Privacy Policy

Last updated: 29 June 2026

This Privacy Policy explains how MindStack (“MindStack”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you visit mindstack.cloud or get in touch with us. We are based in St. Julian’s, Malta, and we process personal data in line with the EU General Data Protection Regulation (GDPR) and the Maltese Data Protection Act.

1. Who we are

MindStack is an AI software studio based in St. Julian’s, Malta. For any privacy-related question or request, you can reach us at hello@mindstack.cloud. MindStack acts as the data controller for the personal data described in this policy.

2. What data we collect

• Information you give us — when you book a call or contact us, we collect your name, email address, and any optional details you provide such as company, phone number, the service you’re interested in, and the message you send.
• Booking data — when you reserve a slot, we create a calendar event and send you a confirmation and invite by email.
• Technical and usage data — basic information such as your IP address, browser type, and how you interact with the site, collected through cookies and similar technologies (see our Cookie Policy).

3. How we use your data

• To respond to your enquiries and schedule and manage calls.
• To provide, operate, and improve our services and website.
• To send you booking confirmations, invites, and related service communications.
• To keep the site secure and prevent abuse.

4. Legal basis for processing

We process your data on the basis of (a) your consent, which you can withdraw at any time; (b) the performance of a contract or steps taken at your request before entering one (for example, arranging a discovery call); and (c) our legitimate interests in running, securing, and improving our business and website, balanced against your rights.

5. Who we share it with

We do not sell your personal data. We share it only with trusted service providers who help us run the site and our services, including:

• Netlify — website hosting and serverless functions.
• Google — calendar scheduling and email confirmations for bookings.

These providers process data on our behalf under appropriate agreements. We may also disclose data where required by law.

6. International transfers

Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect your data.

7. Data retention

We keep personal data only for as long as needed for the purposes set out above, to meet legal or accounting obligations, or to resolve disputes. When it is no longer needed, we delete or anonymise it.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure of your data;
• restrict or object to processing;
• data portability;
• withdraw consent at any time; and
• lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

To exercise any of these rights, email us at hello@mindstack.cloud.

9. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure, but we work to keep your data safe.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top reflects the most recent revision. Significant changes will be highlighted on this page.

11. Contact us

For any questions about this policy or how we handle your data, contact us at hello@mindstack.cloud.