Privacy Policy for The Third Mind (第三思维)

Last Updated: September 1, 2025

RokaByte LLC ("RokaByte," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website located at the-third-mind.com ("Website") and any related services (collectively, the "Service").

Please read this Privacy Policy carefully. BY ACCESSING OR USING THE SERVICE, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY. IF YOU DO NOT AGREE, DO NOT ACCESS OR USE THE SERVICE.

This Privacy Policy should be read in conjunction with our Terms of Service.

1. Information We Collect

In the course of providing the Service, we may collect various types of information from and about you, as described below.

(A) Personal Data You Provide to Us:

Account Information: When you register for an account, we collect your name and email address. This information is used to create and personalize your account, send you passwordless login links, and communicate with you.
User Content: We collect the content and information you create, input, or upload to The Third Mind. This includes, but is not limited to, comments you post, project submissions, prompts you provide to AI features, and any other materials you generate or manage through the Service ("User Content").
Payment Information: If you subscribe to a Paid Membership, our payment processor, Stripe, will collect your payment method information (such as a credit card number and billing address). We do not directly receive or store your full payment card details.
Communications: If you contact us directly (e.g., for support), we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

(B) Information We Collect Automatically:

Usage Data: We automatically collect information about your interactions with the Service using analytics tools. This includes features you use, pages you view on our Website, actions you take, timestamps, and frequency of use.
Device and Technical Information: We collect information about the device or browser you use to access the Service, such as your device model, operating system and version, browser type, IP address (which may be used to infer approximate geographic location), and crash data.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

Provide, operate, maintain, and improve the Service.
Create and manage your account, and authenticate your access.
Process your User Content with AI/LLM services to provide the Service's functionalities.
Personalize your experience (e.g., remember your preferences).
Process subscriptions and manage user tiers (Free/Paid).
Communicate with you, including responding to your inquiries, providing customer support, and sending you service-related announcements, updates, security alerts, and administrative messages.
Monitor and analyze trends, usage, and activities in connection with our Service to improve user experience and performance. This may include using aggregated and anonymized data for our business purposes, such as data analysis, audits, fraud monitoring and prevention, diagnosing and fixing technical problems, developing new products and features, enhancing, improving or modifying our Service, identifying usage trends, determining the effectiveness of our promotional campaigns and operating and expanding our business activities.
Enforce our Terms of Service, prevent abuse, and ensure the security and integrity of our Service.
Comply with legal obligations and protect our rights and the rights of others.
For any other purpose with your consent.

AI Model Training Clarification: RokaByte LLC does not use your identifiable User Content to train its own proprietary AI models (if any exist separately from third-party provided models). When you use AI features on The Third Mind, your User Content (such as text prompts) is processed by our third-party AI service provider, Google (using the Gemini API as a "Paid Service"). As of the "Last Updated" date of this Privacy Policy, Google's terms for such Paid Services (see Gemini API Additional Terms of Service) state that Google does not use your prompts or responses from this Paid Service usage to improve their general AI models. Their processing is governed by their specific Data Processing Addendum. Because these third-party terms can be updated by Google, we encourage you to review them directly for the most current information on their data handling practices.

We do not sell your personal information. We may share your information in the following situations:

With Third-Party Service Providers: We share information with third-party vendors, consultants, and other service providers who perform services on our behalf. These include:
- Cloud Infrastructure: For data storage and website hosting (e.g., DigitalOcean).
- AI/LLM Provider (Google Gemini API - Paid Service): Your User Content (e.g., text for AI features) is sent to Google's Gemini API (which we utilize as a "Paid Service" under their terms) for processing to enable the Service's AI functionalities. As of the "Last Updated" date of this Privacy Policy, Google's terms for this Paid Service (see Gemini API Additional Terms of Service) indicate they do not use your prompts or responses from this Paid Service to improve their general AI models and process this data under their Data Processing Addendum, logging data for a limited time for abuse detection and legal purposes. You acknowledge that Google's data handling practices are ultimately governed by their terms and data processing agreements, which can change, and which we encourage you to review.
- Payment Processor (Stripe): To securely process payments for Paid Memberships, we share transaction-related information with Stripe. Stripe’s use of your personal information is governed by their Privacy Policy.
- Analytics Providers: To help us understand usage patterns.
For Legal Reasons: We may disclose your information if we believe it's necessary to:
- Comply with applicable law, regulation, legal process, or governmental request.
- Enforce our Terms of Service, including investigation of potential violations.
- Detect, prevent, or otherwise address fraud, security, or technical issues.
- Protect the rights, property, or safety of RokaByte, our users, or the public as required or permitted by law.
Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company, your information may be transferred as part of that transaction. We will use reasonable efforts to notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information, as well as any choices you may have.
Aggregated or Anonymized Data: We may share aggregated or anonymized information that does not directly identify you for research, analysis, or other purposes. For example, we may share statistics about Service usage.
With Your Consent: We may share your information for other purposes with your explicit consent.

