Privacy Policy

This policy explains what personal data Mintmark collects, why, who it is shared with, and your rights. The controller of your data is Musfeq Saleheen, trading as Mintmark, Rampura, Dhaka-1219, Bangladesh. Privacy contact: support@imintmark.com.

1. What we collect

• Account: your email address, and sign-in records.
• Beta waitlist: your name, business name, website or Facebook page, country, and what you want help with.
• Brand information you give us: answers, notes, brand details, and the public content of a website or Facebook page you ask us to read.
• Files: photos and screenshots you upload.
• What you make: reports, pictures, designs and presentations, and your edits to them.
• Usage records: which actions you ran, credits used, and their cost to us (to prevent abuse and set fair prices).
• Technical: login cookies, your browser's time zone (to decide which output languages to offer), basic server logs, and visit statistics (see section 7).
• Payments (when plans open): handled by Paddle. We receive the order details and your email, never your full card number.

2. Why we use it (and the legal basis)

• To provide Mintmark: run your reports, pictures and presentations, and keep your work (contract).
• To manage the beta waitlist and tell you when your account is ready (steps before a contract / legitimate interest).
• To keep the service safe, stop abuse and measure costs (legitimate interest).
• To understand how the site is used (which pages people visit, from which countries and websites) so we can improve it (legitimate interest).
• To answer your messages (legitimate interest).
• To meet legal, tax and accounting duties (legal obligation).

We do not sell your data and do not use it for advertising. We do not use your content to train AI models.

3. Who we share it with

We use these service providers. They process data only to provide their service to us:

• Supabase (database and sign-in; data stored in Singapore).
• Cloudflare (R2 picture storage, domain and email forwarding).
• Replit (hosting the app, and visitor analytics).
• Anthropic (Claude AI, which writes reports and reads screenshots and web pages you give us).
• OpenRouter and the image-model providers it connects to (AI pictures).
• Apify (reading a public Facebook page when you ask us to).
• Resend (sign-in emails), and n8n with Google Gmail (beta waitlist emails).
• Paddle.com, our reseller and Merchant of Record, for payments, tax and invoices (when plans open). Paddle has its own privacy notice.

We may also share data if the law requires it, or to protect our rights or the safety of users.

4. International transfers

Our providers process data in several countries, including Singapore, the United States and the European Union. We choose providers that protect data with security measures and contractual commitments (such as standard contractual clauses where they apply).

5. How long we keep it

• Your account, brands and outputs: while your account is open. When you ask us to delete your account, we delete them within 30 days (backups clear within a further 30 days).
• Waitlist details of accounts that are never approved: deleted after 12 months, or sooner if you ask.
• Usage and payment records: as long as tax and accounting law requires.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, or stop or limit some uses. You can also object to uses based on our legitimate interest. Email support@imintmark.com; we reply within 30 days. If you are unhappy with our answer, you can complain to the data protection authority where you live.

7. Cookies and local storage

We only use what is needed to run Mintmark: login cookies (to keep you signed in), a time-zone cookie (to decide which output languages to offer), and your browser's local storage (to remember light or dark mode). We do not use advertising cookies.

Analytics. We use the visitor analytics built into Replit, our host. It counts page visits and uses your IP address to estimate unique visitors and your rough location (country). We only look at totals, such as top pages, countries, browsers, device types and the websites that sent visitors. We do not use it to build profiles of you, for advertising, or to follow you across other websites.

8. Security

We use encrypted connections (HTTPS), access controls so each account sees only its own data, private picture storage with short-lived links, and we keep secret keys out of the code. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

9. Children

Mintmark is for adults running a business. It is not meant for anyone under 18, and we do not knowingly collect their data.

10. Changes

We will update this page when our use of data changes, and tell signed-in users about important changes.