Minaka Privacy Policy

Last Updated: February 27, 2026 Effective Date: February 27, 2026

This Privacy Policy describes how Minaka ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our venue management software and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

Name, email address, phone number
Business name, venue name
Billing information (processed securely through Stripe)
Password and security credentials

Client Data:

Contact information (names, emails, phone numbers of your clients)
Event details (event dates, types, descriptions)
Financial data (proposals, invoices, payment schedules, transaction records)
Communications (emails, SMS messages sent through the Service)
Files and documents (contracts, photos, attachments)
Custom data you create using the Service (templates, automations, branding assets)

Support Communications:

Support tickets, chat messages, emails to customer support
Feedback, surveys, and feature requests

1.2 Information We Collect Automatically

Usage Data:

Pages visited, features accessed, time spent on pages
Click patterns, navigation paths, search queries
Device information (browser type, operating system, device ID)
IP address, location data (city, region, country)
Cookies and similar tracking technologies

Performance Data:

Error logs, crash reports, performance metrics
API usage, database query times
Feature usage analytics (which features are used most often)

1.3 Information from Third Parties

Payment Processor (Stripe):

Payment method details, transaction status, billing history
We do not store full credit card numbers

Integrations:

If you connect third-party services (e.g., email providers, calendar apps), we may receive information from those services in accordance with their privacy policies

2. How We Use Your Information

We use your information for the following purposes:

2.1 Provide and Improve the Service

Operate, maintain, and deliver the Service's features
Process payments and manage subscriptions
Send transactional emails (event confirmations, payment receipts, notifications)
Provide customer support and respond to inquiries
Detect, prevent, and address technical issues and security threats

2.2 Personalization and Analytics

Customize your experience and recommend relevant features
Analyze usage patterns to improve product design and functionality
Conduct research and development for new features
Generate aggregated, anonymized statistics about Service usage

2.3 Communications

Send you account-related notifications (password resets, billing updates, service changes)
Send marketing communications (product updates, new features, promotions) - you can opt out at any time
Respond to your questions, requests, and feedback

2.4 Compliance and Legal Obligations

Comply with applicable laws, regulations, and legal processes
Enforce our Terms of Service and other policies
Protect the rights, property, and safety of Minaka, our users, and the public
Resolve disputes and investigate potential violations

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

Stripe (payment processing)
Resend (email delivery)
Twilio (SMS messaging)
Supabase (database hosting and infrastructure)
Vercel (application hosting)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.2 Business Transfers

If Minaka is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

Court orders, subpoenas, or other legal processes
Requests from government or law enforcement agencies
Situations where disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others

3.4 With Your Consent

We may share your information with third parties when you explicitly consent or direct us to do so.

3.5 Aggregated or Anonymized Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, for research, marketing, analytics, or other purposes.

4. Data Retention

4.1 Active Accounts

We retain your information for as long as your account is active and as necessary to provide the Service to you.

4.2 After Account Closure

When you close your account:

We retain your information for 30 days to allow for account recovery
After 30 days, we delete or anonymize your personal information and Client Data, except:
- Information required for legal, regulatory, or compliance purposes
- Information necessary to resolve disputes or enforce agreements
- Aggregated, anonymized analytics data

4.3 Downgraded Accounts

If you downgrade from a paid tier to the Core (Free) tier:

We retain all your Client Data indefinitely (unless you delete it manually)
Premium feature configurations become read-only but are not deleted
If your account remains inactive on the Core tier for 365 days, we may archive premium feature data with 30 days' notice

4.4 Legal Hold

If your information is subject to a legal hold, investigation, or litigation, we will retain it until the matter is resolved, regardless of the standard retention periods.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information, including:

Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL
Encryption at rest: Sensitive data is encrypted when stored in our databases
Access controls: Role-based access controls limit who can access your data
Regular security audits: We conduct regular security assessments and penetration testing
Multi-factor authentication: Available for account security

5.2 Your Responsibility

You are responsible for:

Choosing a strong, unique password
Keeping your password confidential
Enabling multi-factor authentication (if available)
Notifying us immediately if you suspect unauthorized access

5.3 No Guarantee

While we take reasonable measures to protect your information, no system is completely secure. You acknowledge that you provide information at your own risk. We cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Correction

You can access and update your account information at any time through your account settings.

