as authorized by you.
• Payment processor: we receive transaction metadata from Stripe (such as subscription status, renewal dates, and payment outcomes).

§ 04 How We Use Your Information

We use personal information to:

• Provide, operate, and maintain the Services, including creating and managing your account, delivering assessments, generating personalized results, and providing recurring product experiences.
• Process subscriptions, renewals, cancellations, and refunds.
• Send transactional emails (such as account confirmations, receipts, password resets, and product-critical notifications) and, where permitted, marketing communications you can unsubscribe from at any time.
• Improve the Services, including analyzing usage patterns and debugging errors.
• Comply with legal obligations and enforce our Terms of Service.
• Protect the security and integrity of the Services and our users.

§ 05 AI Processing and Automated Content Generation

Several of our products use artificial intelligence — including large language models (“LLMs”) and embedding models — to generate personalized content from your inputs and to retrieve relevant material from our expert knowledge bases. This section describes what that processing does, who performs it, and how it relates to your rights.

5.1 What AI Does in the Services

Our products use AI to perform several categories of processing, which vary by product:

• Synthesis. Extracting patterns, observations, or summaries from free-text responses you provide during assessments, reflections, or other conversational experiences.
• Conversational response generation. Producing real-time replies during interactive product experiences, including assessments, reflective sessions, and coaching conversations.
• Personalized written content. Generating letters, summaries, reflective entries, and other written material that is informed by your prior inputs and activity.
• Semantic retrieval. Processing your inputs into numerical representations (“embeddings”) so that we can retrieve relevant material from our expert knowledge bases.

The specific combination of these operations depends on the product you are using and may change as we introduce new products or experiences. Material changes to how AI processes your inputs will be reflected in this Privacy Policy.

5.2 Who Processes Your Inputs

Your inputs are processed by third-party AI providers we rely on to operate the Services. At the time of the last update to this policy, our primary providers are:

• Anthropic — the primary LLM provider for synthesis, conversational response generation, and personalized written content.
• Voyage AI — the provider we use to generate embeddings for semantic retrieval.

See Section 6 for the current and complete list of subprocessors. We may add, remove, or replace providers over time; material changes will be reflected in this Privacy Policy.

5.3 How Your Inputs Are Used and Retained by Providers

We do not use your personal data to train foundation models. Under our agreements with our LLM and embedding providers, your inputs are not used to train their models.

Our providers handle your inputs according to their own data retention policies. At the time of the last update to this policy:

• Anthropic automatically deletes inputs and outputs sent to its commercial API within 30 days of receipt or generation, except where retention is required to investigate violations of its Usage Policy (in which case retention may extend up to 2 years) or where required by law.
• Voyage AI, under our zero-data-retention arrangement, does not store your inputs after the embedding is returned, except where required by law.

Your inputs and the AI-generated outputs derived from them are retained by Invisible Minds according to Section 7 (Data Retention), including the 90-day account-deletion recovery window. When you delete your account, your inputs and AI-generated outputs are deleted on that schedule.

5.4 Automated Decision-Making

We do not use AI to make decisions that produce legal or similarly significant effects about you. We do not use AI to determine eligibility for credit, employment, housing, insurance, education, or access to essential goods or services, and we do not use AI to make any decision that alters your legal rights or has a comparable impact on you.

The outputs our AI generates — patterns, observations, reflections, letters, and similar content — are reflective and educational. They are not decisions, determinations, or assessments of the kind that trigger automated decision-making rights under the EU General Data Protection Regulation, the California Consumer Privacy Act, or comparable laws.

If at any point we introduce AI processing that would produce legal or similarly significant effects about you, we will update this policy, notify affected users, and provide any rights (including the right to human review) required by applicable law.

5.5 Algorithmic Limitations and Your Choice

AI-generated outputs are produced algorithmically. They may contain errors, omissions, or interpretations that are inaccurate for your specific situation, and they may reflect patterns or assumptions that do not apply to you. AI-generated outputs are not professional advice, medical advice, legal advice, or financial advice. See our Terms of Service for further detail.

