MINDPOSTED PRIVACY POLICY

Last Updated: December 2025 | Effective Date: December 2025

This Privacy Policy ("Policy") describes how Sow Bold LLC, a Wyoming limited liability company ("MindPosted," "Company," "we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use the MindPosted service (the "Service"). This Policy applies to all users of the Service and forms part of our Terms of Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Policy, you must not use the Service.

1. GEOGRAPHIC RESTRICTIONS AND SCOPE

1.1 United States Residents Only

THE SERVICE IS INTENDED EXCLUSIVELY FOR RESIDENTS OF THE UNITED STATES OF AMERICA. We do not intentionally collect, process, or store personal data from individuals located in the European Union, European Economic Area, United Kingdom, Switzerland, or any jurisdiction subject to the General Data Protection Regulation (GDPR), UK GDPR, or similar comprehensive data protection legislation.

1.2 Prohibited Users

If you are a resident of, citizen of, or physically located in the EU, EEA, UK, or any jurisdiction with comprehensive data protection laws similar to GDPR, you are strictly prohibited from using our Service. By using the Service, you represent and warrant that you are not subject to such regulations.

1.3 Unauthorized Access

IF YOU ACCESS THE SERVICE FROM A PROHIBITED JURISDICTION IN VIOLATION OF THESE RESTRICTIONS, YOU DO SO UNLAWFULLY AND IN BREACH OF OUR TERMS OF SERVICE. WE DISCLAIM ALL LIABILITY FOR DATA PROTECTION CLAIMS ARISING FROM SUCH UNAUTHORIZED ACCESS. WE RESERVE THE RIGHT TO TERMINATE ACCOUNTS AND BLOCK ACCESS FROM PROHIBITED JURISDICTIONS WITHOUT NOTICE.

2. INFORMATION WE COLLECT

We collect and process the following categories of personal information:

2.1 Account Information

• Email address (required for account creation)
• Name (if provided)
• Account credentials (hashed and encrypted)
• Subscription and billing information

2.2 Content You Provide

• Voice recordings and audio files
• Text input and documents
• Links to external content (e.g., YouTube URLs)
• Generated content and customization preferences

2.3 Photographs and Biometric Data

If you use our AI avatar generation feature, we collect:

• Photographs (selfies) that you upload
• Biometric Data, including facial geometry, facial features, and facial templates derived from your photographs for the purpose of generating AI avatars

This Biometric Data constitutes biometric identifiers under applicable state laws, including the Illinois Biometric Information Privacy Act (BIPA). By uploading photographs, you provide your informed written consent to the collection and use of your Biometric Data as described in this Policy and our Terms of Service.

2.4 Payment Information

• Payment card information (processed and stored exclusively by Stripe, Inc.)
• Billing address
• Transaction history

Note: We do not store complete payment card numbers on our servers. All payment processing is handled by Stripe pursuant to PCI-DSS standards.

2.5 Device and Usage Information

• IP address
• Device type, operating system, and browser type
• Geographic location (country/region level, derived from IP)
• Pages visited and features used
• Time and date of access
• Referring URLs
• Error logs and performance data

2.6 Communications

• Correspondence with our support team, feedback, and survey responses

3. HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

3.1 Service Provision

• Processing your voice recordings, text, and other inputs into social media content
• Generating AI avatars from your photographs using Biometric Data
• Managing your account and providing customer support
• Processing payments and preventing fraud

3.2 Communications

• Sending transactional emails (account confirmation, password resets, receipts)
• Providing service updates and important notices
• Marketing communications (with your consent, where required)

3.3 Security and Legal Compliance

• Preventing fraud, abuse, and security threats
• Enforcing our Terms of Service
• Complying with legal obligations and responding to lawful requests

4. DATA SHARING AND DISCLOSURE

WE DO NOT SELL YOUR PERSONAL INFORMATION. We may share your information only in the following limited circumstances:

4.1 Service Providers (Subprocessors)

We share information with third-party service providers who assist in operating our Service:

Note regarding advertising SDKs: We use Google Ads and Meta (Facebook) Pixel solely for measuring our own advertising campaign performance. These tools use technical identifiers (such as hashed data and conversion events) for attribution purposes. We do not share personal data for ad targeting or behavioral profiling purposes.

