Legal

Privacy Policy

Last updated: August 22, 2026

Mindmade Media ("Mindmade Media," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect through mindmade-media.com, our contact and quote forms, our AI Website Builder, and our client admin tools (together, the "Services"), how we use it, and the choices you have.

1. Information We Collect

Information you give us

  • Contact and quote forms: name, email address, phone number, business name, project details, budget range, and how you heard about us.
  • AI Website Builder: business information, site content, images, and preferences you enter to generate a website, plus the email address and payment details you provide when purchasing a site.
  • Client accounts / admin access: login credentials for client and admin dashboards.

Information collected automatically

  • Device and usage data such as IP address, browser type, pages viewed, referring URLs, and time spent on the site, collected via Google Analytics.
  • Cookies and similar technologies used to remember preferences and measure site performance (see Section 4).

Information from payment processing

Payments are processed by Square. We receive confirmation of payment and an order reference from Square; we do not collect or store your full card number, CVV, or bank account details — those are handled directly by Square under its own privacy policy.

2. How We Use Your Information

  • To respond to quote requests and communicate with you about your project.
  • To generate, deliver, and host websites purchased through the AI Website Builder.
  • To process payments and prevent fraud.
  • To operate, maintain, and improve the Services and our marketing.
  • To send you service-related updates and, where you've opted in, promotional messages. You can opt out of marketing messages at any time.
  • To comply with legal obligations and enforce our Terms of Service.

3. How We Share Information

We do not sell your personal information. We share information only with:

  • Service providers who help us run the business, such as Cloudflare (hosting and infrastructure), Google Analytics (site analytics), and Square (payment processing). Each processes data under its own privacy terms.
  • Legal and safety reasons, if required by law, subpoena, or to protect the rights, property, or safety of Mindmade Media, our clients, or others.
  • Business transfers, if Mindmade Media is involved in a merger, acquisition, or sale of assets, in which case information may transfer as part of that deal.

4. Mobile Information & Text Messaging

If you provide your mobile phone number and opt in to receive text messages from us (for example, to follow up on a quote request or project update), the following applies:

  • Mobile phone numbers will not be sold or shared with third parties for their marketing or promotional purposes.
  • No mobile information, SMS opt-in consent, or text messaging originator opt-in data will be shared with third parties or affiliates for marketing or promotional purposes. This information is shared only with subprocessors who help us deliver the messages (such as our SMS/carrier gateway) solely for that purpose.
  • Message frequency may vary depending on your interactions with us.
  • Message and data rates may apply.
  • You can opt out of text messages at any time by replying STOP. Reply HELP for help, or contact us using the details in Section 12.
  • Consent to receive text messages is not a condition of purchasing any service from us.

5. Google User Data (Gmail Integration)

Mindmade Media operates an internal sales tool ("LeadHunter CRM") that can send outreach email from our own business Gmail account. If you are a Mindmade Media operator who connects a Google account to that tool, this section describes exactly what we access and why. This section concerns the Google account of the Mindmade Media operator using the tool — not the Google account of any website visitor or client.

  • The single scope we request is https://www.googleapis.com/auth/gmail.send. This permission allows the application to send email on the connected account's behalf and nothing else.
  • We cannot read your email. The gmail.send scope grants no ability to read, list, search, download, label, modify, or delete messages, drafts, contacts, or settings. We do not request any read scope.
  • What we store. Only the OAuth refresh and access tokens needed to keep sending, held encrypted at rest in Cloudflare KV and transmitted only over HTTPS. We do not copy your mailbox, address book, or message history into our systems.
  • What we send. Outreach messages that a Mindmade Media operator has composed or approved inside the CRM, addressed to business prospects.
  • We never sell Google user data, never use it for advertising, never use it to train generative AI or machine-learning models, and never transfer it to third parties except as required to provide this feature or to comply with law.
  • Humans do not read your Google user data. The only exceptions are those Google permits: with your explicit consent, for security purposes such as investigating abuse, or where required by law.
  • Revoking access. You can disconnect at any time from the CRM, or by visiting myaccount.google.com/permissions. Revocation stops all sending immediately, and we delete the stored tokens.

Limited Use disclosure. Mindmade Media's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

6. Cookies & Tracking

We use cookies and similar technologies to keep the site working, remember your preferences, and understand how visitors use the site through Google Analytics. You can control or disable cookies through your browser settings; doing so may affect some site functionality.

7. Data Retention

We retain contact form submissions, project records, and account data for as long as needed to provide the Services, maintain business records, and comply with legal, tax, and accounting obligations. AI Website Builder sites remain hosted as long as your account is active and in good standing.

8. Data Security

We use reasonable administrative and technical safeguards to protect your information, including encrypted connections (HTTPS), access controls on admin systems, and restricted storage of sensitive data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to opt out of certain data uses. California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request its deletion. To exercise any of these rights, contact us using the details in Section 11.

10. Children's Privacy

Our Services are intended for businesses and individuals 18 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page with an updated "Last updated" date. Continued use of the Services after changes means you accept the updated policy.

12. Contact Us

Questions about this Privacy Policy or your data? Reach us at:

Mindmade Media
Lancaster, CA 93534
Email: mindmademediaav@gmail.com
Phone: (661) 486-2640