Last updated on 9 November 2026
Ailmind is responsible for personal information we collect through this website and our development, AI integration, consulting and support services. Contact our privacy contact at sherwyn@ailmind.com.
This policy also explains the general handling of information by our GPTs, plugins and connectors. Midify’s app, web editor and ChatGPT integration have a dedicated privacy policy with product-specific details. Client-operated websites and apps, and third-party platforms, have their own notices. Where we process information on a client’s instructions, our agreement with that client also governs that work.
| Information | Purpose |
|---|---|
| Your name, email address, enquiry and attachments you choose to provide | Respond to enquiries, prepare proposals and provide support |
| Business details, requirements, project files, content, approvals and correspondence | Build, test, deliver and support your project |
| Billing details, invoices and transaction references | Administer payments, accounting and legal records; payment providers handle payment credentials where used |
| Connection permissions and information returned by accounts you authorise | Carry out requested integrations, website updates and analysis, including optional Search Console insights |
| Technical request information such as IP address, requested URL, browser details and security events | Deliver the website, troubleshoot problems and protect services against abuse |
| Inputs and relevant context sent through an AI tool or integration | Generate the response or perform the action you request |
You can browse public pages without sending an enquiry. Contact details and a message are required to use the enquiry form; without them we cannot respond through that form. Other information is optional unless needed for an agreed feature or service. Do not send passwords, API keys, sensitive personal information or other people’s confidential data through the contact form. We agree an appropriate access method for project work.
We normally receive information from you, your authorised team or accounts you connect. If a client supplies information about other people, they must have authority to do so and provide any required notice. Where we collect information indirectly, we provide notice where required by applicable law.
Hosting: The website is delivered through Cloudflare. Hosting and security services process technical request information to deliver pages and manage reliability and abuse. See Cloudflare’s privacy policy.
Enquiries: Our contact form sends your name, email address and message to Web3Forms for delivery to our email inbox. Web3Forms and email providers process the submission and delivery information. See Web3Forms’ privacy policy. You can instead email sherwyn@ailmind.com.
Videos and external assets: Pages can load YouTube thumbnails, embedded videos and app-store images from their providers. Those requests disclose technical information such as your IP address and browser details; embedded services may use cookies or similar technologies under their own policies. Some videos load only after you choose to play them; other pages may load an embed directly. See Google’s privacy policy. Following an external link also takes you to a service with its own privacy practices.
We do not run dedicated advertising or visitor-analytics scripts on this website. Hosting metrics and external services are separate from such scripts. Browser controls can block third-party cookies or content, although some features may stop working. Product sign-in and connected apps may use cookies or local storage for sessions, preferences and saved work as described in their own notices.
A host platform processes your conversation under its own terms and settings. Building a GPT does not automatically give us access to your entire conversation history. However, an action, plugin, connector or support request can send relevant messages, files, identifiers and tool arguments to a service we operate. We receive and process that information to fulfil the request, troubleshoot and protect the service. Do not assume that information entered into a chat stays only with its host platform.
For commissioned work, we may process project context with AI, hosting and development providers where needed for the agreed service. Personal information included in that context may also be processed; we do not claim that all AI requests are free of personal data. Share only information appropriate for the agreed workflow. Special confidentiality, data location or provider restrictions need to be agreed before that information is supplied.
Connected services receive the information needed for an authorised request. Optional Search Console work can involve search queries, page URLs and traffic metrics from the property you authorise. You can revoke access through the connected account or ask us to stop using the connection. Revocation does not automatically delete records already held.
We do not use private client content to train our own AI models without separate permission. A provider’s handling of requests depends on its service, your account settings and the relevant agreement. Midify’s separate opt-in interaction controls are explained in its data-use notice.
We use information for the purposes above, communicating about your project, improving service reliability, managing legal obligations and resolving disputes. We do not sell personal information or use private project content for targeted advertising. We obtain permission before publishing client work or testimonials.
We disclose information to providers needed for hosting, email, forms, development, AI processing and agreed integrations, and to professional advisers where needed. Access is limited to what is needed for the purpose, with appropriate contractual or other protections. Independent platforms also process information under their own policies. We may disclose information where legally required or permitted to address fraud, security threats or legal claims. A business transfer involving personal information would require appropriate protections and any legally required notice.
We operate from New Zealand and use international providers. Information may be processed outside New Zealand, including in the United States and other locations used by the relevant provider. Where overseas disclosure requires safeguards, we use protections required by applicable law, such as comparable contractual privacy obligations. A link to a provider’s policy is not itself a guarantee of equivalent protection.
We take reasonable steps to protect personal information through access controls, appropriate service configuration and limiting disclosure. No system is completely secure. We address privacy incidents and notify affected people and regulators where required.
We keep enquiries and project records for as long as needed to respond, perform the work, provide agreed support and meet accounting, legal or dispute-resolution obligations. We remove temporary working copies when no longer needed. Provider logs, backups and independently held platform records follow the applicable retention arrangements; deleting an active record may not immediately remove backup copies.
You can request deletion or ask what we still hold and why. We will explain any legal or operational reason for retaining information. Disconnecting an integration stops future authorised access but does not itself erase earlier correspondence, project records or data held by an independent provider.
Contact sherwyn@ailmind.com to request access, correction or deletion, withdraw consent where processing relies on it, or raise a complaint. We may need to verify your identity and authority. We respond within applicable legal time limits and explain any lawful refusal or retention requirement. If we decline a correction, you may ask for a statement of the requested correction to be attached to the information.
Depending on the laws that apply, you may also have rights to restrict or object to processing, receive portable data or complain to your local regulator. These rights have legal conditions and exceptions. We do not treat use of the website as blanket consent for unrelated processing. Marketing messages, if you subscribe, include a way to unsubscribe; you can also contact us directly.
If a privacy concern remains unresolved, you can contact the New Zealand Office of the Privacy Commissioner. Where a client controls the information, we may refer your request to that client and help them respond.
Our business services are intended for people able to enter an agreement. Educational or creative tools may be used by younger people subject to their product and platform age requirements and any required parent or guardian permission. Do not submit unnecessary personal information about children. Contact us if a child has provided information that should be removed.
We update this policy when our practices change and display the revision date above. We provide additional notice and obtain consent where required for a materially different use of information.
