Privacy Policy

Last updated 11 October 2026

Hivemind's whole job is holding things you wrote. This page says exactly what it holds, what it refuses to hold, and how to remove it.

What is stored

• Memories you or your tools explicitly save.
• Notes your tools write about work in progress: a goal, a step done, a decision, what comes next.
• Tasks one of your tools leaves for another, with the material handed over with them and what was done.
• Context files you chose to import, and where each came from.
• Documents you upload, and the text extracted from them.
• Content from connectors you set up yourself.
• Which tool asked for what, so the dashboard can show you.
• Your email address and name from Google or GitHub, for sign-in.

What is not stored

• Conversations as written. Your messages and the assistant's replies are read to find what is worth keeping, and are not stored. What is stored is the short statements taken from them. Some come from a reply, such as a date the assistant confirmed. There is one exception, and you make it yourself: when you type @handoff in a chat, the reply you are handing over is stored with the task so the next tool can read it. Deleting the task's thread deletes it.
• Your chat history. The import reads context files you wrote for your agents (AGENTS.md, CLAUDE.md, .cursorrules) and their equivalents. It does not read transcripts.
• Anything from a site you have not enabled. The browser extension is inactive on sites you have not turned it on for.
• Your keystrokes. The extension reads a message when you send it, not as you type.
• Payment details. Card data goes to Stripe and never reaches our servers.

The import, specifically

npx @get-hivemind/cli init looks for context files in your repositories and home directory. Before anything is sent it prints every file it found, its size, and how many memories it would become, and waits for you to agree. --dry-run prints and sends nothing. A non-interactive run sends nothing unless explicitly told to.

Nothing is passed to a model to be summarised. The files are read, split on their own headings, and stored. That works precisely because you wrote them to be read by an agent already.

Isolation between accounts

Every request resolves to your account before any data is read, and every query is bound to it. Accounts cannot see each other's memories, threads, documents or usage. This is enforced by a single accessor that every query passes through, and verified continuously by the test suite rather than assumed.

Connector credentials are encrypted before storage and are never returned by the API.

The free Check page

The Check page at gethivemind.xyz/check needs no account. The text you paste is read to find the claims that cite a source, and is not stored. What is stored, for 30 days, is each claim it found, the verdict, a short quote from the cited page and the page address, so the result can have a link. Anyone who has the link can read that result. To limit abuse we also keep a counter per day against a one-way hash of your IP address, for up to three days.

Who else sees it

No advertisers, no data brokers, and no model training, not ours and not anyone else's. The only third parties involved are the ones required to run the service:

Who	What they handle
Cloudflare	Hosting, storage, and the embedding model that makes retrieval work. Your content stays on their network.
TypeSafe	A model that judges which of your memories answer a search, and how new memories are filed. It receives the search text and the candidate memories, with secrets removed first.
Cloudflare Turnstile	The bot check on the Check page. It sees your browser and your IP address.
A reader service	On the Check page only, when a cited page blocks us, the address of that page is sent to a reader service so it can be read. Your text is not sent.
Resend	Delivers the email digest, only if you turn it on. They receive your email address and the digest text.
Stripe	Payments, as merchant of record. They receive your email and billing details; we never see your card.
Google / GitHub	Sign-in only. They tell us your email, name and avatar.

Content may be disclosed if legally compelled. Where it is lawful to do so, you will be told.

Retention

Memories are kept until you delete them. Nightly maintenance folds new memories into what is already known (merging, never deleting), so the store stays small without anything expiring on a timer. Deleted content is removed from the database and from the search index, not flagged as hidden.

Deleting things

	How
One memory	Memories in the dashboard, or Undo when it is captured
Many at once	Describe what should go and you see what would be removed before confirming
A saved view	Deletes the saved search only
A document	Removes the file and everything extracted from it
A connected tool	Settings → Connected tools → Revoke
Everything	Settings → Delete account

Your rights

You may ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Most of this you can do yourself in the dashboard; for anything you cannot, email us and it will be handled within thirty days.

If Hivemind is ever discontinued you will get at least sixty days' notice and a way to export everything first.

Children

Hivemind is not intended for anyone under 16, and accounts are not knowingly created for them.

Changes

Material changes are announced by email to the address on your account and noted here with a new date.

Contact

support@gethivemind.xyz for privacy requests, questions, or anything that looks wrong.