Privacy Policy

1. Summary

• We collect what we need to run MintBots: account details, your Assistants’ settings, usage and billing.
• Visitor conversations are stored only so the conversation can continue. Owners cannot read them, and they are deleted after 30 days without new messages.
• We do not sell personal information, and we do not use conversations to train AI models.
• We use Cloudflare Turnstile, in its invisible mode, to protect the Service from automated abuse. See section 5.
• Owners can delete their account and all of its data at any time from the app’s settings.

2. Information we collect

2.1 From Owners

• Account details: your name, email address and, if you give it, your company or project name. Your password is stored only as a secure one-way hash.
• Sign-in and security: a record of each signed-in session with your browser and device description and IP address, so that you can see your sessions and sign them out.
• Your Assistants: everything you enter for them, such as names, addresses, instructions, business details, questions and answers, notes and appearance settings.
• Usage: how many tokens and messages your Assistants use in each period, which AI models they use and how many requests were refused for safety reasons. This does not include what Visitors wrote.
• Billing: our billing provider, Chargebee, handles payments. We receive and store your subscription status, plan, billing period, renewal date and the identifiers Chargebee uses for you and your subscription. We do not receive or store your full card number.
• Messages to us: anything you send us, for example in support emails.

2.2 From Visitors who chat with Assistants

• Conversations: the messages you send and the replies you receive. They are stored so that you can continue the conversation, and they are linked to a random identifier stored in your browser, not to your name or email address (unless you type them into the chat).
• Browser storage: the random identifier and a conversation key are kept in your browser’s local storage for the Assistant’s address. See section 6.
• IP address and technical information: used when you send a message to limit the rate of requests and to prevent abuse, in short-lived counters that expire within about two days. Your IP address is not stored with your conversation. Our servers and Cloudflare also keep logs that include IP addresses for a limited time, for security and troubleshooting.
• Refused messages: if our AI provider refuses a message for safety reasons, we delete it and keep only a count.
• Reports: if you report an Assistant, we store the reason you choose and any details you write, without your identifier or IP address.
• Turnstile: information Cloudflare collects for its security check. See section 5.

2.3 From visitors to mintbots.co

Our website does not use cookies or advertising trackers. To count visits, we use Cloudflare Web Analytics, which does not use cookies or browser storage and does not track you across websites. For each page view it records information such as the page, the page that linked to it, your browser, your type of device and your country, which we see only as totals. We use it only on mintbots.co, not in the app or on Assistants.

The website also loads current prices from our app. Cloudflare, which delivers and protects the website, processes information such as your IP address to do so.

2.4 Sensitive information

Please do not share sensitive information, such as health details, financial account numbers, passwords or government identification numbers, in conversations or in an Assistant’s settings. Assistants are told never to ask Visitors for passwords, payment card numbers or government identification numbers.

3. How we use information

We use personal information for the purposes below. If you are in the European Economic Area, the United Kingdom or Switzerland, the legal basis for each purpose is shown in brackets.

• To provide the Service: creating accounts, hosting Assistants, generating replies and showing Owners their usage (performance of our contract with Owners, and our legitimate interest in providing the Assistants Visitors choose to use).
• To bill for the Service (performance of a contract, and legal obligations).
• To keep the Service safe: security checks against automated abuse, rate limits, automatic safety checks of Assistants, screening of messages by our AI provider, handling reports and enforcing our Terms (legitimate interests in protecting Visitors, Owners and the Service, and legal obligations).
• To communicate with Owners: verification codes, password resets, and notices about billing, usage and changes to the Service (performance of a contract). We do not send marketing emails without permission where the law requires it.
• To run and improve the Service: usage and cost statistics, counts of visits to our website, testing (including automated testing of Assistants) and troubleshooting (legitimate interests).
• To meet legal obligations and to protect our rights and the rights of others (legal obligations and legitimate interests).

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use conversations to train AI models.

4. How AI replies are made

Replies are generated by AI models through DigitalOcean’s serverless inference service. To create a reply, we send DigitalOcean the Assistant’s instructions (the Owner’s settings plus our platform rules), the recent conversation and the new message. We also send an anonymous identifier for the Visitor: a one-way code that is not the Visitor’s name, email or IP address, so that abuse can be traced to a single visitor rather than to the whole Service.

