Privacy Policy

Overview

NeuralMind is built on a simple principle: we never receive your code. The software indexes and searches your code on your machine, and none of it is sent to us or to any other service for processing. This policy explains what data we do collect (very little), why, and your rights. The full, canonical GDPR policy is maintained in the open at github.com/dfrostar/neuralmind/blob/main/docs/PRIVACY-POLICY.md.

Data We Do Not Collect

We do not collect, transmit, or store your source code, queries, file paths, graph data, synapse weights, or any file contents. The index lives entirely in your project's `.neuralmind/` and `graphify-out/` directories on your machine. The NeuralMind software has no telemetry of any kind — not opt-in, not anonymous, none. By default it makes one kind of outbound request of its own: the first time it needs to embed on a machine with no cached model, it downloads a public embedding model (all-MiniLM-L6-v2) over HTTPS, verified against a pinned checksum. That fetch retries on transient network errors and runs again if the cached model is later removed, so it is not a once-in-a-lifetime event — but it is always the same public file, it is a plain download that carries none of your data, and pre-seeding the model via NEURALMIND_ONNX_MODEL_DIR removes it entirely. The only other outbound path is opt-in and off by default: if you set NEURALMIND_LLM_SEED=1 and provide your own Anthropic API key, README and architecture-document prose (never source code) is sent to Anthropic under your key to seed associations. Beyond that, the only network traffic in your workflow is what your AI agent sends to its own model provider, which NeuralMind minimizes but does not control.

Data We Collect

• •From the open-source software: nothing. There is no telemetry mechanism in the product.
• •Team tier license data: your email address (and optional company name) when you purchase a license, and license metadata (tier, seats, expiry, signature hash). Seat email addresses you add with `neuralmind team seats` are stored on your own machines and are not sent to us.
• •Payment: no payment processor is integrated. Team licenses are invoiced manually, in USD.
• •License portal: not available yet. Licenses are issued manually and sent to you directly, so no portal logs your IP address or user agent.
• •PyPI download counts (public registry data, collected by PyPI, not by us)
• •Website visitor analytics on neuralmind.uk (see Cloudflare section below)

Data Retention

We keep Team-tier data only as long as the law and license validation require:

• •Active license data: duration of the license + 3 years after expiry
• •Audit logs: 3 years after creation, then anonymized
• •Financial records: 7 years, required for tax compliance
• •Deleted customer records: personal data anonymized immediately; financial records retained per above

GDPR & Your Rights

Because we have minimal data collection, exercising your rights is simple:

• •Right to access: for the open-source tool we hold no personal data about you at all; Team-tier customers can request a copy of their license and audit data at [email protected]
• •Right to deletion: your index is local files you control — delete your project's `.neuralmind/` directory (or run `neuralmind reset`) and it is gone completely. Team-tier customers: email [email protected] and personal data is deleted (financial records are anonymized per the retention policy above)
• •Right to portability: your local data is already in open formats (SQLite and JSON) inside your project directory
• •EU Representative: Darren Frost, Cheval-Volant LLC, Texas, USA

Cloudflare Web Analytics

Our website uses Cloudflare Web Analytics, which is privacy-first and does not set cookies or collect personal identifiers. No individual visitors are tracked. Data is aggregated and retained for 30 days. No data is sold or shared with third parties.

Cookies & Tracking

NeuralMind does not use cookies on neuralmind.uk, and there is no license portal yet, so licensing sets no cookies either. We have no advertising pixels, no cross-site trackers, and no fingerprinting anywhere.

Third-Party Services

• •GitHub: for source code hosting and releases. GitHub's privacy policy applies.
• •PyPI: for package distribution. Python Software Foundation privacy policy applies.
• •Cloudflare: for domain, DNS, and Pages hosting. Cloudflare's privacy policy applies.

Changes to This Policy

We may update this policy as the product evolves. Material changes will be announced on the GitHub repository and linked from this page. Last updated: October 9, 2026.

Contact

Questions about privacy or legal matters: [email protected]