Legal

Privacy policy

How CircuMind Ltd handles your information when you use CircuProbe Insight, your CircuProbe account and this website.

DRAFT — for legal reviewThis policy is a working draft and has not yet been reviewed by a lawyer. Wording in [square brackets] is still to be confirmed.

Last updated: 12 October 2026

Who we are

CircuMind Ltd is the data controller for the information described here. We are a company registered in England & Wales (company number 17425654). Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. [ICO registration number: to be added.]

Questions about this policy or your information: support@circumind.co.uk

What this policy covers

  • The Insight AI subscription — the subscription that turns a CircuProbe Vision into CircuProbe Insight and a Studio into CircuProbe Insight Pro, including the CircuProbe app when it connects to Insight.
  • Your CircuProbe account at api.circumind.co.uk, where you sign up, manage your subscription and boards, and delete your account.
  • This website (circumind.co.uk) and orders for CircuProbe hardware.

What we store for Insight

We keep only what we need to run your account and subscription:

  • Your e-mail address — to log you in and contact you about your account.
  • Your password, scrambled — stored only as a one-way hash. We cannot read it.
  • Your account key, scrambled — the key you paste into the CircuProbe app. It is shown to you once and then stored only as a hash.
  • Board IDs — the identifier of each CircuProbe board used with your subscription, with the dates it was first and last seen, so a subscription is used on the boards it covers.
  • Daily usage counts — for each day, the number of requests and the amount of text processed. These are numbers only, used for fair-use limits.
  • Subscription details — your Stripe customer ID, whether your subscription is active, monthly or yearly, and when the paid period ends.

When you log in, the account site sets one cookie (cp_session) to keep you logged in. It is strictly necessary for the site to work. We use no advertising or tracking cookies.

Like any web server, ours keeps technical logs — the IP address, time and address of each request — for security and troubleshooting. They are kept for [up to 30 days — to confirm].

What we do not store

We do not store your questions, your board pictures or the answers. When you ask Insight something, our server passes the question (and a board picture, if you include one) to the AI provider that answers it, sends the answer back to your app, and then discards both. Only the daily counts above are kept.

The provider that answers is Google (Gemini), or OpenAI or Anthropic where we have turned their models on. They process the request to produce the answer, under their terms for paid business API use. [Legal review: confirm each provider's current retention and model-training terms before publishing.]

Please don't put other people's personal information in your questions or pictures.

Payments

Payments are handled by Stripe. You enter your card details on Stripe's pages, and we never see or store your card number. Stripe tells us your customer ID, the plan you chose and whether payments succeed. Stripe also uses your payment information under its own privacy policy.

Buying CircuProbe hardware

When you order hardware on this website, Stripe takes the payment and passes us your name, e-mail address, delivery address and order details so we can send your order and handle any return. This website itself sets no cookies and uses no analytics or tracking.

Why we use your information (lawful basis)

  • To provide your account and Insight, and to bill you — this is needed for our contract with you.
  • Fair-use limits, security logs and preventing misuse — our legitimate interest in keeping the service safe and fair for everyone.
  • Keeping payment and order records — our legal obligations under UK tax and company law.

Who we share it with

  • Stripe — payments and the billing portal.
  • AI providers — Google, and OpenAI or Anthropic where enabled — only the content of each request, to answer it.
  • Oracle Cloud — hosts our server in its London region.

We do not sell your information or use it for advertising.

Some of these providers may process information outside the UK, including in the United States. Where they do, the transfer is protected by safeguards recognised under UK data protection law. [Legal review: name the mechanism for each provider, e.g. the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.]

How long we keep it

  • Account information — for as long as you have an account.
  • When you delete your account — your account, board IDs and usage counts are removed from our database straight away. Our nightly server backups are kept for 14 days, so the data is gone from them within 14 days. [Off-server backup retention: to confirm.]
  • Payment and order records — for as long as UK tax and company law requires (normally six years). Stripe keeps its own payment records.

Deleting your account

Log in at api.circumind.co.uk/dashboard and choose Delete account. If you still have a running subscription, cancel it first under Manage billing. You can also ask us by e-mail at support@circumind.co.uk.

Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you have the right to:

  • get a copy of the information we hold about you;
  • have it corrected if it is wrong;
  • have it deleted;
  • restrict or object to how we use it;
  • receive it in a portable format.

To use any of these rights, e-mail support@circumind.co.uk. We will reply within one month. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to put things right first.

Changes to this policy

If we change this policy we will update this page and the date at the top. If a change affects how we use information we already hold, we will e-mail account holders before it takes effect.