Privacy Policy

In plain language

Minac runs a one-page launch site at minac.app and a curated synthetic demo at minac.app/playground. The only personal data the site itself collects is the email address you give us when you register interest. We use that email to contact you about Minac's launch and closely related product updates. The playground uses fabricated data and does not send your demo choices back to us. We do not use marketing cookies or analytics. You can ask us to delete your information at any time by emailing [email protected].

1. Who is responsible for your data

Minac is currently a pre-incorporation project. A Finnish legal entity will be registered before the product launches; once that happens this section will be updated with the entity name, business ID, and registered address.

Until then, contact [email protected] for controller-related requests, privacy questions, or requests about your data.

2. What we collect, why, and what we do with it

2.1 Interest list

When you submit your email address through the interest form, we record:

• The email address you entered.
• The time you submitted it, and how many times the same email has been submitted.
• A short source label, currently landing.
• Your browser's User-Agent string, used only to recognise broken submissions and abusive automation.
• The country your request came from, derived by Cloudflare from your IP address at the edge. Your full IP address is not stored by Minac.

Lawful basis: Article 6(1)(a) GDPR: your consent, given by submitting the form. You can withdraw it at any time.

Purpose: to contact you about Minac's launch and closely related product updates, and to understand roughly where early interest is coming from. We do not transfer your email to third parties for marketing.

2.2 The playground

The playground at /playground is a guided demo that runs entirely in your browser. It uses fabricated example data; it does not connect to a real cloud model and does not transmit the scenarios you choose, review decisions you make, or other demo interactions back to us. We do not log prompt content from the playground.

2.3 Routine server logs

Like any website, our hosting layer, Cloudflare, keeps short-lived edge logs for security, abuse prevention, and basic reliability metrics. These logs are maintained by Cloudflare under its own retention rules and are not used by us for any other purpose.

2.4 Cookies and analytics

The Minac site does not set marketing or analytics cookies. We do not use Google Analytics, Meta Pixel, or any third-party tracking. Cloudflare may set strictly necessary cookies for security; these are not used to profile you.

3. Where your data is processed

We use a small number of sub-processors. They process your data on our behalf and only for the purposes described above.

Both providers publish data-processing and transfer documentation. Where data is transferred outside the European Economic Area, the transfer relies on Standard Contractual Clauses or an equivalent mechanism documented by the provider.

4. How long we keep your data

We keep your interest-list email until Minac launches or you ask us to remove it, whichever comes first. At launch, we will email the interest list and ask whether you want to keep receiving Minac updates. If you do not answer within 7 days, we will delete your interest-list entry. If launch is delayed materially, we may send an occasional check-in so you can confirm you still want to be on the list.

Server logs held by Cloudflare are retained under Cloudflare's published retention schedule, which is typically days to weeks rather than years.

5. Your rights under the GDPR

To exercise your rights, email [email protected] from the address you registered with, or include enough detail for us to verify it is you.

• Access: ask us what data we hold about you.
• Rectification: ask us to correct it.
• Erasure: ask us to delete your interest-list entry.
• Restriction: ask us to pause use of your data while a question about it is resolved.
• Data portability: ask for a machine-readable copy of the data you gave us.
• Withdraw consent: withdraw the consent you gave by submitting the form.
• Complain: complain to the Finnish Data Protection Ombudsman at tietosuoja.fi, or to the supervisory authority of your country of residence.

We aim to respond to all requests within 30 days.

6. Security

We keep the amount of personal data we process small on purpose. The interest list contains email addresses and minimal metadata, stored in an access-controlled Cloudflare D1 database. Cloudflare and Resend operate to recognised security standards; the underlying infrastructure that holds the interest list inherits those controls.

The playground does not transmit demo interactions back to us, so there is no demo data store to protect.

7. Children

The Minac launch site is not directed at children, and the interest list is intended for adults evaluating Minac for organisational use. We do not knowingly collect data from anyone under 16.

8. Changes to this policy

This is an early policy for a pre-launch product. We expect to rewrite it substantively before the product begins handling customer data. When we make material changes we will update the Last updated date at the top of this page; for material changes affecting the interest list we will also email you at the address you registered with.

9. Contact

For any question about this policy, the data we hold, or to exercise any of your rights, write to [email protected].