Privacy Policy

This Privacy Policy describes how Mimir ("we", "us", "our") collects, uses, and protects information about you when you use the Mimir Platform ("Service").

---

1. Information We Collect

1.1 Account & Profile Data

When you register, we collect your username, email address, first and last name, and password (stored as a cryptographic hash). You may optionally add a profile bio.

1.2 Content You Create

We store playbooks, workflows, activities, skills, rules, agents, and Playbook Improvement Proposals (PIPs) that you create on the Platform.

1.3 Usage & Log Data

We automatically collect server-side log data including IP addresses, request paths, timestamps, HTTP status codes, and browser/client information. This data is used solely for operating, securing, and improving the Service.

1.4 Cookies & Session Data

We use session cookies required for authentication and CSRF protection. We do not use third-party tracking cookies or advertising cookies.

2. How We Use Your Information

• Provide the Service — authenticate you, store and serve your content, and enable collaboration.
• Communicate with you — send email verification, password reset, and important service notifications.
• Improve the Service — analyse usage patterns (in aggregate) to fix bugs and improve features.
• Security & abuse prevention — detect and prevent fraud, abuse, and unauthorised access.
• AI-assisted processing (Galdr) — when you submit a PIP, its content is processed by Galdr, Mimir's AI assistant engine, to evaluate and summarise proposed playbook changes. By submitting a PIP you explicitly consent to this processing.

3. Public Playbooks

Content you mark as Public is visible to all authenticated users of the Platform. Mimir operators can read and use public playbook content to operate and improve the Service. We do not sell or commercialise your content to third parties.

4. We Do Not Sell Your Data

Mimir does not sell, rent, trade, or otherwise transfer your personal data to third parties for commercial purposes. We do not share your data with advertisers or data brokers.

5. Data Sharing & Third Parties

We may share data only in the following limited circumstances:

• Service providers — hosting, email delivery, and infrastructure partners who process data strictly on our behalf and under confidentiality obligations.
• Legal requirements — when required by law, court order, or governmental authority.
• Business transfer — if Mimir is acquired or merges with another entity, data may be transferred as part of that transaction, subject to the same privacy commitments.

6. Data Retention

We retain your account data and content for as long as your account is active or as needed to provide the Service. Log data is retained for up to 90 days for security and debugging purposes. You may request deletion of your account by contacting us through the Platform's feedback form.

7. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or alteration — including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission over the Internet is 100% secure; use the Service at your own risk.

8. Your Rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us via the Platform's feedback form. We will respond within a reasonable timeframe.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have done so, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do we will update the "Last updated" date at the top. Your continued use of the Service after a change becomes effective constitutes acceptance of the new policy.

11. Contact

For questions, concerns, or data requests related to this Privacy Policy, please use the feedback form inside the Platform.