6.2 Data Portability

You can export your Client Data in a machine-readable format (CSV, JSON) through the Service's export features.

6.3 Deletion

You can delete your account at any time. Upon deletion:

Your account will be deactivated immediately
Your personal information and Client Data will be deleted within 30 days
Some information may be retained for legal or compliance purposes

To delete your account, contact us at [support@minaka.app] or use the account deletion option in your settings.

6.4 Opt-Out of Marketing

You can opt out of marketing emails by:

Clicking the "Unsubscribe" link in any marketing email
Updating your communication preferences in your account settings
Contacting us at [support@minaka.app]

Note: You cannot opt out of transactional emails related to your account or the Service (e.g., billing notifications, security alerts).

6.5 Cookies and Tracking

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

7. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you.

7.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal data.

7.3 Right to Erasure

You have the right to request deletion of your personal data ("right to be forgotten"), subject to certain exceptions (e.g., legal obligations).

7.4 Right to Restrict Processing

You have the right to restrict how we process your personal data in certain circumstances.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller.

7.6 Right to Object

You have the right to object to our processing of your personal data for direct marketing or other purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time.

7.8 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

To exercise these rights, contact us at [privacy@minaka.app].

8. CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

8.1 Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collection, and the categories of third parties with whom we share it.

8.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

8.3 Right to Opt-Out of Sale

We do not sell your personal information. If our practices change, we will update this Privacy Policy and provide you with an opt-out mechanism.

8.4 Non-Discrimination

You have the right not to receive discriminatory treatment for exercising your CCPA rights.

To exercise these rights, contact us at [privacy@minaka.app] or call [toll-free number].

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 18, please contact us at [privacy@minaka.app].

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When we transfer your information internationally, we take steps to ensure it receives an adequate level of protection, including:

Using Standard Contractual Clauses approved by the European Commission
Ensuring our service providers are certified under applicable data protection frameworks
Obtaining your explicit consent when required

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

Essential Cookies:

Required for the Service to function (e.g., session management, authentication)
Cannot be disabled without affecting Service functionality

Analytics Cookies:

Help us understand how users interact with the Service
Used to improve performance and user experience
Examples: Google Analytics, Vercel Analytics

Preference Cookies:

Remember your settings and preferences (e.g., language, theme)

Marketing Cookies:

Track your activity across websites to deliver targeted ads
You can opt out through your browser settings or third-party opt-out tools

11.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

Block all cookies
Block third-party cookies only
Delete cookies when you close your browser

For more information, visit www.allaboutcookies.org.

12. Third-Party Links and Services

The Service may contain links to third-party websites, services, or integrations (e.g., Stripe, email providers). This Privacy Policy does not apply to those third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing them with your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

We will post the updated Privacy Policy on this page
We will update the "Last Updated" date at the top
For material changes, we will provide at least 30 days' advance notice via email or a prominent notice in the Service

Your continued use of the Service after changes take effect constitutes your acceptance of the updated Privacy Policy.

14. Data Processing Agreement (DPA)

If you use the Service to process personal data on behalf of your clients (e.g., event attendee information, client contact details), you act as a "data controller" and we act as a "data processor" under GDPR.

A Data Processing Agreement (DPA) outlining our data processing obligations is available upon request. To request a DPA, contact us at [privacy@minaka.app].

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Minaka Privacy Team Email: [privacy@minaka.app] Support: [support@minaka.app] Website: [https://www.minaka.app/legal/privacy]

Data Protection Officer (if applicable): Email: [dpo@minaka.app]

For GDPR-related inquiries: Email: [gdpr@minaka.app]

For CCPA-related inquiries: Email: [ccpa@minaka.app] Phone: [toll-free number]

16. Summary of Key Points

For your convenience, here's a summary of the most important points in this Privacy Policy:

| What We Collect | Why We Collect It | Who We Share It With | |----------------|-------------------|----------------------| | Account info (name, email, billing) | To provide the Service and process payments | Stripe (payments only) | | Client Data (contacts, events, financials) | To deliver CRM and event management features | Only your authorized team members | | Usage data (pages visited, features used) | To improve the Service and fix bugs | Analytics providers (anonymized) | | Support communications | To help you and improve customer service | Only our support team |

We do not sell your data.

You can delete your account and data at any time.

Your Client Data belongs to you.

By using Minaka, you acknowledge that you have read, understood, and agree to this Privacy Policy.