4. Data Storage and Security

Data Location and International Transfer: Your data is stored and processed on servers located in the United States and/or Singapore. By using the Service, you acknowledge and consent to the transfer, storage, and processing of your information in these locations. Please be aware that the data protection laws in these countries may differ from those in your country of residence. We will take appropriate steps to ensure that your personal data receives an adequate level of protection in the jurisdictions in which we process it.
Security Measures: We implement reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, use, alteration, or destruction.
Your Role in Security: The security of your information also depends on you. You are responsible for keeping your account access secure, which includes safeguarding the email account you use for our passwordless login system.
Limitations: Despite our efforts, no security measures are perfect or impenetrable. We cannot guarantee the absolute security of your information. Any transmission of information is at your own risk.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, protect our assets, enforce our agreements, and for legitimate business purposes (e.g., improving the service with aggregated/anonymized data).

User Content: Upon termination or deletion of your account, your personal account information will be deleted. However, please note that certain User Content, particularly comments you have posted in public areas of the Service, may not be deleted. Such content may remain visible to the public but will be anonymized or disassociated from your deleted account where technically feasible.
Inactive Accounts: As per our Terms of Service, accounts inactive for twelve (12) months may be deleted, along with associated data, after we attempt to provide a 30-day notice.

6. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information. These may include:

Access and Update: You can access and update your account information, such as your name, by logging into your account settings on the Website.
Delete User Content: You can delete certain User Content you have created, such as your comments, through the features of the Service.
Account Deletion and Data Erasure: You have the right to delete your account and erase your associated personal data. You may request deletion by sending an email to [email protected]. For your security, we will take steps to verify your identity to confirm you are the legitimate owner of the account before processing any deletion request submitted via email. Please be aware that while your account and associated personal data will be deleted, some User Content may be retained in an anonymized or disassociated state as described in Section 5 of this policy. Please also be aware that some information may be retained for a limited period for legal or legitimate business purposes, including for backup, archival, fraud prevention, or audit purposes, or as otherwise required by law.
Promotional Communications: If we send promotional emails, you can opt-out by following the unsubscribe instructions in those emails. You may still receive transactional or administrative emails related to your account and the Service.

7. Children's Privacy

The Service is intended for users who are at least 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that an individual under the age of 18 has provided us with personal information without verification of parental consent (where applicable for minors who may somehow gain access despite our terms, though our service is directed to those 18+), or in violation of our Terms of Service, we will take steps to delete such information from our files.

If you are a parent or guardian and believe that an individual under the age of 18 (for whom you are responsible) has provided us with personal information, please contact us at [email protected] so that we can take appropriate action. By using the Service, you represent that you are at least 18 years old.

8. Third-Party Websites and Services

The Service may contain links to third-party websites or services that are not owned or controlled by RokaByte. This Privacy Policy does not apply to the practices of third parties that we do not own or control. We encourage you to review the privacy policies of any third-party service you interact with.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes we determine to be material, we will endeavor to notify you before such changes become effective. Notification methods may include updating the "Last Updated" date at the top of this policy, providing notice through the Service (such as a pop-up or announcement), or, where we deem it appropriate for significant changes or if required by applicable law, by sending a notification to your registered email address. The timing and method of notice will be at our reasonable discretion, taking into account the nature of the changes and applicable legal requirements. We encourage you to review this Privacy Policy periodically to stay informed about our information practices. Your continued use of the Service after any changes to this Privacy Policy become effective constitutes your acceptance of such changes.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

RokaByte LLC Email: [email protected]