Privacy Policy
Plain English, no surprises.
Last updated: 24 September 2026
Who we are
Operational Mind ACAI is operated by Adam Carruth in the United Kingdom. If anything on this page is unclear, or you want to exercise any of the rights below, email adamcarruth84@outlook.com and you will get a reply from me, not a ticket system.
What we collect
Account details: when you sign up, our authentication provider (Clerk) stores your name and email address so you can sign in. We also store usage counters against your account (messages sent, documents uploaded and AI extractions run) to operate the fair-use limits, plus your membership role and expiry date.
Forms: if you request a beta place, the details you enter (name, email, and anything you write in the optional fields) are sent to us by email so we can respond. They are not written to a database.
Hosting logs: our hosting provider (Vercel) keeps short-lived logs of what the service did, such as a payment being processed or a request failing. These can include your email address, but never the names or contents of your documents or notes.
Payments: payments are handled entirely by Stripe. We never see or store your card details.
Your documents and chat
When you add a document to the chat, it is read in your browser and the file never leaves your computer. Only its text is used: it stays in your browser tab and is sent with each question, through our server to Anthropic, so the answer can draw on it. Our server handles that text in memory only and never writes it to disk, and our logs never record a document's name or contents. We keep no copy. When you close the tab, it is gone from our side.
Answers are produced by Anthropic's Claude API under Anthropic's Commercial Terms of Service, which state that Anthropic may not train models on customer content. Anthropic deletes API inputs and outputs within 30 days, but may keep them for up to two years if a request is flagged under its usage policy, or for longer where the law requires.
Your chat history is not stored server-side. Each conversation exists only in your browser while the page is open.
PM Command Centre data
By default, everything you build in the PM Command Centre (projects, risks, decisions, budgets, timelines) is saved in your browser's local storage on your device and never touches our servers. Backup files you download are yours and stay wherever you put them.
Optional cloud sync: if you switch sync on inside the app, your project data is stored in an encrypted database, keyed to your account, so it follows your login across devices. It is encrypted in transit and at rest, and through the app only your own signed-in account can read it. It is not end-to-end encrypted, which means we, as the operator, could technically access the database. We do not, and your data is never shared or used to train AI. Switch sync off anytime, and a one-click control deletes the cloud copy. Our database provider may keep it in short-term backups for a limited period before it is overwritten.
Meeting notes you paste into Meeting Input are sent to our server for one purpose: extracting the structured items you then review. They are processed in memory via Anthropic's Claude API, under the same commercial terms and retention as above. We do not store them. This is true whether sync is on or off; documents and notes are never part of what syncs.
Cookies and analytics
We use cookies for one thing: keeping you signed in (Clerk). Your browser's own storage holds your light or dark theme, your PM Command Centre data and a few display preferences, and none of it leaves your device unless you switch on sync. There is no advertising or cross-site tracking.
We use Vercel Analytics to understand aggregate site traffic (page views, referrers, countries). It does not use cookies and does not identify individual visitors.
We also keep our own count of arrivals on the home and beta pages: that a visit happened, when, and where it came from (for example LinkedIn), and whether a beta place was requested or the payment page opened. It uses no cookie and stores no IP address, account or anything else that identifies you. When you click through to pay, that same source label (for example "linkedin") is passed to Stripe, so a payment can be matched to where it came from.
Who else touches your data
Clerk (authentication and account storage), Anthropic (AI processing of documents, questions and pasted notes), Vercel (website hosting and anonymous analytics), Neon (encrypted database storage for optional cloud sync, and for the anonymous visit counts above), Google Gmail (delivery of our notification and welcome emails), and Stripe (payments). Each processes only what is needed for its job.
Your rights
Under UK GDPR you can ask what personal data we hold about you, ask for it to be corrected, or ask for your account and its data to be deleted. Email adamcarruth84@outlook.com from your registered address and it will be actioned promptly. Note that PM Command Centre data is on your device, not ours, so deleting it is in your hands (and so is keeping it safe; download backups).
Changes to this policy
If the product changes in a way that affects how data is handled (for example, if an optional cloud sync feature is introduced), this page will be updated before the change goes live.
Questions? Email adamcarruth84@outlook.com or head back to the home page. For your IT or information security team, the security summary sets out the data flow, retention and sub-processors on one page.