Privacy Policy

Last updated: March 4, 2026.

Welcome to YesMind.ai (“Platform,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, process, store, and protect personal information when you access or use our website and services. Our Platform provides centralized access to multiple artificial intelligence models and services, including (but not limited to) MidJourney, Sora, ChatGPT, Runway, Flux, Imagen, Ideogram, Luma, Deepseek, Clarity Grok, and other third-party AI systems. Because we operate as an orchestration layer between users and multiple AI providers, transparency about data flows and responsibilities is fundamental to how we operate. This document is intended to clearly explain what happens to your data, what remains under your control, and where third-party processing may occur. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. Our Role in the AI Ecosystem

Our Platform acts as a gateway. We do not build all the AI models available through our system; instead, we enable users to access and interact with selected third-party AI services from a single interface. This means that in certain situations, we act as the primary data controller (for example, when managing your account). In other situations, we function as an intermediary or technical processor that routes your input to the AI model you select. The distinction matters. When your prompt is transmitted to a third-party AI provider, that provider may process the data under its own privacy framework. We aim to limit transmission strictly to what is technically necessary to deliver the requested output.

2. Information We Collect

Account and Registration Information

When you create an account, subscribe, or interact with our services, we may collect identifying and contact information such as your name, email address, username, and authentication credentials. If you subscribe to a paid plan, billing information is collected through secure third-party payment processors. We do not store full credit card numbers on our servers. Communications with our support team, feedback submissions, and account preferences may also be stored.

AI Interaction Data

Because our Platform is built around AI interaction, we process user-submitted prompts and related inputs. This may include text prompts, images, audio files, video files, structured datasets, and configuration parameters. Generated outputs are returned to you and may be temporarily stored for technical performance, retrieval, or history features depending on your account settings. We do not claim ownership over user prompts or generated outputs. However, certain system-level metadata — such as timestamps, selected model, token usage, performance metrics, and routing logs — may be retained for operational purposes.

Automatically Collected Technical Data

Like most online services, we automatically collect certain technical information when you visit our Platform. This may include your IP address, device type, browser information, operating system, session identifiers, and usage analytics. This information helps us maintain system stability, monitor abuse, prevent fraud, and improve performance. It is not used to personally profile users beyond what is necessary for security and operational integrity.

3. How We Use Personal Information

We process personal information in order to operate a reliable and secure AI aggregation platform. In practical terms, this includes enabling account creation, authenticating users, routing prompts to selected AI models, delivering generated outputs, managing subscriptions, and providing customer support. We also use data to maintain system security. AI services can be misused for harmful purposes, and we monitor activity to detect fraud, automated abuse, denial-of-service behavior, and violations of our Terms of Service. Additionally, anonymized or aggregated usage data may be analyzed to improve performance, optimize model routing logic, and refine the user experience. For example, we may evaluate latency across models or analyze usage distribution to enhance infrastructure efficiency. We do not sell personal data to third parties.

If you are located in the European Economic Area, United Kingdom, or other regions governed by similar data protection laws, we rely on specific legal grounds for processing. In most cases, processing is necessary for the performance of a contract — meaning we must process your data in order to provide the services you request. Certain processing activities may rely on legitimate interests, such as platform security and fraud prevention. Where legally required, we obtain consent, particularly for marketing communications or optional analytics tracking. You may withdraw consent where applicable, though doing so may limit certain features.

5. Interaction With Third-Party AI Providers

A central feature of our Platform is the integration of multiple AI systems developed and operated by independent entities. When you select a specific model, your prompt and necessary contextual data may be transmitted to that provider’s infrastructure. We only transmit data required to deliver the requested output. However, once routed, processing may occur under the third-party provider’s privacy practices. Some providers may retain prompts for model improvement, safety review, or research purposes. Others may offer enterprise configurations that limit such retention. We encourage users to review the privacy policies of individual AI providers before submitting highly sensitive information. We are not responsible for the independent data practices of third-party providers, though we take care to partner with reputable services that maintain transparent policies.

6. Data Retention

We retain personal data only for as long as necessary to operate the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Account information is typically retained while your account remains active. Usage logs and technical metadata may be retained for shorter operational periods unless required for security or compliance reasons. If you request account deletion, we will delete or anonymize your personal data unless retention is legally required. Certain financial records may need to be retained for accounting or tax compliance purposes.

7. Security Measures

We implement reasonable and appropriate technical and organizational safeguards designed to protect personal data from unauthorized access, misuse, or disclosure. These measures include encrypted transmission (SSL/TLS), secure server infrastructure, restricted internal access controls, activity monitoring, and structured permission management. Payment processing is handled through certified third-party providers that comply with relevant financial security standards. Despite these precautions, no system can guarantee absolute security. Users are encouraged to maintain strong passwords and secure their account credentials.

8. International Data Transfers

Because our Platform integrates AI services operated in multiple countries, personal data may be transferred internationally. This includes transfers outside your country of residence. Where required by law, we implement appropriate safeguards such as Standard Contractual Clauses, data processing agreements, or reliance on adequacy decisions issued by competent authorities. By using the Platform, you acknowledge that data may be processed in jurisdictions with different data protection frameworks.

9. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, update, or delete your personal data. You may also have the right to request restriction of processing, object to certain processing activities, or request data portability. If you wish to exercise your rights, you may contact us using the information provided at the end of this Policy. We may request verification of identity before processing certain requests. If you believe your data protection rights have been violated, you may lodge a complaint with your local supervisory authority.

10. AI-Specific Data Considerations

Artificial intelligence systems raise unique privacy considerations. While we aim to minimize unnecessary retention, certain AI providers may use submitted prompts to improve their models unless otherwise specified in their policies. For this reason, we strongly advise against submitting highly confidential or regulated data, including but not limited to medical records, financial credentials, trade secrets, or government-issued identification documents, unless you have verified the specific model’s data handling configuration. Users are solely responsible for ensuring that the data they submit does not violate applicable laws, confidentiality obligations, or third-party rights. Generated outputs may sometimes reflect patterns learned during model training and should not be interpreted as authoritative or professional advice.

11. Children’s Privacy

Our Platform is intended for users who are at least 18 years old or the age of majority in their jurisdiction. We do not knowingly collect personal data from minors. If we become aware that personal data has been collected from a minor without appropriate consent, we will take reasonable steps to delete it.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain secure sessions, remember preferences, analyze traffic, and improve performance. Essential cookies are required for core functionality, including authentication and account management. Optional analytics or preference-based cookies may be used where legally permitted. Users may manage cookie preferences through browser settings or a consent management interface where available.

13. Account Termination and Data Deletion

You may request account deletion at any time. Upon verified request, we will deactivate your account and remove personal data from active systems within a reasonable period, subject to legal or regulatory retention requirements. If deletion affects stored prompt history, previously generated outputs may no longer be accessible.

14. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our services, integrations, legal obligations, or operational practices. Material updates will be communicated through website notices or direct user notification. Continued use of the Platform following an update constitutes acceptance of the revised Policy.

15. Contact Information

If you have questions about this Privacy Policy or your personal data, please contact:

MOONLIGHT BUBBLE, UNIPESSOAL LDA
Rua Ernesto Salles, Arneiro
SOCIEDADE POR QUOTAS
Support@yesmind.ai

Privacy preferences

Choose which optional cookies you allow. Necessary cookies are always enabled.