The Services are built on AI. There is no non-AI version of our products, and no setting that disables AI processing. If you do not want your inputs processed by the providers described in Section 5.2, the Services will not work for you, and we encourage you to not use them.

We also maintain internal knowledge graphs that store structured representations of expert methodologies. Your individual inputs are not added to these expert knowledge graphs.

§ 06 How We Share Your Information

We share personal information only as described below.

6.1 Service Providers (Subprocessors)

We rely on the following third parties to operate the Services. Each has its own privacy practices:

We may update this list from time to time. Material changes to subprocessors will be reflected in this Privacy Policy.

6.2 Legal and Safety

We may disclose personal information if we reasonably believe disclosure is necessary to (a) comply with a legal obligation, subpoena, or court order; (b) protect the rights, property, or safety of Invisible Minds, our users, or others; or (c) investigate fraud or security incidents.

6.3 Business Transfers

If Invisible Minds is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected users of any such transfer and any material changes to how their information is handled.

6.4 With Your Consent

We may share information with other parties when you direct us to or otherwise consent to the sharing.

§ 07 Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services. Specifically:

• Account and profile data: retained while your account is active, and for up to 90 days after deletion to allow for account recovery and fraud investigation.
• Assessment and product content: retained while your account is active so that your experience remains continuous. Deleted when you delete your account or specific entries, subject to the 90-day recovery window above.
• Billing records: retained for up to 7 years after the last transaction to comply with tax and financial recordkeeping laws.
• Support communications: retained for up to 3 years after the last correspondence.
• Backups: deleted information may persist in encrypted backups for up to 60 days before being overwritten.

§ 08 Your Rights

Depending on where you live, you may have some or all of the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to legal exceptions.
• Portability: request a copy of certain information in a structured, commonly used format.
• Restriction and objection: request that we limit or stop certain processing.
• Withdraw consent: where processing is based on consent, withdraw consent at any time without affecting the lawfulness of prior processing.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise any right, email privacy@invisibleminds.ai. We will respond within the timeframe required by applicable law (generally 30 to 45 days). We may need to verify your identity before acting on a request.

For California residents: you have specific rights under the CCPA, including the right to know what personal information we have collected about you in the past 12 months, the right to request deletion, and the right to opt out of the sale or sharing of personal information (we do not sell or share personal information as defined by the CCPA). You may designate an authorized agent to make a request on your behalf.

For EU, UK, and EEA residents: the legal bases on which we process personal information are (a) performance of a contract with you, (b) our legitimate interests (including operating and improving the Services, securing our systems, and marketing our Services where permitted), (c) your consent, and (d) compliance with legal obligations. You have the right to lodge a complaint with your local supervisory authority.

§ 09 Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Services, remember your preferences, keep you signed in, and understand how the Services are used. You can control cookies through your browser settings and, where applicable, through our cookie preferences interface. Disabling cookies may affect Service functionality.

We do not currently use cookies for cross-site behavioral advertising.

§ 10 International Transfers

Invisible Minds is based in the United States. If you access the Services from outside the United States, your personal information will be transferred to, stored, and processed in the United States and in any other country where our service providers operate. We take steps to ensure such transfers comply with applicable law, including, where required, standard contractual clauses.

§ 11 Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a child under 18, we will delete it. If you believe a child under 18 has provided us with personal information, please contact privacy@invisibleminds.ai.

§ 12 Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, encryption at rest for sensitive fields, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you as required by law.

§ 13 Third-Party Links and Experts

The Services may reference or integrate with content, methodologies, or materials from third-party experts (for example, Joe Vitale). Those experts operate their own websites, products, and privacy practices. This Privacy Policy applies only to Invisible Minds. When you leave the Services to interact directly with a third-party expert or platform, their privacy policy governs.

§ 14 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Services prior to the change taking effect. The “Last Updated” date at the top reflects the most recent revision.

§ 15 Contact

Questions, requests, or complaints about this Privacy Policy or our privacy practices:

Invisible Minds
11931 Montgomery Road, Cincinnati, OH 45249
Privacy: privacy@invisibleminds.ai
General: hello@invisibleminds.ai