Personal Data Processing Policy

1. General Provisions

This Personal Data Processing Policy (hereinafter — the Policy) has beendeveloped for the website mindlyflow.com and defines theprocedure for processing and protecting users' personal data in accordancewith Federal Law No. 152-FZ "On Personal Data".

The personal data operator is the owner of the website mindlyflow.com — anindividual (hereinafter — the Operator).

2. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

• user registration and provision of access to the personal account;
• user identification when using the website services;
• balance and token transaction tracking;
• payment processing and crediting of purchased tokens;
• sending service notifications (about registration, payments, token balance);
• sending marketing and informational newsletters (news, promotions, serviceupdates);
• user behavior analytics and improvement of website performance;
• compliance with the requirements of the legislation of the Russian Federation.

3. List of Personal Data

The Operator may process the following personal data:

• last name, first name;
• email address;
• phone number;
• account data (username, encrypted password);
• payment information (without storing bank card data);
• other data provided by the user during registration and use of the personalaccount.

4. Legal Basis for Processing

Personal data processing is based on:

• consent of the personal data subject;
• the need to fulfill contractual obligations;
• requirements of the legislation of the Russian Federation.

5. Processing Procedure and Conditions

Personal data processing is carried out with or without the use ofautomation tools. The Operator takes the necessary legal, organizational,and technical measures to protect personal data from unauthorized access.

6. Data Storage and Transfer

Personal data is stored no longer than necessary for processing purposes orwithin the time limits established by the legislation of the RussianFederation.

Payment by bank cards is made through payment providers. The Operator doesnot store or process users' full bank card data.

Transfer of personal data to third parties is permitted in the followingcases:

• to payment systems — for payment processing;
• to email newsletter services — for sending notifications and emails;
• to web analytics services — in anonymized form;
• upon request of authorized government bodies.

7. Rights of the Personal Data Subject

The user has the right to:

• receive information about their personal data;
• request clarification, blocking, or deletion of data;
• withdraw consent to personal data processing.

8. Contacts

Personal data operator:

Андреев Павел Андреевич

Email: mindlyaiowner@gmail.com

For questions about personal data processing, the user can contact us usingthe details provided on the mindlyflow.com website.