This Privacy Policy explains how NetMind ("we", "us", or "our") collects, uses, and protects your personal data when you use our service. We handle your data in line with applicable data protection law, including Tunisian Organic Law No. 2004-63 on the protection of personal data and, for users in the European Economic Area and the UK, the General Data Protection Regulation (GDPR).
1. Data Controller
NetMind is an independent project run by its developer, based in Tunisia, who is the data controller for personal data collected through this service. NetMind is not a registered company. For any question about your data, contact us.
2. Information We Collect
- Account data: your name, email address, and password (stored as a one-way hash). If you sign in with Google, we receive your name and email from Google.
- Profile data: company name and any preferences you set in your account.
- Network data from the desktop app: the names, IP and MAC addresses and current status of devices on your network, and their bandwidth use. We never receive the content of your network traffic. The AI features run on your own computer.
- Activity data: sign-ins (IP address and browser), account and plan changes, and network alerts, which are shown to you in your dashboard. We do not use analytics or tracking tools.
- Technical data: your IP address and browser type, used for security (rate limiting, sign-in alerts and session lists).
- Payment data: when you pay for the Paid plan, we record the amount, date and payment method (for example PayPal or a local transfer). Payments are made outside NetMind, so we never receive or store card details.
3. Legal Basis for Processing
- Contract performance: processing your account data, providing the service, and handling subscriptions.
- Legitimate interests: security monitoring, fraud prevention, and service improvement — where these interests are not overridden by your rights.
- Consent: optional emails (reports and product updates), which you can turn off at any time under Account → Preferences.
- Legal obligation: keeping payment records where the law requires it.
4. How We Use Your Information
- Create and maintain your account.
- Provide, operate, and improve the NetMind service.
- Send service emails: account verification, password resets, security notices, payment receipts and the reports you opt into.
- Send product update emails if you opt in (you can unsubscribe at any time).
- Detect and prevent fraud, abuse, or security incidents.
- Comply with legal obligations.
5. Data Sharing
We do not sell your personal data. We share data only with the following categories of service providers, strictly to operate our service:
- Hosting: Render (backend), Cloudflare (website and form security checks), Neon (database).
- Authentication: Google OAuth (if you choose Google sign-in).
- Email delivery: Twilio SendGrid.
- Payments: PayPal, if you choose to pay with PayPal (under PayPal's own privacy policy), or your bank for local payments.
- Your webhook: if you set a webhook URL, we send your account events to that address.
Each provider only receives what it needs to perform its service and processes it under its own data processing terms.
6. Cookies
We only use your browser's local storage for things the site needs to work, such as keeping you signed in and remembering your theme. We do not use analytics or advertising cookies. The website loads fonts from Google Fonts, which can see your IP address. See our Cookie Policy for the full list.
7. Data Retention
- Account data: kept while your account exists. When you delete your account, everything is erased immediately and permanently — there is no recovery period.
- Device list: only the latest scan from your desktop app is kept; it is replaced every few seconds and deleted when you unlink the app.
- Bandwidth history: one sample per minute, deleted automatically after 7 days (Free plan) or 30 days (Paid plan).
- Activity log: deleted automatically after 12 months.
- Contact form messages: deleted automatically after 12 months.
- Payment records: kept while your account exists, unless the law requires us to keep them longer.
8. Your Rights
Wherever you are, you have the following rights over your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restriction
Ask us to limit how we process your data in certain circumstances.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, contact us. We will respond within 30 days. You also have the right to lodge a complaint with a data protection authority — in Tunisia, the INPDP (Instance Nationale de Protection des Données Personnelles).
9. Security
We use HTTPS for all connections, bcrypt password hashing, optional two-factor sign-in, short-lived access tokens with rotating refresh tokens, account lockout after repeated failed sign-ins, and email alerts for new sign-ins.
10. International Data Transfers
Our providers run their services in several countries, including the United States, so your data may be processed outside the country you live in. We rely on our providers' data processing agreements to protect it.
11. Children's Privacy
NetMind is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes via email or a notice on the dashboard. The "last updated" date at the top reflects the most recent revision.
13. Contact
Questions about this policy or your personal data? Get in touch.