Draft, pending review

This document has not been approved yet and may change before Fairy Concierge opens sign-ups. Items marked “TONY TO CONFIRM:” are still being decided.

The Fairy

Privacy Policy

Last updated October 30, 2026

This policy explains what Insiders Space LLC, doing business as Ragmind AI (“Ragmind”, “we”, “us”), does with your information when you use Fairy Concierge (“Concierge”). It goes with our Terms of Service.

The short version: we use your information to do what you ask, we send it only to the companies that help us do that, we do not sell it or use it for ads, and you can ask us to export or delete it at any time.

1. What we collect

Account details: your name, email address and phone number, which you give us when you sign up by text, and who invited you or why you asked for an invite.
Your conversations: the messages you send Concierge, its replies, and the steps it took to answer (for example which tools it used and what they returned).
Things you ask it to remember: facts Concierge keeps about you, or about your organization if you share an account with others, so it can help you better.
Connected accounts: when you connect Google, Concierge can read the Gmail and Calendar data you allow, and when you connect your Fairy account it can use your Fairy documents. We store the access tokens those services issue, not your passwords for them.
Bank data, if you link a bank: through Plaid, read-only: your accounts, balances, transactions and bills (such as credit-card and loan balances). We never receive your bank login; you give it to Plaid directly. Bank linking is in testing and does not yet connect to real banks.
Saved website logins: usernames, passwords and two-step codes you give Concierge for a site. See “Saved logins” below.
Browsing for you: the pages Concierge visits and the forms it fills in while doing a task. We do not record video of these browsing sessions.
Approvals and payments: what Concierge asked to do, and whether you approved it. When payments launch, the merchant, amount and status of each payment; card details are handled by Stripe, not stored by us.
Usage and technical data: how much AI model usage your account has spent, delivery status of messages, and service logs used to keep Concierge running and to fix problems.

2. Sensitive numbers are removed

Before we store a message you send, or pass it to an AI model, Concierge checks it for sensitive numbers: Social Security numbers, ITINs, EINs, payment card numbers, bank account and routing numbers, passport numbers and dates of birth. It replaces each one it finds with a placeholder, does not keep the value, and tells you it did so. The same check masks numbers that clearly match those formats on web pages Concierge reads, and blocks a reply that would text one back to you.

We cannot remove the value from your own message thread or from our messaging provider, so delete the message on your side. The check is automated and can miss things, so please do not text sensitive numbers to Concierge.

3. Saved logins

Logins you give Concierge for websites are kept in an encrypted vault, readable only for your own account. A saved login is used only to sign in to that site for you, and only when you have approved that sign-in, told Concierge to always allow that site, or typed the login into the secure page Concierge sent you for that sign-in. The password is never shown to the AI model and never appears in messages or logs. Each use is recorded with the reason it was allowed. You can ask Concierge to forget a saved login at any time.

4. How we use it

to do what you ask, and to text you replies, approval requests and reminders;
to keep your account secure, enforce usage limits and prevent abuse;
to find and fix problems, and to understand what costs what;
to contact you about your account or changes to these policies;
to meet legal obligations.

We do not sell your information, share it for advertising, or train AI models on it ourselves.

5. Who processes it for us

We share your information with the service providers that help us run Concierge. [TONY TO CONFIRM: that a data processing agreement is in place with each provider below]

Linq delivers iMessages between you and Concierge.
WorkOS runs accounts and sign-in, and holds your name, email and organization.
OpenRouter routes Concierge’s requests to AI model providers. Your messages, conversation history and the content of tasks (for example web pages and emails Concierge reads) are sent to the model that answers. Which model provider answers can change, and it may be outside the United States. [TONY TO CONFIRM: the model providers in use, where they run, and whether each is held to no retention and no training on our traffic]
TypeSafe runs a fast classifier (“Jev”) that Concierge uses to read your replies to approval requests, to sort email alerts, and to double-check messages for sensitive numbers. It receives that text, with digits masked in the sensitive-number check.
Browser Use runs the cloud web browser Concierge uses when it browses for you, so it sees the pages Concierge visits and what it types into them.
Monid is a gateway to third-party data tools. When Concierge looks something up through it, the search terms go to Monid and the tool it calls.
Plaid connects your bank, if you choose to.
Stripe will process payments, once payments launch.
Google, when you connect a Google account, under Google’s own policies.
Amazon Web Services (in the United States) and Cloudflare host Concierge and store its data.
Grafana Labs stores our service logs and metrics.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of a merger or sale of our business, in which case this policy would continue to apply to it.

6. How long we keep it

Account details, conversations, approvals and remembered facts: while your account is open, and deleted when you ask us to delete your account. [TONY TO CONFIRM: a fixed retention period for conversation history, if any]
Sensitive numbers we detect: never kept.
Saved logins: until you ask Concierge to forget them, or your account is deleted.
Bank data from Plaid: up to 24 months of transactions, and deleted when you ask us to disconnect the bank or delete your account. [TONY TO CONFIRM: the 24-month bank-data retention period, which is proposed and not yet final]
Service logs: 14 days in our hosting logs, and backups of our database for 7 days. [TONY TO CONFIRM: how long our log provider keeps logs]

7. Your choices and rights

Forget something: ask Concierge to forget a fact or a saved login. Forgetting deletes it rather than hiding it.
Disconnect an account: disconnect Google or your Fairy account from the Connections page at any time. To disconnect a bank, email us while self-service bank disconnection is being built.
Stop texts: text UNLINK to unlink your number from your account.
Export or delete your data: email tony@ragmind.ai from the email on your account. We will confirm it is you and then send you a copy of your data, or delete your account and its data, within [TONY TO CONFIRM: response time, for example 30 days]. Copies held by our service providers are deleted on their own schedules, and backups roll off within 7 days.

Depending on where you live, you may have further rights, such as to correct your data or to appeal a decision about a request. [TONY TO CONFIRM: which state privacy laws apply to us, and any state-specific disclosures they require]

8. Security

We encrypt your information in transit and at rest, encrypt saved logins separately, limit who and what can read your data to your own account, and ask your approval before sensitive actions. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.