Privacy Policy

LeadersMind GmbH ("LeadersMind", "we") operates an Executive Intelligence Platform. This policy describes how we process personal data when you use the platform. It applies in accordance with the EU General Data Protection Regulation (GDPR / DSGVO).

The controller responsible for processing (Art. 4(7) GDPR) is: LeadersMind GmbH, [address], Germany — privacy@leadersmind.com.

Data protection officer: privacy@leadersmind.com. [Where appointment is required under Art. 37 GDPR, provide name and postal address.]

• Personal data: name, email address, role, and authentication credentials you provide on registration.
• Business data: information about your organization entered during onboarding and use (legal form, address, tax and VAT identifiers, employees, contracts, vehicles).
• Usage data: log-in events and feature interactions needed to operate, secure, and improve the service.
• Communication data: messages exchanged with your executive team and integrations within the platform.
• Documents and files: documents and files you upload for accounting and management purposes.

AI is used only within permitted processing: to generate executive recommendations on your data, never to make solely automated decisions about you (see Art. 22).

All AI inference on your business and personal data is processed exclusively by EU-hosted providers within the European Economic Area. We do not send sensitive company data to US-based AI services. Our current AI inference provider is Mistral AI (France), which processes data in the EU under GDPR-compliant terms. This means your company memory, financial data, and conversations with AI executives are processed in the EU and never transferred to third countries for AI processing.

Data is hosted in the European Union under sovereign mode. We retain personal data only as long as necessary for the purposes collected and to meet legal retention obligations (e.g., up to 10 years under § 147 AO / § 257 HGB). Account and document data are deleted on request once retention obligations permit.

We share personal data only with processors bound by written agreement under Art. 28 GDPR, where necessary to provide the service:

• Cloud hosting and infrastructure providers hosting data in the European Union.
• AI model inference providers — all AI processing of your business data is routed to EU-hosted providers (currently Mistral AI, France) so that sensitive company and personal data never leaves the European Economic Area.
• Email and notification service providers (EU-hosted where applicable).
• Public authorities where required by law.

Data is hosted and processed in the European Union. Sensitive business and personal data — including all AI inference on your company data — is processed exclusively by EU-hosted providers within the EEA and is not transferred to providers outside the EEA. Where any other processor transfers data outside the EEA, we ensure an adequate level of protection through adequacy decisions, Standard Contractual Clauses, or other safeguards under Chapter V GDPR. [List any non-EEA transfers and safeguards.]

We implement appropriate technical and organizational measures under Art. 32 GDPR — encryption in transit and at rest, access controls, logging, and regular access review. See our Security page for detail.

You may exercise any of the following rights by contacting privacy@leadersmind.com:

• Access to your personal data (Art. 15).
• Rectification of inaccurate data (Art. 16).
• Erasure — the right to be forgotten (Art. 17).
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Objection to processing based on legitimate interests or for direct marketing (Art. 21).
• Not to be subject to solely automated decisions (Art. 22).

You also have the right to lodge a complaint with a supervisory authority (Art. 77), in particular in the EU member state of your habitual residence.

You can request deletion of your account at any time. We will delete personal data that is no longer required, subject to legal retention obligations that may require us to keep certain records for a defined period.

For any data protection question or to exercise your rights, contact privacy@leadersmind.com.