Mindnook logo
mindnook. View Pricing

Privacy Policy

Effective Date: October 12, 2026 Company: Toradle AI inc. Service: Mindnook (mindnook.app)
Core Privacy Commitment: Mindnook does not sell your personal information. We do not inspect your private Obsidian markdown notes, and we do never use your microVM files or prompts to train foundation AI models.

1. Information We Collect

A. Information You Provide Directly

  • Account Details: Email address, name, and profile credentials when signing in via Google, GitHub, or email magic link.
  • API Credentials: Model keys (Anthropic, OpenAI, OpenRouter) you provide to configure agent personas. These keys are stored encrypted in your isolated microVM environment and never logged in central telemetry.
  • Customer Communications: Messages, feature feedback, or support tickets sent to our team.

B. Payment Information

Payment processing is conducted by Paddle.com Market Ltd as our Merchant of Record. Mindnook and Toradle AI inc. do not store or process your complete credit card numbers or banking passwords. Paddle collects billing details, billing addresses, and payment credentials subject to the Paddle Privacy Policy.

C. Automatically Collected Information

  • Instance Telemetry: MicroVM compute lifecycle states (provisioned, running, sleeping, terminated), CPU/RAM utilization metrics for autoscaling, and error status codes.
  • Usage Analytics: Standard web analytics (e.g., Google Analytics 4) to monitor page views, device types, and referral channels. IP addresses are anonymized.

2. How We Use Your Information

We use the collected information solely for legitimate operational purposes:

  • To spin up, allocate, and manage your dedicated AWS Firecracker microVM instance.
  • To facilitate bidirectional synchronization of your Obsidian markdown notes and thought graphs.
  • To authenticate your sessions across the Web PWA and Hermex native applications.
  • To respond to technical inquiries, bug reports, and customer support requests.
  • To comply with legal obligations, tax filings, and fraud prevention measures managed via Paddle.

3. MicroVM Data Isolation and No Model Training

Your microVM operates in a hardware-isolated Firecracker virtualization jail with a dedicated NVMe block volume. Mindnook operates on a strict zero-knowledge principle regarding customer vault contents:

  • No Model Training: Your notes, files, thoughts, and agent memory traces are never used to train, retrain, fine-tune, or calibrate AI models.
  • Encryption: Data in transit between your browser/Hermex client and the microVM is encrypted using TLS 1.3. Persistent NVMe block storage volumes are encrypted at rest.

4. Data Sharing and Third-Party Disclosures

We share information with third parties only in the following limited circumstances:

  • Merchant of Record & Payments: Paddle.com Market Ltd for secure checkout, billing administration, sales tax/VAT remittance, and fraud prevention.
  • Cloud Infrastructure Providers: Fly.io and AWS for underlying bare-metal hardware and microVM hypervisors.
  • Legal Requirements: If compelled to do so by a valid court order, subpoena, or applicable statutory law.

5. Your Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you possess specific privacy rights regarding your personal information:

  • Access & Portability: The right to request a copy of the personal information we hold about you, or export your Obsidian vault at any time.
  • Correction & Erasure: The right to correct inaccurate data or request complete deletion of your account and associated microVM storage.
  • Non-Discrimination: We will not deny services, charge different prices, or provide a lower quality of service for exercising your privacy rights.

To exercise any of these rights, email us at [email protected]. We process verified requests within 30 days.

6. Cookies and Tracking Technologies

We use strictly necessary cookies to keep you signed in, remember your selected visual theme (e.g., Alpine Sage), and maintain session state. We do not deploy third-party advertising tracking networks or sell your behavioral data to ad brokers.

7. Data Retention

We retain your account details as long as your account remains active. When you delete your account or terminate your subscription, your microVM storage is shredded and permanently deleted from disk within 14 days following the close of your billing period.

8. Contact Our Privacy Team

For questions, concerns, or data requests regarding this Privacy Policy, please reach out to: