Privacy Policy

Controller

NativeMind, Thailand, operates PBN and is responsible for the personal data described here. Contact us through the address published on nativemind.net.

What we collect

Account data (email, name, language, sign-in method); workspace content you create or import; usage and security logs (IP address, browser, requests); billing data handled by Stripe (we never store card numbers); messages with operators; conversations with the AI agent (your messages, its steps and answers, your answers to its suggestions).

Guest try-out without an account: a guest session cookie, your IP address and the result of a Cloudflare Turnstile bot check.

Why

To provide the service and support (contract), to secure it and prevent abuse (legitimate interest), to bill you (contract) and to meet legal obligations. We send service emails; product news only if you opt in.

Who processes it

Hosting and network providers, Cloudflare (network protection and email delivery), Stripe (payments), the dropexpired service (domain intelligence; it receives domains and queries, not your account details) Cloudflare Turnstile (bot protection of the guest try-out) and AI model providers for agent features (prompts you run). We do not sell personal data. We use agent conversations to improve our own agent only as described in «Agent training» below.

Agent training

Conversations with the agent may be used to evaluate and train PBN's own agent model. Before a conversation is kept for this, emails, phone numbers, names, API keys, tokens and payment data are removed automatically.

Never used: data from the ad and analytics accounts you connect, data fetched with your own provider keys, and conversations that run on your own AI model key.

Default: on for guests and the Explorer and Pro plans; off for Agency, Managed and Enterprise. A workspace admin can switch it off at any time in the workspace settings; switching it off deletes the records already collected for that workspace. Records are kept for up to 24 months, stay on our infrastructure and are not sold or shared.

How long

While your account exists. After you delete it, the account and its personal workspace are removed after 30 days; security and audit logs may be kept longer where needed for security or law. A guest session lasts 24 hours; when you sign up, its conversation moves into your account.

Your rights

You can access, correct, export and delete your data, object to processing and withdraw consent. Most of this is available in the app; for the rest, contact us.

Transfers and security

Providers may process data outside your country under appropriate safeguards. Data is encrypted in transit; access is limited to staff who need it, and operator access to a workspace requires your explicit, time-limited grant and is logged.

Children

PBN is not for people under 18.