Draft for legal review · not a compliance certificate
Privacy policy
Privacy notice version · website-intake-2026-09-08
Who we are
Heramind provides senior consultancy and software for finance, business transformation, ERP, data and applied AI. The legal operator and contracting entity is identified in the legal notice. Contact: info@heramind.com.
Current data boundary
Public product illustrations and controlled demonstrations use fictional data. Working demonstrations require approved access. Contact and newsletter forms collect the information you choose to submit, as explained below. Real client data is introduced only after the relevant scope, processing and security requirements have been agreed and assessed.
Data processing
Before a client pilot, the controller/processor roles, purposes, lawful bases, retention, subprocessors, international transfers, security measures and data-subject request process will be documented in signed terms. This page does not replace those agreements.
Website inquiries and updates
When you submit the contact form, Heramind stores the fields you provide, the page and language of the request, a request reference, the privacy-notice version and operational status so a human operator can answer and manage that request. The contact form does not subscribe you to marketing.
The Operating Clarity field guide can be downloaded without providing an e-mail address. If you separately enter your address and tick the optional consent box, Heramind records that explicit consent and may send the guide plus occasional updates about finance, operations and controlled software delivery. You can withdraw consent through info@heramind.com or the unsubscribe method in a future message.
The website is served through Vercel and inquiry records are stored in a Neon-hosted PostgreSQL database. Access is limited to authorized Heramind operators. Inquiry data is kept out of the fictional demonstration tenant.
The current working retention policy calls for inquiry records to be reviewed at least quarterly and removed through a privileged administrative process when no longer needed, subject to engagement or legal recordkeeping needs. The final retention schedule and international-transfer safeguards remain under legal review. This notice does not establish that an operational review has already taken place.
Cookies, local storage and private workspaces
Security cookies support sign-in, session protection and the return route. When you choose Remember and close on the cookie information notice, hm_cookie_choice stores only a version and expiry time in local storage. The site treats that record as valid for 180 days and removes an expired record when it next checks it. Your browser may retain the value until that check or until you clear it.
The homepage entrance appears on a new home-page load and does not store an entry preference. Its music starts only after Enter is selected with sound enabled; Skip is silent and a stop control remains available during playback. Optional interface sounds may use heramind-sound-v1 in session storage when enabled. The motion control changes the current page setting without saving a browser-storage preference. Older entry values may remain in your browser but no longer suppress the homepage entrance. These preferences are not automatically attached to web requests.
After sign-in, private-workspace entry preferences may use hm-kanjo-startup-v2 and hm-mugen-entry-v2 in session storage. The sidebar_state cookie may remember whether workspace navigation is open for up to seven days. Session storage belongs to the browser's page session; browser session-restoration settings can affect how long it is retained.
We use limited, cookieless website counts. We use separate sign-in security logs. No advertising trackers or visitor profiles.
Your rights
Questions or requests can be sent to info@heramind.com. Identity may need to be verified before personal data is disclosed or changed.
Website activity and access security
We count page views, information opens, guide download requests and film starts on public pages to understand how the website is used. These records contain only the time, page, language and selected action. We do not create visitor profiles or store form contents, cookies, device identifiers or IP addresses with these website events. Records are retained for up to 30 days. We respect the browser’s Do Not Track and Global Privacy Control signals. Sign-in attempts are logged separately for security; reliably supplied connection IP addresses are retained for up to seven days. Access is restricted to platform administrators with recent multi-factor authentication. Contact info@heramind.com about these records.
