Private beta · Updated 5 September 2026
1. Who is responsible for your data?
MindMatch Origins is operated by GSV Ε.Ε., a company registered in Greece (Γ.Ε.ΜΗ. / GEMI 195567003000, ΑΦΜ / VAT 803374539) (“MindMatch Origins”, “we”, “us”). Gautier Velissaris is the person responsible for it. Our registered address is available on request from the contact address below.
Privacy contact: contact@mindmatch-origins.com
For GDPR purposes, GSV Ε.Ε. is the data controller for the processing described in this notice.
2. What Origins does
MindMatch Origins is an AI-guided personal reflection experience. You answer open-ended questions about your life and relationships. The service uses those answers to continue the conversation and generate a personal Origins reading.
Origins is not therapy, medical care, crisis support or a diagnosis.
3. What information we process
Depending on what you choose to share, we may process:
- answers you write or dictate;
- structured themes/data points extracted so the conversation can adapt;
- your generated Origins reading and earlier versions;
- your first name, if you provide it;
- your email, only if you ask for a resume link;
- beta feedback you submit;
- minimal technical/session information needed to operate, resume and secure the service and measure basic product performance.
Sensitive information
The questions are open-ended. You may voluntarily mention information GDPR treats as a special category of personal data, such as health information, religious/philosophical beliefs, sex life or sexual orientation.
We do not require you to disclose this. If you choose to do so, we ask for your explicit consent before the conversation begins.
Please avoid unnecessary identifying information about other people.
4. Why we use the information
We process data to:
1. run your adaptive Origins conversation;
2. generate/update your Origins reading;
3. let you leave and resume;
4. respond to safety/crisis signals as described in the product;
5. let you delete or request a copy of your data;
6. understand whether the private beta works, using content-free product events and feedback;
7. protect the service and diagnose technical failures.
We do not sell your personal data. We do not use your conversation to target advertising.
5. Legal bases
For conversation content and the reading, we rely on consent under Article 6(1)(a) GDPR. To the extent you voluntarily provide special-category information, we rely on explicit consent under Article 9(2)(a) GDPR.
For strictly necessary security/service-integrity processing, we may rely on legitimate interests under Article 6(1)(f), limited to what is necessary to operate and protect the beta.
Where processing is necessary to provide a feature you specifically request — for example a resume link — Article 6(1)(b) may also apply.
You can withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.
What deletion actually removes
Deleting your Origins data removes your session, every answer, every
version of your reading, your saved email and any beta feedback you
submitted. Two things are kept with your identifier removed, so they
can no longer be linked to you: content-free product events (for example
"a reading was opened") and records of how much AI processing a session
used. We keep those to understand whether the beta works and what it
costs; neither contains anything you wrote. These **anonymised usage
metrics** — event counts and AI processing volumes with no identifier —
are retained indefinitely for product and cost analysis.
6. AI and infrastructure providers
Your data is not processed only on your device. To provide Origins, we currently expect to use:
- Anthropic — conversation processing and adaptive questions/readings;
- Google Firebase / Google Cloud — authentication, hosting, storage and backend infrastructure.
- Namecheap (Private Email) — sending the emails you ask for: your resume link, and the notice before an inactive session is deleted. This sits outside the Google agreement and is a separate processor.
7. Product analytics during the beta
We collect a deliberately small set of product events, such as:
- landing viewed;
- conversation started;
- consent accepted;
- turn number and answer character count;
- abandonment point;
- reading viewed/read depth;
- share intent/channel;
- feedback rating;
- API failure type.
We do not send interview text, reading text, email address, pull answer or free-text feedback into analytics.
Free-text feedback, when provided, is stored only as feedback content linked to the beta session.
8. How long we keep information
Our policy:
- Origins conversation and reading: deleted after 12 months of inactivity;
- warning: approximately one month before automatic deletion where we have a valid email;
- resume links: expire after 30 days.
9. Deleting your Origins data
You can permanently delete your Origins data from the in-product menu.
Deletion is intended to remove the conversation, extracted Origins data, generated reading, saved reading versions, resume-link data and associated session records we control, subject only to data we are legally required to retain.
Deletion is irreversible.
10. Your rights
Subject to applicable law, you may have rights to:
- access;
- rectification;
- erasure;
- restriction;
- data portability where applicable;
- objection;
- withdraw consent;
- lodge a complaint with a data-protection authority.
To exercise a right: contact@mindmatch-origins.com
Supervisory authority: the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Athens — dpa.gr
11. International transfers
Some providers may process data outside the EEA. Where this happens, we will rely on an applicable transfer mechanism such as an adequacy decision or approved contractual safeguards, and identify the relevant safeguards once production configuration is confirmed.
12. Security
We use reasonable technical and organisational measures designed to protect personal data. No internet service can guarantee absolute security.
If you believe your resume link or data has been exposed, contact contact@mindmatch-origins.com.
13. Children
The MindMatch Origins private beta is for people aged 18 and over.
14. Changes
Because this is a private beta, the product may change quickly. If a change materially affects personal-data processing, we will update this notice and, where required, ask for new consent.
15. Contact
GSV Ε.Ε.
Registered address available on request
contact@mindmatch-origins.com