Privacy Policy.

Who we are

MindAligned is operated by MIND ALIGNED LIMITED, a Hong Kong limited company. Business Registration Number 80246674. Registered office: Unit 2904-05, 29/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong. We are the data controller for the information described in this policy. You can reach us at hello@mindaligned.io.

What we collect

When you submit your email through a form on this site, we collect:

• Your email address.
• The form source (which page captured the email).
• A timestamp.
• Technical metadata: a salted hash of your IP address (not the IP itself), your user-agent string, the referring URL, and your country code from your IP.

When you purchase a product, our payment processor (Airwallex) collects payment details directly. We never see, store, or process credit card numbers. We receive only confirmation of payment plus your email and country. If you choose a payment plan, Airwallex securely stores your payment method so the remaining installments can be charged on the agreed schedule; we still never see your card number.

If you contact us by email, we keep the email thread to provide support and to keep a record of the conversation.

Why we collect it

• To deliver what you signed up for. If you reserve a Starter Kit spot, we email you when enrollment opens.
• To fulfill purchases. If you buy a product, we deliver it to the email you provided.
• To prevent abuse. The salted IP hash helps us spot duplicate or automated submissions without storing actual IP addresses.
• To improve the product. Aggregate counts of which form sources convert tell us which messages work. We do not profile individuals.

Lawful basis (GDPR)

If you are in the European Economic Area or the United Kingdom, our lawful bases for processing are: consent (when you submit an email form), contract (when you purchase a product), and legitimate interest (for technical metadata used to prevent abuse and improve the site).

Who we share it with

We share your data only with the service providers we use to operate the site. As of the date of this policy, those are:

• Cloudflare, our hosting and CDN provider. Cloudflare may process technical metadata to serve pages and protect against abuse.
• Airwallex, our payment processor and banking infrastructure (MIND ALIGNED LIMITED's account). Airwallex collects and stores payment details and, for payment plans, the stored payment method used for future installments.
• An email service provider (MailerLite or equivalent), once active, to send transactional and announcement emails.

We do not sell, rent, or share your data with advertisers, data brokers, or any party not strictly required to operate the service. We will update this list if it changes.

Where we store it

Email captures are stored in a Cloudflare D1 database located on Cloudflare's global infrastructure. Email service provider data is stored on that provider's infrastructure. Payment data is stored on Airwallex's infrastructure. We do not maintain a separate copy of payment data.

How long we keep it

• Email captures: until you ask us to delete them, or until the email permanently bounces.
• Purchase records: seven years, as required by accounting and tax regulations.
• Support emails: two years after the last reply.
• Technical logs: thirty days.

Your rights

Depending on where you live, you may have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements for purchase records).
• Withdraw consent for email communications at any time.
• Request a portable copy of your data.
• Object to certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@mindaligned.io with the subject line Privacy. We respond within thirty days, usually faster.

California residents (CCPA)

If you are a California resident, you have the rights described above plus the right to know what categories of personal information we have collected and to whom we have disclosed it. We do not sell personal information as defined by the CCPA.

Hong Kong residents (PDPO)

If you are a Hong Kong resident, the Personal Data (Privacy) Ordinance applies. You have the rights of access and correction described above. Our data protection contact in Hong Kong is reachable at the email address listed in this policy.

Cookies

By default, we use only essential cookies and local storage required to make the site work. Analytics and marketing cookies are off unless you accept them through the banner on first visit. You can revisit your choice at any time by clearing your browser storage for this site.

Children

This service is not directed at children under sixteen. We do not knowingly collect personal data from anyone under sixteen. If you are a parent or guardian and believe your child has provided us data, email us and we will delete it.

International transfers

Because we operate globally through Cloudflare, your data may be transferred and processed in jurisdictions outside your home country. We rely on the service providers' standard contractual clauses and certifications to ensure adequate protection.

Changes to this policy

We may update this policy. When we do, we update the date at the top. Material changes will be announced by email to active subscribers.

Contact

Questions or requests: hello@mindaligned.io.