DigitalOcean may screen and temporarily keep messages and replies to detect abuse, under its own terms. When an Owner publishes an Assistant, its settings are also sent to our AI provider for our automatic safety check.

5. Cloudflare Turnstile

To protect sign-up, password reset and the start of every Assistant conversation from spam and automated abuse, we use Cloudflare Turnstile in its invisible mode. Turnstile runs a check in your browser without asking you to do anything. To do this, Cloudflare collects information about your browser and device and how they behave, and processes your IP address.

Cloudflare’s use of this information is described in the Cloudflare Turnstile Privacy Addendum and Cloudflare’s Privacy Policy.

6. Cookies and browser storage

We do not use advertising or analytics cookies. This is everything the Service stores in your browser or loads to measure visits:

7. Sponsored content

The Service is supported in part by advertising, and we plan to show sponsored content, such as sponsored links or cards, in Assistant conversations. Sponsored content will be labeled. To choose relevant sponsored content, we may use the topic of the current conversation and the Assistant’s category, and we may record whether sponsored content was shown or clicked. We will not use conversations to build profiles of Visitors across Assistants or websites. If sponsored content requires any use of personal information not described here, we will update this policy before it begins.

8. How we share information

We share personal information only as described here.

8.1 Service providers

These companies process personal information for us, under contracts that limit how they can use it:

8.2 Owners

Owners do not receive the content of Visitors’ conversations. They see how many tokens their Assistants use.

8.3 Other sharing

• Legal reasons: when we believe in good faith it is required by law or legal process, or needed to protect the safety, rights or property of Visitors, Owners, us or others, including reporting child sexual abuse material to the National Center for Missing & Exploited Children.
• Business transfers: as part of a merger, acquisition, financing or sale of assets, subject to this policy.
• With your permission.

Our team accesses personal information only when needed for support, security, safety or legal reasons. We do not look at the content of conversations except where needed to investigate abuse or where the law requires it.

9. How long we keep information

10. Security

We protect personal information with measures including encryption in transit (HTTPS), hashed passwords, limited access for our team, servers that only accept web traffic that comes through Cloudflare, and regular backups. No system is perfectly secure, so we cannot guarantee the security of information.

11. International transfers

We are based in the United States, and our servers are in the United States. Cloudflare operates a global network. If you are outside the United States, your information will be processed in the United States and in other countries where our providers operate. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

12. Your rights and choices

12.1 Owners

You can see and update your account details in the app’s settings, sign out your sessions, and delete your account, which deletes your Assistants and your data as described in section 9. You can also ask us for a copy of your information, or to correct or delete it, by emailing [email protected].

12.2 Visitors

Conversations are linked only to a random identifier in your browser, so we may not be able to find your conversation without more information. To ask us to delete a conversation, email [email protected] with the Assistant’s address and the approximate date and time of the conversation. Clearing your browser storage removes the link between your browser and the conversation, and conversations are deleted automatically after 30 days without new messages.

12.3 European Economic Area, United Kingdom and Switzerland

You have the right to access, correct, delete, restrict or object to the processing of your personal information, to receive it in a portable format and to withdraw consent where we rely on it. You can also complain to your local data protection authority.

12.4 United States

Depending on where you live, including California, you may have the right to know what personal information we collect and how we use it, to access, correct or delete it, and to opt out of its sale or sharing for cross-context behavioral advertising (we do not sell or share it). We do not use sensitive personal information for purposes that require offering a right to limit its use. We will not discriminate against you for using your rights. You can use an authorized agent, and you can appeal if we decline a request by replying to our decision.

To use any of these rights, email [email protected]. We will verify your request before acting on it and respond within the time the law requires.

13. Children

The Service is not directed to children under 13, or under 16 in the European Economic Area and the United Kingdom, and we do not knowingly collect their personal information. Owners must not direct Assistants to children. If you believe a child has given us personal information, contact us and we will delete it.

14. Information for Owners

If you link to an Assistant or add it to your website, you are responsible for telling your own visitors what the law requires, for example in your own privacy notice, including that they are chatting with an AI assistant provided through MintBots and that this policy applies to the information the Assistant collects. Do not add other people’s personal information to an Assistant unless you are allowed to.

15. Changes to this policy

We may update this policy. We will post the new version on this page with a new date, and if the changes are material, we will tell Owners by email or in the app before they take effect.

16. Contact

Verticode Inc.
1286 University Ave #510
San Diego, CA 92103
United States
[email protected]