Privacy Policy

1. Overview

Minimalite ("we", "our", "us") operates the Minimalite platform, an AI-powered image and video generation service. This Privacy Policy describes how we collect, store, and handle information about you when you use our website and services (the "Service").

By using Minimalite, you agree to the collection and use of information in accordance with this policy. This policy applies to all users, including visitors, registered users, and paying subscribers.

2. Information We Collect

We collect only what is necessary to operate and improve the Service. Here is a breakdown of what we collect and why:

2.1 Information You Provide Directly

• Account information: Username, email address, and password (stored as a secure, salted hash — we never store plaintext passwords).
• Profile information: Display name, bio, and profile photo, if you choose to provide them.
• Payment information: We do not store your payment card details. All payment processing is handled by our third-party payment processor, which is PCI-DSS compliant. We receive only a transaction confirmation and your billing plan details.
• Prompts and generation inputs: The text prompts you submit to generate images or videos.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, generation history, and interaction logs, used to improve service performance and your experience.
• Device and browser information: Browser type, operating system, screen resolution, and language settings.
• IP address: Used for security, fraud prevention, and general geographic analytics (country-level only). We do not build location profiles of individual users.
• Session data: Authentication session tokens stored in secure, HTTP-only cookies.

2.3 Information We Do NOT Collect

• We do not collect biometric data.
• We do not track your activity across other websites or applications.
• We do not access your device's camera, microphone, or contacts.
• We do not purchase or import data about you from third-party data brokers.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and authenticate your identity.
• To process your generation requests and return results.
• To display your generated content in your personal gallery.
• To process and track your subscription or credit purchases.
• To send transactional emails (account confirmation, password reset, billing receipts). We do not send unsolicited marketing emails unless you have explicitly opted in.
• To detect and prevent fraud, abuse, or violations of our Terms of Service.
• To monitor platform performance, diagnose technical issues, and improve our AI models and infrastructure.
• To comply with legal obligations where applicable.

We do not use your data for any purpose not listed above without obtaining your consent first.

4. Generated Content & Storage

Generated content is stored in a private, access-controlled environment. Only you can view your generated content through your authenticated account. We do not display your generated content to other users unless you explicitly share it (if a sharing feature is available).

We do not use your generated content to train AI models, improve algorithms, or for any internal or external purpose beyond gallery display. Your creative output belongs to you.

5. We Do Not Share or Sell Your Data

We may share limited information only in the following strictly necessary circumstances:

• Service providers: We work with trusted third-party vendors who assist in operating the Service (e.g., cloud hosting, payment processing, email delivery). These providers are contractually bound to handle your data only as we instruct and may not use it for their own purposes.
• Legal compliance: We may disclose information if required to do so by applicable law, court order, or government authority, and only to the extent legally required. Where permitted by law, we will attempt to notify you before making such a disclosure.
• Protection of rights: We may disclose information if we have a good-faith belief that it is necessary to protect the rights, safety, or property of Minimalite, our users, or the public.
• Business transfer: In the unlikely event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred to the acquiring entity. We will notify you before your data is transferred or becomes subject to a different privacy policy.

None of the above constitutes a sale of your data. We do not participate in data broker markets or advertising networks.

6. Cookies & Tracking

We use a minimal set of cookies necessary for the Service to function:

• Session cookie: A secure, HTTP-only cookie that keeps you logged in during your session. It is deleted when you log out or your session expires.
• Theme preference: A localStorage entry that stores your light/dark theme selection. This never leaves your device and is not transmitted to our servers.

We do not use advertising cookies, tracking pixels, fingerprinting scripts, or any third-party analytics tools that identify individual users. We may collect aggregate, anonymized usage statistics (e.g., "X% of users prefer dark mode") that cannot be linked back to any individual.

7. Data Security

We implement industry-standard technical and organizational measures to protect your data, including:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Passwords are hashed using bcrypt with a work factor designed to resist brute-force attacks. Your actual password is never stored or accessible to us.
• Generated content is stored in access-controlled environments, accessible only through authenticated API requests tied to your session.
• We regularly review and update our security practices.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data (username, email, hashed password) is retained until you delete your account.
• Generated content is retained until you delete it from your gallery or delete your account, whichever comes first. Deletion is permanent — see Section 4.
• Transaction records (purchase history, credit logs) may be retained for up to 7 years for legal and accounting compliance, even after account deletion.
• Server logs (IP addresses, access logs) are retained for a maximum of 90 days for security and diagnostic purposes, then purged.

After account deletion, your personal data will be removed from our active systems within 30 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal data. Minimalite respects these rights and will honor valid requests:

• Access: You can view your profile information and generation history directly within the platform.
• Correction: You can update your display name, bio, and profile photo from your profile settings at any time.
• Deletion: You can delete individual generated content from your gallery or request full account deletion, which will remove all associated personal data.
• Data portability: You may request an export of your personal data by contacting us.
• Opt-out of communications: You can opt out of non-essential emails by using the unsubscribe link in any such message.

To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within 30 days.

10. Children's Privacy

Minimalite is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a minor, we will take immediate steps to delete that information and close the associated account.

If you believe a minor has created an account on Minimalite, please contact us immediately at [email protected].

11. Third-Party Services

Our Service relies on a small number of trusted third-party providers to function:

• Cloud infrastructure: For hosting and content delivery. Our hosting provider processes data on our behalf under a data processing agreement.
• Payment processor: For handling payment transactions. We do not receive or store your full card details. The payment processor's own privacy policy governs the data they collect.
• Email delivery: For transactional emails (receipts, password resets). Email content is transmitted to the provider only for delivery purposes.

All third-party providers are required to maintain appropriate data protection standards. We do not embed social media trackers, advertising SDKs, or third-party analytics tools on our platform.

Links to external websites that may appear in our content are not covered by this Privacy Policy. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or through a prominent notice on the platform before the changes take effect.

We encourage you to review this policy periodically. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us: