Privacy Policy

Overview

MIMIR ADVISORS LIMITED is the controller of personal information processed through Mimir. Mimir is built for organisations that operate in sensitive markets. We minimise the data we collect, avoid selling personal or usage data, and design our systems to protect customer confidentiality. This policy explains what we collect, how we use it, and the choices you have.

Mimir primarily presents intelligence derived from publicly available US Government records and other lawful open sources. This data is distinct from your private account and usage data.

What we collect

What we do not collect

• We do not ask you to upload confidential customer lists, proposals, pricing strategies, or any classified information.
• We do not intentionally collect special-category personal data (e.g., health, biometric, precise location).
• We do not sell your personal information or identifiable usage data to third parties.

How we use information

• Provide, maintain, and secure the service (authentication, access control, fraud prevention).
• Process subscriptions and manage billing.
• Monitor performance and reliability (aggregate analytics).
• Understand feature use, user journeys and interactions so we can improve Mimir.
• Review Ask Mimir questions, answers and feedback to evaluate and improve answer quality.
• Respond to support requests.
• Comply with legal obligations and enforce our Terms.

Why we process information

We process account, service and billing information to perform our contract with you and provide the Service. We process security, reliability, service-quality and product-improvement information where necessary for our legitimate interests in operating and improving Mimir. We use consent where required for optional analytics and keep campaign attribution as a separate choice. We may also process information where required to comply with law.

Confidentiality and sensitive industries

We understand that defence and dual-use industries operate under heightened confidentiality expectations. We therefore:

• Minimise collection and retention of fine-grained user activity logs where feasible.
• Limit internal access to customer data to those who need it for operations/support.
• Aim to keep analytics aggregated and non-identifying whenever possible.
• Do not publish customer names, logos, or case studies without permission.

Optional email updates

If you opt in, we send research updates, updates about Mimir capabilities and defense market news using Loops. We share your email address, account identifier, plan and subscription status, consent state, signup date and broad acquisition source, and basic activation and latest meaningful activity timestamps. We do not send your research questions, record history or watchlists to our marketing email provider. You can unsubscribe using any marketing email or change your preference in Settings. Account verification and password reset emails are separate and continue through our authentication email provider.

Sharing information

We use carefully selected service providers to operate Mimir. Depending on the feature used, these may include providers of hosting and infrastructure, authentication, payment processing, AI processing, analytics and campaign measurement, communications, and security. They may process information only as needed to provide services to us, subject to contractual and legal safeguards. We may also disclose information in these limited circumstances:

• Legal/safety: if required by law, to protect rights, prevent fraud/abuse, or respond to lawful requests.
• Business transfer: in a merger, acquisition, or asset sale, with appropriate protections.

We do not share identifiable customer usage patterns with advertisers.

Cookies and analytics

Essential cookies and browser storage keep you signed in, retain security and consent preferences, and operate the Service. In the UK we may use limited first-party statistical measurement by default, with an immediate right to object. In the US we use disclosed first-party product analytics by default, including a first-party browser identifier, interaction events, referrer and campaign parameters; you can opt out in Privacy Choices. In the EEA and other strict or unknown jurisdictions, non-essential measurement remains off until you consent. Campaign measurement remains a separate choice and a detected Global Privacy Control signal disables it. Session replay remains disabled. During registration, a random tab-scoped diagnostic ID links repeated form submissions and technical results for up to 24 hours in the browser; it contains no email address or password. You can change or withdraw a choice at any time using the persistent Privacy Choices control.

Data retention

We retain account and billing data for as long as your account is active, and for a reasonable period after closure for legal, tax, audit, and security purposes. We retain technical logs for shorter periods unless needed to investigate abuse or maintain security. Anonymous statistical and acquisition records are scheduled for deletion after 90 days; consent and product analytics records after 13 months, unless a shorter period is required or a record must be preserved for security, fraud, legal or billing purposes. Ask Mimir quality-review records are retained with product analytics for up to 13 months; conversation history and evidence references may be retained while needed to provide the feature. You may request deletion, subject to legal, security and billing-record requirements.

International processing

Mimir and its service providers may process information in the United Kingdom, United States and other countries where they operate. Where required, we rely on contractual and other recognised safeguards for international transfers.

Security

We use administrative, technical, and organisational safeguards designed to protect data, including access controls, encryption in transit, and least-privilege internal access. No method of transmission or storage is perfectly secure, but we work to continually improve protections.

Your choices and rights

• Ask for access to, correction of, or a copy of your personal information.
• Request deletion or restriction of processing, subject to legal retention requirements.
• Object to processing based on legitimate interests and withdraw consent at any time.
• Ask for portable account information where the right applies.
• Opt out of non-essential marketing emails.

You may also complain to the UK Information Commissioner's Office or the data-protection authority where you live. Contact us to exercise a right or ask about how it applies.

Contact

Questions about this Privacy Policy? Contact: support@mimiradvisors.org