Privacy Policy

1. Who We Are

StatMind ("we," "us," or "our") is a browser-based process statistics platform built for quality engineers. We operate at statmind-production.up.railway.app.

2. Data You Upload

When you upload a file (CSV, Excel, CMM export) for analysis:

• The file is read in your browser using the FileReader API. It is never sent to our servers for storage.
• Analysis computations (normality tests, capability, SPC, DOE) are performed via API calls that process the data and return results — raw measurement data is not persisted.
• We do not log, retain, or sell your measurement data.
• PDF reports you generate are assembled in your browser and downloaded locally.

3. Data Processed by Our API

Some analyses (e.g., normality tests, capability, SPC) send column data to our backend API to compute statistical results. This processing is:

• Stateless — no data is written to a database or persisted after the response.
• Ephemeral — server memory is cleared between requests.
• In-transit encrypted — all API communication uses HTTPS/TLS.

If you are subject to data sovereignty requirements (e.g., ITAR, EU GDPR Article 44+), please contact us about on-premises deployment options.

4. Information We Collect Automatically

Like most web services, our hosting infrastructure may collect:

• IP address and general geographic region (country-level)
• Browser type and operating system
• Pages visited and timestamps (access logs)
• HTTP referrer headers

This information is used solely for operating, monitoring, and improving the service. It is not sold or shared with third parties for marketing purposes.

5. Cookies and Local Storage

StatMind does not use tracking cookies or third-party analytics cookies. We may use browser sessionStorage to temporarily preserve your analysis state within a single browsing session. This data is cleared when you close the tab.

6. No Third-Party Analytics

We do not embed Google Analytics, Meta Pixel, Mixpanel, or any other third-party behavioral tracking tool. Your usage of StatMind is not profiled or monetized through advertising.

7. Regulated Industry Users (GxP, ITAR, ISO 13485, IATF 16949)

We understand that many of our users work in regulated environments. Please note:

• StatMind Free is not currently validated under 21 CFR Part 11 or IEC 62304.
• Enterprise customers can request IQ/OQ/PQ validation documentation packages.
• On-premises deployment (where data never leaves your network) is available for Enterprise plans.
• For ITAR-controlled data, we recommend the on-premises option or consulting your compliance team before use.

8. Data Retention

We do not retain user measurement data. Access logs (IP, timestamps) are retained for up to 30 days for security monitoring, then automatically deleted.

9. Your Rights

Because we do not collect personally identifiable information beyond standard access logs, there is minimal data to request, correct, or delete. If you believe we hold data about you, please contact us at the address below and we will respond within 30 days.

10. Children's Privacy

StatMind is designed for professional use by quality engineers. We do not knowingly collect information from anyone under 16 years of age.

11. Changes to This Policy

If we make material changes to this policy, we will update the "Last Updated" date at the top and, where possible, notify users via in-app notice. Continued use of StatMind after changes constitutes acceptance of the revised policy.

12. Contact

For privacy questions, data requests, or enterprise compliance inquiries:

Email: hello@statmind.io

We aim to respond to all inquiries within 5 business days.

This privacy policy was last reviewed by the StatMind team on June 1, 2025.