Privacy policy
This translation is provided for information. The French version is the only binding one. Read the French version
Version dated November 11, 2026.
Who processes your data
Mindsef, sole proprietorship. Full identity in the legal notice. Contact: contact@mindsef.com. For your account and your subscription, the seller is the data controller. For your prospects' data, you are the controller, and Mindsef processes it on your behalf, only to run your prospecting.
What is processed, and why
- Your account: your email address and your password (stored in an unreadable form, even to us), so you can sign in.
- Your payment: handled by Stripe. Mindsef never sees your card number.
- Your LinkedIn messages: read by our connection partner, on your behalf, to write drafts, track replies and produce your report.
- Your Google Calendar, if you connect it: to offer free slots, and to book and move accepted meetings (details below).
- Writing drafts: the conversation and your rules are sent to an artificial intelligence model, for the time it takes to write the message.
Your Google Calendar
Connecting your Google Calendar is optional: without it, meetings stay in “Meeting to confirm” and you book them yourself. If you connect it, Mindsef requests access to your calendar events (calendar.events), and to your Google email address to show you which account is connected. It uses one calendar only, the one you choose in Settings, Meeting booking (your primary calendar by default), for three things:
- Find free slots: Mindsef reads the events on that calendar over the next 7 days, to know when you are busy. It looks at the start and end time of each event, and for an all-day event, its days and its type: a birthday or a working location leaves the day free, any other (time off, a trip) blocks it. It then offers your prospect free slots within the hours and days you chose (2 slots of 30 minutes by default). Before booking the slot your prospect chose, it reads that day again to check it is still free. It keeps nothing from these events.
- Book the accepted meeting: Mindsef creates an event with a Google Meet link, or your own video link if you gave one, a reminder 24 hours before, the link to your prospect's LinkedIn profile and a summary of your exchange. If your prospect's email address is known, they are added as a guest and Google sends them the invitation. If Google's answer gets lost on the way, Mindsef finds that event again and updates it, never creating a second one.
- Move or cancel a meeting: if the meeting needs to move, Mindsef renames the event it created (“To reschedule”), then moves it to the new time, with the same video link. Google notifies the guests. If you cancel a meeting, the event stays in your calendar, renamed “Canceled”.
Mindsef never deletes an event, reads no calendar other than the one you chose and changes no event it did not create. It neither sells nor shares this data, and never uses it for advertising or to train an artificial intelligence model.
What is kept: the access token provided by Google, encrypted in the database (hosted in Europe, unreadable without the server key), the email address of the connected Google account, and the ID of the calendar you chose if it is not your primary one. For each booked meeting: its ID in your calendar, its time and its video link. Nothing else from your calendar is kept.
Revoke access: at any time, from your Google account, on myaccount.google.com/permissions, by removing Mindsef. Mindsef can then no longer read or write anything in your calendar, and new meetings stay in “Meeting to confirm”. To have the stored token and address deleted, write to contact@mindsef.com: it is done within one month.
Mindsef's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Shared learning
So that every customer benefits from what works, Mindsef computes anonymous, aggregated trends, for example the reply rate by first-message length, sending day or type of opening line. A trend is only computed over at least 5 accounts and contains only numbers: one customer's text is never shown to another customer, nor used to write their messages.
Where your data lives
The database is hosted in Europe. The categories of processors are: a LinkedIn connection partner, Stripe for payment, Google for the calendar if you connect it, an artificial intelligence model provider, a database host and a server host. The list of processors by name is on the Sub-processors page. For your prospects' data, Mindsef acts as a processor, under the data processing agreement.
How long
As long as your subscription runs. When your subscription ends, your LinkedIn account is disconnected and your prospecting data is automatically deleted 90 days later. Invoices are kept for 10 years, as required by law.
Your rights
From the app's settings, you export your data and delete your account yourself. You can also request access to your data, its correction, export or deletion, and object to processing, by writing to contact@mindsef.com. You can also lodge a complaint with the CNIL (the French data protection authority).
Your GDPR right, a Mindsef feature
For your prospects' data, you are the controller, Mindsef is the processor, under the data processing agreement.
| The right | The feature |
|---|---|
| Objection | “Do not contact”, applied everywhere: the conversation, the API, the prospect search. Nothing goes out to that person anymore. |
| Access | Exporting your data, from Settings, Data and privacy. |
| Erasure | Deleting your account, from Settings, Data and privacy. |
| Proof | Every message sent stays in its conversation, and the export contains every send. |
| Retention | Your prospecting data is deleted 90 days after your subscription ends. Invoices are kept for 10 years, as the law requires. |
Cookies and analytics
Mindsef only sets the cookies needed to keep you signed in and to protect forms. No analytics or advertising cookies. Site analytics run without cookies: they count page views per day and per source, with no visitor identifier. Details are on the Cookies page.