Privacy Policy

Last Updated: December 2025 — Your privacy is not for sale.

Our Privacy Promise

  • We will NEVER sell your personal data — not to advertisers, data brokers, or anyone else
  • Your research and work are private by default — only you control who sees them
  • We will NEVER share your data with third parties unless you explicitly choose to share
  • We use industry-standard encryption to protect your information

1. Introduction

This Privacy Policy explains how BESTOFMINE ("CleverGraph", "we", "us", "our") collects, uses, protects, and shares information when you use our platform and services. We are committed to protecting your privacy and handling your data with transparency and care.

Our Guiding Principle: We collect only what we need to provide our services, we protect everything we collect, and we never monetize your personal data or research.

2. Information We Collect

Information You Provide

  • Account Information: Name, email address, password (encrypted)
  • Profile Information: Optional details like company name, role
  • Research Content: Queries, data uploads, visualizations, saved projects
  • Payment Information: Processed securely by Stripe/PayPal — we never store your full card number
  • Communications: Support tickets, feedback, correspondence with us

Information Collected Automatically

  • Usage Data: Features used, pages visited, actions taken (for improving our product)
  • Device Information: Browser type, operating system, device type
  • Log Data: IP address, timestamps, error logs (for security and debugging)
  • Cookies: Essential cookies for functionality and security (see Cookie section)

What We DON'T Collect: We don't collect sensitive personal information like racial/ethnic origin, political opinions, religious beliefs, health data, or biometric data. We don't track your location with GPS. We don't read your private communications.

3. How We Use Your Information

We use your information only for the following purposes:

Essential Services

  • Providing, maintaining, and improving CleverGraph
  • Processing your research queries and generating visualizations
  • Managing your account and subscription
  • Processing payments and sending receipts
  • Providing customer support

Security & Integrity

  • Detecting and preventing fraud, abuse, and security threats
  • Enforcing our Terms of Service
  • Debugging errors and improving reliability
  • Protecting your account and our platform

Communication

  • Sending essential service notifications (password resets, security alerts)
  • Sending product updates and new feature announcements (opt-out available)
  • Responding to your inquiries and support requests

4. How We Share Your Information

We Do NOT Sell Your Data

We have never sold personal data and never will. Your data is not a product. We make money by providing valuable research tools, not by selling your information.

Limited Sharing (Only When Necessary)

We share data only in these specific circumstances:

  • When You Choose to Share: If you make your research public or share with team members, that content becomes visible to those you've shared with.
  • Service Providers: We use trusted providers (Stripe for payments, cloud hosting for infrastructure) who are contractually bound to protect your data and use it only to provide services to us.
  • AI Processing: Your queries are sent to AI providers (OpenAI, Anthropic, Google) to generate research results. These providers are bound by strict data processing agreements and do not train on your data.
  • Legal Requirements: We may disclose information if required by valid legal process (court order, subpoena, regulatory request). We will notify you unless legally prohibited.
  • Safety: If necessary to prevent imminent harm to individuals or protect our legal rights.
  • Business Transfer: In the event of a merger or acquisition, your data would be transferred under the same privacy protections.

Important: AI Provider Data Handling

When you use AI research features, your queries are processed by third-party AI providers. These providers have committed to:

  • Not using your data to train their models
  • Not retaining your data longer than necessary to process requests
  • Implementing appropriate security measures

5. Your Privacy Rights & Controls

You have comprehensive rights over your data. Here's how to exercise them:

Access & Portability

Request a copy of all your data in a portable format (JSON/CSV).

Correction

Update or correct any inaccurate personal information.

Deletion

Request permanent deletion of your account and all associated data.

Opt-Out

Unsubscribe from marketing emails at any time via email preferences.

To exercise any of these rights, contact us at privacy@bestofmine.com. We will respond within 30 days.

6. Data Security

We implement comprehensive security measures to protect your data:

Technical Safeguards

  • Encryption at Rest: All stored data is encrypted using AES-256
  • Encryption in Transit: All data transmission uses TLS 1.3
  • Password Security: Passwords are hashed using bcrypt with strong salting
  • Access Controls: Strict role-based access to production systems
  • Audit Logging: Comprehensive logging of system access and changes

Operational Safeguards

  • Regular security assessments and penetration testing
  • Secure development practices and code review
  • Employee security training and background checks
  • Incident response procedures
  • Regular data backups with encryption

Security Disclosure: If you discover a security vulnerability, please report it responsibly to security@bestofmine.com. We appreciate your help in keeping CleverGraph secure.

7. Data Retention

We retain your data only as long as necessary:

  • Active Account: Data is retained while your account is active
  • After Deletion Request: Personal data is deleted within 30 days
  • Backups: Removed from backups within 90 days
  • Legal Holds: Data may be retained longer if required by law or legal proceedings
  • Anonymized Data: Aggregated, non-identifiable analytics may be retained indefinitely

8. Cookies & Tracking

We use minimal, essential cookies:

  • Authentication Cookies: Keep you logged in securely
  • Security Cookies: Protect against CSRF and other attacks
  • Preference Cookies: Remember your settings (theme, language)
  • Analytics: Anonymous usage statistics to improve our product (no personal data)

No Advertising Trackers: We do NOT use third-party advertising cookies, retargeting pixels, or cross-site tracking. We don't sell ads and we don't track you across the web.

9. International Data & Compliance

GDPR (European Users)

If you're in the EU/EEA, you have additional rights under GDPR:

  • Right to lodge a complaint with a supervisory authority
  • Right to object to automated decision-making
  • Right to data portability in machine-readable format

Legal basis for processing: Contract performance (providing our services), legitimate interests (security, product improvement), and consent (marketing communications).

CCPA (California Users)

California residents have additional rights under CCPA:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information (we don't sell data)
  • Right to non-discrimination for exercising your rights

International Transfers

Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards through standard contractual clauses and data protection agreements with all service providers.

10. Children's Privacy

CleverGraph is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. For material changes, we will:

  • Provide at least 30 days advance notice via email
  • Display a prominent notice on our platform
  • Update the "Last Updated" date at the top

Your continued use after the effective date constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions, concerns, or requests:

We respond to all privacy requests within 30 days.

Your Trust Matters

Privacy isn't just a policy — it's a promise. We built CleverGraph to empower your research, not to exploit your data. Your work is yours. Your data is yours. We're honored that you trust us with it, and we're committed to protecting that trust. If you ever have concerns, please reach out — we're listening.