Privacy Policy

Who operates YaviMind

YaviMind is owned and operated by Atlas Studio Digital. Privacy and account-data requests can be sent to hello@yavimind.io.

Information we collect

Account and authentication information

When you register, we store your name, email address, verification status and account creation time. One-time login codes are stored as one-way hashes, expire after 10 minutes and are removed after use or repeated failed attempts.

Mind maps and sharing

We store each map's title, nodes, connections, layout, revision information and update times so maps can save and synchronize. When a map is shared, we store the invited email address and allow that signed-in user to view and edit the map.

Technical and security information

The service uses IP-address-based rate-limit records to prevent login-email abuse and repeated code attempts. These records are cleaned opportunistically after 24 hours. Server logs may also contain standard request information needed for security and troubleshooting.

Donations

For an optional donation, we store the donor name and email, chosen amount, converted MYR amount, Billplz bill identifier, payment status, transaction identifier and relevant timestamps. Billplz processes the payment information on its secure checkout; YaviMind does not receive full card or bank credentials.

Cookies, local storage and analytics

• YAVIMIND: a secure, HTTP-only session cookie used to keep you signed in.
• YAVIREMEMBER: a secure, HTTP-only token cookie that can restore your sign-in for up to 30 days.
• Local onboarding preference: a browser local-storage flag records whether the introductory tip has been shown.
• Google Analytics: Google Tag Manager and Analytics load after you interact with the page or after an eight-second idle delay. Google may then set analytics identifiers and process device, referral and usage information under Google's own terms.

How we use information

• create and secure accounts;
• send requested sign-in and sharing emails;
• save, synchronize and share maps;
• prevent misuse and diagnose service problems;
• process and confirm optional donations; and
• understand aggregate site use and improve YaviMind.

YaviMind does not sell personal information.

When information is shared

Information is shared only as needed with hosting and email infrastructure, Google Analytics and Tag Manager, Billplz for donation checkout, people you explicitly invite to a map, and authorities or advisers when required to protect rights, security or comply with applicable obligations.

Retention and your choices

Account and map information remains available while the account is active. Map owners can delete individual maps in the app. To request account closure, a copy of applicable account information, correction or deletion, email hello@yavimind.io from the account address so the request can be verified.

Donation records may be retained as needed for payment reconciliation, fraud prevention and recordkeeping. Analytics retention is controlled through the connected Google Analytics property.

Your privacy requests

Depending on the law that applies, you may ask whether YaviMind processes your personal information, request access to or correction of it, withdraw consent where processing relies on consent, or ask us to stop or delete certain processing. Send the request from your account email to hello@yavimind.io. We may need to verify your identity and may retain information where an applicable obligation or security need requires it.

For general information about Malaysian data-subject rights, see the Personal Data Protection Department.

Security and changes

YaviMind uses HTTPS, secure HTTP-only authentication cookies, hashed one-time codes, request limits and restricted server-side data storage. No online service can guarantee absolute security.

Material policy changes will be published on this page with a new effective date. Questions can be sent through the contact page.

This page describes the service's current technical behavior and is not a promise that the service will never change.