4.2 Legal Requirements

We may disclose information if required by law, court order, subpoena, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity.

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

5. DATA RETENTION

We retain your information for the following periods:

We may retain certain information for longer periods as required by law, to prevent fraud, resolve disputes, or enforce our Terms of Service.

6. DATA SECURITY

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure server infrastructure hosted in the United States
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

6.1 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you via email within 72 hours of becoming aware of the breach, consistent with applicable law. We will also notify appropriate regulatory authorities as required.

7. YOUR RIGHTS AND CHOICES

7.1 Access and Correction

You may access, update, or correct your account information at any time through your account settings or by contacting us at [email protected].

7.2 Account Deletion

You may request deletion of your account by contacting [email protected]. Upon receiving a verified deletion request, we will delete your personal information within 30 days, except for data we are required or permitted to retain by law.

7.3 Marketing Opt-Out

You may opt out of marketing communications by clicking the "unsubscribe" link in any marketing email or by contacting us. Please note that you cannot opt out of transactional or service-related communications.

7.4 Biometric Data Deletion

You may request deletion of your Biometric Data at any time by emailing [email protected]. We will permanently destroy all Biometric Data within 30 days of receiving your verified request.

8. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

8.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of collection, the purposes for collection, and the categories of third parties with whom we share personal information.

8.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

8.3 Right to Correct

You have the right to request correction of inaccurate personal information.

8.4 Right to Opt-Out of Sale/Sharing

We do not sell your personal information. We do not "share" personal information for cross-context behavioral advertising as defined by CPRA.

8.5 Right to Limit Use of Sensitive Personal Information

Biometric Data is considered sensitive personal information under CPRA. We use this data only for the disclosed purpose of avatar generation.

8.6 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

8.7 Exercising Your Rights

To exercise these rights, email [email protected] or submit a request through your account settings. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.

8.8 California "Shine the Light" Law

California Civil Code Section 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

9. NEVADA PRIVACY RIGHTS

Nevada residents may opt out of the sale of certain personal information. We do not sell personal information as defined under Nevada law. If you wish to submit a request, email [email protected].

10. COOKIES AND TRACKING TECHNOLOGIES

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Service to function (authentication, security, preferences)
• Analytics Cookies: Help us understand how users interact with the Service (Datadog)
• Advertising Cookies: Used to measure the effectiveness of our advertising campaigns (Google Ads, Meta Pixel) — these are used for our own advertising measurement only, not for behavioral targeting

10.2 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may prevent certain features of the Service from functioning properly.

10.3 Do Not Track

Our Service does not respond to "Do Not Track" browser signals. There is no uniform standard for responding to such signals, and we do not alter our data collection practices based on these signals.

11. CHILDREN'S PRIVACY

The Service is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at [email protected].

12. INTERNATIONAL DATA TRANSFERS

All data is stored and processed in the United States. By using the Service, you consent to the transfer of your information to the United States and the processing of your information in the United States.

If you are accessing the Service from outside the United States in violation of our Terms of Service, you acknowledge that any data you submit will be transferred to and processed in the United States, and you accept the risks associated with such transfer. We are not responsible for the level of data protection in your jurisdiction.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on our website with a new "Last Updated" date and, for material changes, by sending an email to the address associated with your account. Your continued use of the Service after any changes constitutes your acceptance of the updated Policy.

14. CONTACT INFORMATION

For questions about this Privacy Policy, or to exercise your privacy rights, contact us at:

Sow Bold LLC (dba MindPosted)
5830 E 2nd St, Ste 7000 #26126
Casper, Wyoming 82609
United States

Privacy Inquiries: [email protected]
Response Time: We aim to respond to all privacy-related inquiries within 30 days.