← Back to the LabPractice Lab Privacy Notice
3. Practice Lab Privacy Notice
This adds to our website Privacy Policy (mindsonfire.ca/privacy-policy, effective 25 September 2026) for the Practice Lab.
3.1 What we collect.
- Account: your email address, sign-in times, plan and billing status.
- Activity in the Lab (behavioural data): we record what you do in the Lab, linked to your account. This includes:
- pages and workspaces you open, buttons and options you choose, and time spent;
- space starts, pauses, resets, deletions and expiries;
- commands and actions run in your space, with times and results;
- tool calls made through the Practice Lab connector;
- publish and unpublish actions;
- errors and resource use (CPU, memory, disk, run time).
- Technical: IP address, browser and device type, referral source and campaign parameters. Website cookies are described in the website Privacy Policy.
- Billing: Square, our payment processor handles your card. We receive the payment status, amount, plan and the last digits or card type. We never see or store your full card number.
3.2 What we try not to collect.
- We automatically mask anything in activity records that looks like a password, API key or token. Masking is best-effort, so please follow section 1.6.
- We do not record your keystrokes outside the Lab.
- We do not read your connected AI assistant's conversations. We only see the tool calls it makes to the Lab.
3.3 Why we use it.
- To run, secure and limit the Lab, and to enforce these policies.
- To understand how people use it and improve the Lab, its lessons and our services.
- To provide the paid plan and billing.
- To send service emails (sign-in links, receipts, important changes).
- Marketing emails are sent only if you opt in separately. You can unsubscribe at any time.
3.4 What we don't do.
- We do not sell your personal information.
- We do not let advertisers or data brokers use it.
- We do not use your Lab content to train AI models.
We may publish aggregated, de-identified statistics, for example "most people start with Plan a Campaign".
3.5 Who processes it. These providers act on our instructions:
- our server provider: Hostinger, with servers currently in the United States, and Amazon Web Services if we move the Lab there;
- Google Workspace, for sign-in emails;
- our payment processor;
Your information may be stored and processed outside Canada, including in the United States, where it may be accessible to authorities under local law.
3.6 How long we keep it.
- Practice spaces: deleted after 24 hours idle on the free plan, or when you delete them.
- Activity records: up to 24 months, then deleted or de-identified.
- Billing records: as long as tax law requires (generally up to 7 years).
- Security and abuse records: as long as reasonably needed.
3.7 Your choices.
- You can ask to see, correct or delete your personal information, or close your account, by emailing solutions@mindsonfire.ca (privacy contact: Marcus Gaughan), or use “Download my data” and “Delete my account” in the Lab. We respond within 30 days.
- Deleting your account removes your spaces and identifiable activity records. We keep billing records and anything we must keep by law.
- You can withdraw consent to activity tracking by closing your account. Tracking is required to use the Lab safely.
3.8 Consent. At sign-in you will see a short summary and a checkbox: "I agree to the Practice Lab Terms and to Minds On Fire recording my activity in the Lab as described in the Privacy Notice." A separate, unticked box is used for marketing emails.