Last updated 6 November 2026

Privacy policy

What we collect, why, and who else sees it. If you want the short version of how sharing works on your card, read what stays private.

What we collect from members

• Your account: email address and a scrambled version of your password. We never store the password itself and cannot read it.
• Your profile: name, photo, introduction, and any contact details, address, service area or languages you choose to enter.
• What your AI learns: the items from your interview answers, pasted text, your website or documents. Private unless you approve them.
• Uploaded files: read once, then deleted. We do not keep them.

What we collect from visitors

• Messages typed to a card. These are sent to the AI to produce an answer. We do not store conversations.
• IP addresses, briefly, to stop abuse and enforce usage limits. Visit records are deleted after two days; search records after about ten weeks.
• A login cookie, for members only, so you stay signed in. No advertising or tracking cookies, no analytics, no third-party trackers anywhere on the site.

Who else sees your information

• Anthropic processes the AI answers. It receives your approved items and the visitor's question. It does not receive your private items, your password or your email.
• Brave Search receives the words typed into the AI Power Search box, so we can show web results. It is not told who searched.
• DigitalOcean hosts the server, in the United States.
• Nobody else. We do not sell your information, share it with advertisers, or hand it to data brokers.

Being listed

Your card is only listed in AI Power Search if you switch that on. Public cards can be found by search engines. Nothing you kept private is listed or indexed.

Your choices

• Edit or delete anything your AI knows, at any time.
• Make your card private again, or remove yourself from AI Power Search.
• Delete your account and everything in it — email openpublicrecords@gmail.com and we will remove it.
• Ask for a copy of what we hold about you.

Security, honestly

Passwords are stored scrambled, the site runs over an encrypted connection, and private items are never sent to the AI. It is a small service on a single server, so treat it accordingly: do not put anything in your card that would cause you harm if it were exposed.

Children

Xapmind is not for anyone under 18. We do not knowingly collect information from children.

Changes and contact

If this policy changes in a way that matters, we will say so on the site. Questions, or to have your information removed: openpublicrecords@gmail.com.