Privacy Policy
Last updated: July 4, 2026. This English-language policy applies to users in the United States, including the notices required by the California Consumer Privacy Act, as amended by the CPRA (collectively, "CCPA"), and comparable state privacy laws (e.g., Virginia, Colorado, Connecticut, Utah).
EquiMind is a live production service operated by Digit2AI [legal entity, U.S. state of formation, address]. Privacy contact: [privacy@equimind.app].
1. Personal information we collect
Over the past 12 months we have collected the following categories of personal information:
- Identifiers & account data: email, display name, and a securely hashed password.
- Commercial information: credits purchased and transaction history. Payments are processed by Stripe; we do not store full card numbers, only transaction references, amounts, and status.
- User content: audio, video, and/or images you submit, plus horse details (name, sex, coat, breeder) and the gait metrics derived from your uploads.
- Internet/technical activity: IP address (for security and rate-limiting), an authentication cookie (
ecpf_token), and server logs.
We collect this information directly from you and automatically as you use the Service.
2. How we use it
To create and secure your account; run the gait analyses you request; process payments and credits; generate and, at your choice, share reports; provide support; ensure security and prevent fraud/abuse; and comply with legal obligations. We do not use your information for automated decision-making that produces legal or similarly significant effects about you.
3. How we disclose it
We disclose personal information only to service providers who help us operate the Service under written contracts restricting their use of it — notably Stripe (payment processing) and Render (cloud hosting) — and when required by law or to protect our rights.
4. We do NOT sell or "share" your personal information
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not done so in the preceding 12 months, including for consumers under 16.
5. Your U.S. privacy rights
Depending on your state of residence, you may have the right to:
- Know / access the personal information we have collected about you and how we use and disclose it.
- Delete personal information we collected from you, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of any sale or "sharing" of personal information (note: we do not sell or share).
- Limit the use of sensitive personal information (we do not use sensitive PI beyond permitted purposes).
- Non-discrimination for exercising your rights.
To exercise these rights, email [privacy@equimind.app]. We will verify your request using your account information and respond within the time required by law (generally 45 days, extendable). You may use an authorized agent, subject to verification. If we decline a request, you may appeal by replying to our response.
6. California "Shine the Light" & Do Not Track
We do not disclose personal information to third parties for their own direct-marketing purposes (Cal. Civ. Code §1798.83). Because there is no consistent industry standard, we do not respond to browser "Do Not Track" signals; we do treat recognized opt-out preference signals where required by law.
7. Retention
We keep account and analysis data for as long as your account is active and thereafter only as required to meet legal, accounting, or dispute-resolution obligations, after which it is deleted or de-identified. Video is not stored on our servers; audio is analyzed and the resulting metrics (not the raw file) are what we retain, together with a limited set of pose keypoints for traceability.
8. Security
We apply reasonable technical and administrative safeguards: password hashing, HTTPS, HttpOnly/Secure authentication cookies, rate limiting, and access controls. No system is completely secure, but we work to protect your information.
9. Cookies
We use a strictly necessary authentication cookie (ecpf_token) to keep you signed in. It is not used for advertising or cross-site tracking.
10. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (COPPA). If you believe a child provided us information, contact [privacy@equimind.app] and we will delete it.
11. Data location
We and our providers process and store data on servers located in the United States.
12. Changes
We may update this policy; the current version is always published here with its date.