Privacy Policy

1. Who we are

Mintdreamer (“we”, “us”, “our”) is an AI image, video, and audio generation service operated by IMFIT LET PTD. This Privacy Policy explains how we collect, use, and protect your personal information when you use mintdreamer.com (“the Service”). We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information we collect

Account information

When you create an account, we collect your email address and authentication credentials. If you sign in through Google, we receive the profile information you authorize (name, email, profile picture).

Prompts and generated content

We store the prompts you submit and the images, videos, and audio that the Service produces for you. This includes session history so you can revisit and iterate on past generations. All generated content is private to your account by default; you choose if and when to publish or share it.

Usage data

We use self-hosted, cookie-free Plausible Analytics to understand how the Service is used in aggregate (pages visited, features used, generation counts). Plausible does not set cookies, does not collect personal data, and does not track you across sites. See the Plausible data policy.

We also use Microsoft Clarity session analytics and first-party attribution cookies. When you create an account, we may associate an opaque Clarity browser identifier, landing page, referrer, and advertising parameters such as gclid and UTM values with your account. This lets us understand which acquisition sources lead to successful generations and purchases. The account attribution record excludes prompt and reference-image query parameters.

Payment information

All payment processing is handled by Stripe. We do not directly collect or store your card numbers or banking details. See Stripe’s Privacy Policy for how they handle payment data.

3. How we use AI and your data

Mintdreamer routes prompts to specialized image, video, and audio models through providers including OpenRouter, Fal, and Runware. When you submit a prompt:

• Your prompt and any reference media are forwarded to the model provider required to fulfill the request.
• We do not use your prompts or generated content to train AI models, and we select providers that contractually commit to the same.
• Generated outputs are returned to you and stored privately in your account so you can refine, download, or delete them.
• We retain a copy of each generation’s input/output for as long as the generation exists in your account, so the gallery, history, and re-run features work as expected.

Third-party AI providers process your data according to their own privacy policies. The provider used for each generation is recorded and visible in your account.

4. How we use your information

• Service delivery: to provide, maintain, and improve the Service, including AI-powered generation and the workflow editor.
• Billing: to manage your subscription and credit balance via Stripe.
• Communication: to send you service-related updates, security alerts, and support messages.
• Abuse prevention: to detect and prevent fraud, automated scraping, and prohibited content generation (see Terms § 6).
• Product improvement: to analyze aggregated, anonymized usage patterns and improve the Service.

5. Data storage and security

Your data is stored on Supabase Storage and Postgres (hosted on AWS infrastructure in us-west-2). We implement industry-standard security measures:

• Encryption in transit (TLS 1.2+) and at rest
• Row-level security policies on all database tables
• Server-side credit and quota enforcement (never trusted to the client)
• OAuth and password-based authentication with session refresh

6. Data sharing

We do not sell your personal data. We share information only with:

• Stripe: our payment processor, for subscription and credit pack billing.
• AI model providers (OpenRouter, Fal, Runware, and others disclosed in your account): to process generation requests.
• Infrastructure providers: Supabase for storage and database, Vercel for application hosting.
• Self-hosted Plausible: for cookie-free usage analytics; Plausible analytics data stays on our infrastructure.
• Microsoft Clarity: for session analytics and product usability research, subject to your applicable consent choices.
• Legal requirements: when required by law, court order, or government request, after appropriate review.

7. Your rights

Depending on your jurisdiction (GDPR, CCPA, or similar), you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your account, prompts, and generated content.
• Portability: receive your data in a structured, machine-readable format.
• Restriction or objection: ask us to limit processing in specific cases.
• Opt-out of sale or sharing (CCPA): we do not sell or share your personal information; this opt-out is a no-op for us.

To exercise any of these rights, email [email protected]. We respond within 30 days.

8. Data retention

• Account data, prompts, and generated content are retained while your account is active.
• After account deletion, personal data and generated content are permanently removed within 30 days.
• Anonymized, aggregated analytics may be retained indefinitely.
• Billing records are retained as required by law (typically 7 years).

9. Cookies

We use essential first-party cookies to keep you logged in and protect against CSRF, plus first-party analytics and attribution cookies where permitted. These remember how you first reached the Service and may carry opaque advertising or Clarity identifiers. Plausible itself does not set cookies. Where required, we ask for consent before enabling non-essential analytics storage.

10. Children’s privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

11. International transfers

Mintdreamer is operated from the United States. If you access the Service from outside the US, your information may be transferred to, stored, and processed in the US and other countries where our providers operate. We rely on standard contractual clauses with our subprocessors where required.

12. Changes to this policy

We may update this Privacy Policy as the Service evolves. We will notify you of material changes via email or an in-app notice at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

13. Contact

For privacy questions or data requests, email [email protected].