gomind.
Docs Start building
DATA HANDLING

Privacy policy

Effective 19 September 2026

This policy describes how Gomind (“we”) handles information when you use gominddb.com, the API at api.gominddb.com, the MCP server at mcp.gominddb.com, and the Gomind dashboard.

What we store

Gomind is a memory service. Most of what we hold is content you or your agents send on purpose.

  • Account. Email, Firebase user id, and optional display name, photo URL, and phone number supplied by Firebase Authentication when you sign in.
  • Organization. Organization name, membership, and roles (admin or user).
  • Memory. Facts (subject, relationship, object, optional source), entities, collections, and 768-dimension embedding vectors used for semantic recall.
  • Credentials. API keys and OAuth access/refresh tokens, stored hashed. We cannot read a key or token back after it is created.
  • Billing. Plan, credit balance, usage events, and Stripe identifiers (customer, subscription, payment intent, invoice). Card numbers are handled by Stripe, not Gomind.
  • Operations. Request traces (trace id, organization id, collection id, operation name) used to run and debug the service.

What MCP and API responses contain

Tools and REST endpoints return the memory records needed for the request: facts, entities, collection codes, and search scores. They do not return API keys, OAuth secrets, or Stripe payment details. Do not put secrets into facts if you do not want them recalled later.

Processors

We use other services to operate Gomind:

  • Firebase Authentication (Google) — sign-in.
  • Stripe — subscriptions and credit purchases.
  • Embedding providers (Google Gemini and/or OpenAI) — fact text is sent to create vectors. Those providers process that text under their API terms.
  • Google Cloud — API and database hosting.
  • Cloudflare — DNS, TLS, and reverse proxy.

When you connect Gomind as an MCP connector in Claude, ChatGPT, Grok, or another host, that host receives the tool results you authorized. Their products are governed by their own policies.

What we do not do

  • We do not scrape Claude, ChatGPT, or Grok conversation history. We only store what a client sends to remember, feed, or similar endpoints.
  • We do not sell your memory graph.
  • We do not use stored facts to train Gomind foundation models. We do not operate a foundation model.

Retention

Facts remain until you delete them with forget / forget_entity, delete a collection, or delete the organization. Collection deletes go active → deleting → purged. Account and billing records are kept as long as the organization exists and as required for tax and fraud prevention.

Access control

Every query is scoped to your organization and collection. Ownership failures return not-found, not a listing of other tenants’ data.

Children

Gomind is for organizations and developers. It is not directed at children under 16.

Requests

To access, correct, or delete personal data, use the Gomind dashboard (forget tools, collection delete, organization settings) or write via the contact path in your account. We will need enough information to verify you control the organization.

Related: Terms of use and documentation.