Privacy policy
This policy explains what personal data Mintinaj collects on mintinajllc.com and in your back office, why, who receives it, how long we keep it and what rights you have.
Who is responsible
The controller is Mintinaj LLC, a limited liability company organised in Delaware, USA. Contact for privacy questions and requests: support@mintinajllc.com.
What we collect
- Questionnaire and order: type of business, business name, phone or WhatsApp number, e-mail address, the photos and logo you upload, and, if you add them, address, opening hours, services and prices, languages, the domain and mailbox you would like and the plans you choose. Photos are re-encoded in your browser before upload, which removes hidden data such as the location.
- Account: e-mail address, name (optional), user name and password (optional; the password is stored only as a secure hash), your language, and sign-in links and sessions (stored only as hashes).
- Your site: its texts, images, settings and the history of your changes.
- Messages: what you write to support or in the help chat, and your name and e-mail address if you ask us to reply.
- Payments: our payment provider tells us whether and how much you paid. We do not receive your full card number.
- Technical data: the date and time of each form; a one-way, salted hash of your IP address stored with orders to detect abuse (not the address itself); IP addresses kept in memory for a few minutes to limit abuse; and the connection logs of our hosting and network providers.
- Visit statistics: we count visits to mintinajllc.com anonymously, without cookies (pages viewed, the referring website, device type and country); your IP address is not stored.
Why we use it (legal bases)
- To prepare, host and support your site and to take payment: performance of our contract with you (or steps before it).
- To keep the service secure, prevent abuse and improve it: our legitimate interests.
- To keep invoices and accounting records: legal obligations.
- Optional analytics cookies, only if we switch them on and you accept: your consent.
We send service e-mails about your order (for example "your site is ready", sign-in links and up to two reminders while your site is waiting for approval). Reminder e-mails carry a one-click unsubscribe link.
Data of your own customers
When visitors of your site send a contact form, book an appointment or order, you are responsible for their data and we process it on your behalf, only to run your site. We will agree data processing terms with you.
Who receives data
We do not sell personal data. We share it only with service providers that work for us, under their data processing terms:
- Railway (hosting of the service and its data, USA)
- Cloudflare (network, security and addresses of customer sites; forwarding of e-mail sent to our support address)
- Resend (sending our e-mails)
- Stripe (card payments, when you pay online)
- the domain registrar and mailbox provider, when you order a domain or a mailbox
- an off-site storage provider that keeps our encrypted backups
- providers of text and translation tools, when used for your site, acting only on our instructions
and authorities when the law requires it.
International transfers
Mintinaj LLC is based in the USA and our providers process data in the USA and other countries. Where the GDPR applies, transfers rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
- Orders that do not lead to a customer relationship: deleted within 12 months.
- Customers: for the duration of the contract, then for the period tax and accounting law requires.
- Sign-in links: 20 minutes (links in our e-mails: up to 7 days); sessions: 30 days.
- Backups: encrypted, kept for 30 days, then deleted.
You can ask us to delete your data earlier where the law allows it.
Security
Connections use HTTPS. Passwords, sign-in links and sessions are stored only as hashes, backups are encrypted, and access to the admin tools is restricted and protected against password guessing.
Your rights
You can ask for a copy of your data, its correction or deletion, a restriction of its use, or a copy in a portable format, and you can object to its use or withdraw a consent at any time. Write to support@mintinajllc.com; we answer within one month.
If you are in the EU, the EEA or the UK, these are your rights under the GDPR, and you can also complain to the data protection authority of your country. Other countries give similar rights, which we respect as well.
Children
The service is for businesses and is not meant for children under 16.
Changes
We publish any change to this policy on this page with a new date.