Privacy Policy

Last updated: February 10, 2026

Overview

Mimir is built for organisations that operate in sensitive markets. We minimise the data we collect, avoid selling personal or usage data, and design our systems to protect customer confidentiality. This policy explains what we collect, how we use it, and the choices you have.

Mimir primarily presents intelligence derived from publicly available US Government records and other lawful open sources. This data is distinct from your private account and usage data.

What we collect

Account information

When you create an account we may collect your name, email address, password (hashed), and basic organisational information you provide (e.g., company name). If you choose SSO in the future, we may receive identifiers from your identity provider.

Billing information

Payments are processed by a third-party payment processor (e.g., Stripe). We do not store full card numbers. We may store billing contact details, subscription status, invoices, and transaction IDs.

Usage data (minimised)

To operate and secure the service we collect limited technical and usage data such as IP address, device/browser metadata, approximate location (inferred), pages/screens viewed, and feature usage. We use this to improve reliability, prevent abuse, and understand aggregate product performance.

Support communications

If you contact support, we will receive the content you send and metadata required to respond. Please do not send sensitive, export-controlled, proprietary, or classified information through support channels.

What we do not collect

We do not ask you to upload confidential customer lists, proposals, pricing strategies, or any classified information.
We do not intentionally collect special-category personal data (e.g., health, biometric, precise location).
We do not sell your personal information or identifiable usage data to third parties.

How we use information

Provide, maintain, and secure the service (authentication, access control, fraud prevention).
Process subscriptions and manage billing.
Monitor performance and reliability (aggregate analytics).
Respond to support requests.
Comply with legal obligations and enforce our Terms.

Confidentiality and sensitive industries

We understand that defence and dual-use industries operate under heightened confidentiality expectations. We therefore:

Minimise collection and retention of fine-grained user activity logs where feasible.
Limit internal access to customer data to those who need it for operations/support.
Aim to keep analytics aggregated and non-identifying whenever possible.
Do not publish customer names, logos, or case studies without permission.

Sharing information

We share information only in limited circumstances:

Service providers: hosting, analytics, payments, and support tooling, under confidentiality obligations.
Legal/safety: if required by law, to protect rights, prevent fraud/abuse, or respond to lawful requests.
Business transfer: in a merger, acquisition, or asset sale, with appropriate protections.

We do not share identifiable customer usage patterns with advertisers.

Cookies and analytics

We use essential cookies to keep you signed in and to operate the service. We may use limited analytics to understand aggregate usage and performance. Where possible, we configure analytics to reduce collection and avoid unnecessary identifiers.

Data retention

We retain account and billing data for as long as your account is active, and for a reasonable period after closure for legal, tax, audit, and security purposes. We retain technical logs for shorter periods unless needed to investigate abuse or maintain security.

Security

We use administrative, technical, and organisational safeguards designed to protect data, including access controls, encryption in transit, and least-privilege internal access. No method of transmission or storage is perfectly secure, but we work to continually improve protections.

Your choices and rights

Access/update account information (via account settings where available).
Request deletion of your account (subject to legal retention requirements).
Opt out of non-essential marketing emails.

If you operate under strict internal policies, contact us for options around logging minimisation and contractual confidentiality arrangements.

Contact

Questions about this Privacy Policy? Contact: support@mimiradvisors.com