Privacy Policy

Mastermind Panel is a free test project run by one person (Aquila Heman Senanayake Mudiyanselage), not a company with a dedicated privacy/security team. This policy explains plainly what is collected and why, and what you can ask to have removed.

1. What's Collected

• Account info: your email address and a hashed (not plaintext) password.
• Content you provide: project names/descriptions, decision topics, context you type, and any documents you upload.
• Generated content: the AI panel's responses, chat messages, and any deliverables (PDF/PPTX) created from a meeting.
• Usage records: which models were used, token counts, and computed cost, used to track spend on the Free/Pro tiers.

2. Third-Party AI Providers

To generate a response, whatever you type (plus any document text and, for the free tier, general public page content if you mention a URL) is sent to OpenRouter, which routes it to an underlying model provider (which may include Anthropic, OpenAI, Google, Meta, or others depending on the role/tier). Those providers process your input under their own terms and privacy practices, which are outside our control. Don't enter or upload anything you wouldn't want processed by a third-party AI system — including government ID numbers, payment details, or other highly sensitive personal data.

3. How It's Used

Solely to operate the service: running your meetings, keeping your project/meeting history, generating deliverables, and tracking API cost. Nothing is sold, and nothing is used for advertising — there is no advertising on this site.

4. How Long It's Kept

Your data is kept for as long as your account exists, so your project and meeting history stays available to you. If you delete a project, its documents and meetings are deleted with it. If you want your entire account and all associated data removed, contact the email below and it will be deleted.

5. Your Rights

You can ask, at any time, to: see what's stored about you, correct it, export it, or delete it entirely. Email aquila2heman@gmail.com and this will be handled directly — there's no automated self-service flow yet since this is a small test project.

6. Security

Reasonable, standard precautions are used (hashed passwords, access restricted to the operator), but this is a project run by one person on a single server, not an enterprise security team with formal audits or certifications. Treat it accordingly — don't store anything in it you couldn't afford to have exposed in a worst-case breach.

7. Cookies / Sessions

A single session cookie is used to keep you logged in. There is no tracking, analytics, or advertising cookies.

8. Children

This service is not directed at, or intended for, anyone under 18.

9. Changes to This Policy

This policy may be updated as the project develops. Material changes will be reflected here with an updated date.

10. Contact

Questions or requests: aquila2heman@gmail.com