Start researching

Legal

Privacy Policy

MODELRECS, LLC

Effective date: To be confirmed before publication

Legal review draft. MindVast | Updated legal draft | 14 October 2026. This document is under final review and is not yet final contractual language.

This Privacy Policy describes how MODELRECS, LLC ("Modelrecs," "we," "us," or "our") collects, uses, discloses, and protects personal information in connection with MindVast, including mindvast.co and its research workspace (the "Service"). MindVast is a product operated by MODELRECS, LLC. This Policy applies to visitors, account holders, subscribers, and people who contact us. It does not govern independent websites, scholarly publishers, or other services linked from MindVast.

Depending on how you use the Service, we may collect your name, email address, account profile information, authentication-related identifiers, research questions and follow-up questions, saved research packets and history, messages sent through contact or support forms, and information you provide when requesting account assistance or exercising privacy rights. Avoid including unnecessary sensitive personal information or third-party confidential material in research questions or contact messages.

We may process account identifiers, research job and entitlement status, timestamps, usage events, security and fraud-prevention signals, IP address, approximate location derived from IP address, device and browser characteristics, and operational logs. We use such information to operate, secure, troubleshoot, and improve the Service. We do not represent that we collect precise GPS location. The exact analytics, cookies, and logging tools in use must be verified before publication.

If you purchase a subscription, Stripe or another disclosed payment processor may collect payment details directly. We may receive customer and subscription identifiers, payment status, plan details, invoices, and limited billing metadata needed to manage access and support. We do not intend to store full payment-card numbers in the MindVast application; this statement must be confirmed against the production payment implementation before publication. Payment processors handle information under their own applicable privacy notices.

We process research questions and relevant context to retrieve scholarly information and generate AI-assisted research packets. To provide the Service, we may transmit the content of your research request, relevant source excerpts or metadata, and technical request information to third-party AI model providers, including OpenAI where configured, and to scholarly data services such as OpenAlex. A model provider is a company whose AI systems process information to produce the research analysis you request. Such providers process information under their own service agreements, security measures, retention periods, and applicable data-processing terms. We store generated packets and research history for your workspace while the relevant subscription remains active. We do not automatically publish private research questions or research history as public examples. We do not promise that third-party providers retain no information or never use data for model improvement unless their actual applicable terms and settings establish that. Specific provider practices and contractual safeguards should be confirmed against the production configuration.

MindVast uses scholarly discovery resources, including OpenAlex where implemented, and may link to publishers, repositories, DOI services, or other third-party sources. Requests to external services may disclose limited request information and technical metadata as needed to retrieve results. Visiting a third-party website directly subjects you to that site's own privacy practices. We do not control the accuracy or privacy policies of third-party sources.

We use information to provide research analyses and saved history; create and authenticate accounts; apply complimentary and paid entitlements; process payments and cancellations; answer inquiries; provide important service communications; prevent abuse, fraud, and unauthorized access; diagnose failures; maintain service reliability; comply with law; and defend legal rights. We do not assume that submitting a research question grants permission to publish it or use it in advertising. Optional marketing, if introduced, should be subject to applicable choice and notice requirements.

Where European Economic Area or United Kingdom data-protection law applies, the legal basis for processing may include performance of a contract (accounts, research analyses, subscriptions), legitimate interests (security, fraud prevention, service improvement where appropriately balanced), compliance with legal obligations (financial and legal records), and consent where required (certain optional cookies or marketing). The applicable basis depends on the specific processing activity and jurisdiction. Any required additional disclosures or transfer arrangements should be confirmed before making the Service available in those jurisdictions.

We may disclose information to providers that support hosting, databases, authentication, AI processing, scholarly data retrieval, payments, email delivery, support, security, and analytics, but only as relevant to the Service and applicable arrangements. We may also disclose information where required by law, to protect rights and safety, or as part of a merger, acquisition, financing, or asset transfer subject to appropriate safeguards. We do not authorize public access to private research history merely because a research example appears on the public website. Whether any activity constitutes a "sale" or "sharing" under a particular privacy statute must be assessed against actual advertising and analytics practices; do not assert an unverified categorical position.

The Service may use essential cookies or browser storage to maintain authentication sessions, preserve navigation state, support security, and remember preferences. If analytics or nonessential tracking technologies are enabled, their purposes, providers, and available choices should be disclosed and any required consent collected. Browser settings may permit you to restrict cookies, although some essential features may stop working. A production cookie and tracker audit is required before final publication of this section.

Research questions and packets associated with your account are intended for your authenticated workspace and authorized operational access, not general public display. Authorized personnel or service providers may access information where reasonably necessary for support, security, maintenance, or lawful compliance. Public research examples are editorially selected and should be derived from approved, sanitized copies rather than unrestricted access to private account records. No online service can promise absolute confidentiality or security.

We retain research questions, generated research packets, and associated research history in active application storage during the applicable paid subscription period. If you cancel your paid subscription, paid access generally continues until the end of the already-paid period; at that point, we delete those associated research materials from active application storage. This does not necessarily mean that every copy is immediately erased from encrypted backups, processor systems, or legally required records. We may retain limited account identifiers, subscription and transaction records, fraud-prevention or complimentary-access eligibility records, security logs, and records needed to comply with law, resolve disputes, or protect the Service, for as long as reasonably necessary or legally required. Third-party service providers may retain request or operational data under their own applicable terms. We will honor applicable deletion rights, subject to lawful exceptions. Backup expiration and provider retention periods must be verified against production operations; do not interpret this section as a promise of immediate deletion from every system.

We use administrative, technical, and organizational safeguards appropriate to the nature of the information and the Service, which may include access controls, encrypted connections, restricted administrative privileges, and monitoring for abuse. No method of transmission or storage is completely secure. Please contact us if you suspect unauthorized account access. Specific security claims must be confirmed against the deployed environment.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information; to object to or restrict certain processing; to withdraw consent where consent is the legal basis; and to appeal a decision or complain to a regulator. We may verify your identity before fulfilling a request and may decline or limit requests where law permits or requires. Send requests to info@modelrecs.com. We will respond within applicable legal deadlines. If self-service deletion or export tools are not available, you may use the contact channel.

Modelrecs and its service providers may process information in the United States and other countries where they operate. Laws in those locations may differ from those where you live. Where applicable law requires safeguards for international transfers, we will use an appropriate legal mechanism. We do not claim participation in the obsolete EU--U.S. Safe Harbor program or any other certification without current verification.

MindVast is intended for adults and is not directed to children. We do not knowingly seek personal information from children under 13. If you believe a child has provided personal information, contact info@modelrecs.com so we can investigate and take appropriate action. The account eligibility standard is stated in the Terms of Use.

We may send authentication messages, receipts, subscription notices, service updates, security alerts, and responses to support requests. These operational communications are distinct from optional promotional communications. If we introduce marketing email, we will provide applicable notice and unsubscribe options. You may not be able to opt out of communications strictly necessary to administer an active account or comply with law.

We may update this Policy as practices, providers, features, or legal requirements change. We will publish the revised Policy with an effective date and provide additional notice when required. A material change in data use may require additional choices or consent under applicable law.

For privacy questions or rights requests, contact MODELRECS, LLC at info@modelrecs.com or mindvast.co/contact. Terms of Use: mindvast.co/terms. Privacy Policy: mindvast.co/privacy.

See also the Terms of Use or contact us.