Privacy Policy
Last updated: January 14, 2025
This Privacy Policy describes how Nova Impact Ltd ("Company," "we," "us," or "our") collects, uses, and shares personal data when you use Minttu, our AI-powered Excel automation platform ("Service"). By using our Service, you agree to the collection and use of information in accordance with this policy.
1. Our Role in Processing Personal Data
Nova Impact Ltd acts as a data controller for personal data we collect directly from you (such as account information and usage data). When processing Excel files and other content you upload for AI analysis, we act as a data processor on your behalf.
We process your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Information We Collect
2.1 Information You Provide
We collect information you provide directly to us, including:
- Account information: Email address, name, and authentication credentials when you create an account
- Payment information: Billing details processed through our payment provider (we do not store full payment card details)
- User content: Excel files, spreadsheets, and other documents you upload for processing
- Communications: Messages you send to us through support channels or contact forms
2.2 Information Collected Automatically
When you use our Service, we automatically collect certain information, including:
- Usage data: Features accessed, actions taken, and time spent using the Service
- Device information: Browser type, operating system, and device identifiers
- Log data: IP address, access times, and referring URLs
- Error data: Technical errors and performance metrics to improve service reliability
2.3 Information from Third Parties
We may receive information about you from third parties, including:
- Authentication providers: If you sign in using a third-party service, we receive basic profile information
- Payment processors: Transaction confirmations and billing status
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Service Delivery
- Provide, maintain, and improve our AI-powered Excel automation features
- Process and analyze your uploaded files using artificial intelligence
- Authenticate your identity and manage your account
- Process payments and manage subscriptions
3.2 Service Improvement
- Analyze usage patterns to improve functionality and user experience
- Identify and fix technical issues and errors
- Develop new features and services
3.3 Communication
- Respond to your inquiries and support requests
- Send service-related notifications (account updates, security alerts)
- Provide information about changes to our terms or policies
3.4 Security and Compliance
- Protect against unauthorized access, fraud, and abuse
- Comply with legal obligations and enforce our terms
- Investigate potential violations of our policies
4. How We Process Your Files
When you upload Excel files or other documents to Minttu:
- Temporary processing: Your files are processed in isolated, secure environments
- No training: We do not use your files to train AI models
- Encrypted transmission: All file transfers are encrypted using TLS
- Automatic deletion: Uploaded files are automatically deleted after processing unless you explicitly save them
- Session isolation: Each processing session is isolated from other users
5. How We Share Your Information
We share your information only as described in this policy. We do not sell your personal data. We do not display advertisements in our Service.
5.1 Artificial Intelligence Providers
To provide AI-powered features, we transmit relevant data to the following AI service providers:
- Anthropic: AI processing and analysis
- OpenAI: AI processing and analysis
- Google AI: AI processing and analysis
- OpenRouter: AI routing and processing
These providers process data according to their respective privacy policies and data processing agreements. Your uploaded files are transmitted to these providers only as necessary to perform the requested AI operations.
5.2 Service Providers
We work with third-party service providers who assist in operating our Service:
- Sentry: Error tracking and performance monitoring
- DigitalOcean: Infrastructure hosting and analytics
- Polar: Subscription and payment management
- BetterAuth: Authentication services
These providers are contractually obligated to protect your data and use it only for the purposes we specify.
5.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We may also disclose information to:
- Comply with a legal obligation
- Protect and defend our rights or property
- Prevent or investigate possible wrongdoing
- Protect the personal safety of users or the public
5.4 Business Transfers
If Nova Impact Ltd is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit using TLS/SSL
- Secure authentication protocols and session management
- Isolated processing environments for file analysis
- Regular security assessments and updates
- Access controls limiting employee access to personal data
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
- Account data: Retained while your account is active and for a reasonable period thereafter for legal and business purposes
- Processing data: Excel files uploaded for AI processing are automatically deleted after processing unless explicitly saved
- Usage data: Aggregated analytics data may be retained indefinitely; identifiable usage data is retained for up to 24 months
- Communication records: Support communications are retained for up to 36 months
You may request deletion of your data at any time, subject to legal retention requirements.
8. Your Rights
Under applicable data protection laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Restriction: Request restriction of processing in certain circumstances
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is based on consent, withdraw it at any time
To exercise these rights, contact us at team@minttu.ai. We will respond to your request within 30 days.
9. Your Choices
9.1 Account Information
You may update or delete your account information at any time through your account settings. If you wish to delete your account entirely, contact us at team@minttu.ai.
9.2 Analytics
You may opt out of analytics data collection through your account settings. Note that some usage data may still be collected for security and service operation purposes.
9.3 Communications
You may opt out of promotional communications by following the unsubscribe instructions in those messages. You cannot opt out of service-related communications (such as security alerts or billing notifications).
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States and other countries where our service providers operate. These countries may have different data protection laws than your country.
When we transfer data outside the European Economic Area, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Data processing agreements with our service providers
- Adequacy decisions where applicable
11. Children's Privacy
Our Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes indicates your acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: team@minttu.ai
- Company: Nova Impact Ltd
If you are located in the European Economic Area and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.