Privacy Policy

1. Who We Are

Minted ("we", "us", "our") operates the Minted analytics platform at useminted.com and app.useminted.com. We are the data controller for information collected through our website and service. Contact: support@useminted.com.

2. What Data We Collect

2a. Data from Minted customers (you)

When you create a Minted account, we collect:

Email address (for authentication and communication)
Name (if provided)
WooCommerce store URL and API credentials (to sync your store data)
Billing information (processed by Paddle; we do not store card details)

2b. Data from your store visitors (collected via the tracking snippet)

When you install the Minted tracking snippet on your WooCommerce store, we collect the following from your visitors on your behalf:

Page views, click events, and browsing behaviour
Referrer URL, UTM parameters, and traffic source
Approximate location (country and city, derived from IP address)
Device type, browser, and screen size
A randomly generated visitor ID (stored in a first-party cookie)

We do not collect: passwords, payment card details, health data, or any special category personal data from your visitors. We do not use fingerprinting. IP addresses are used for geolocation only and are not stored.

3. How We Use Data

To provide and operate the Minted analytics service
To display visitor analytics, customer profiles, and attribution reports in your dashboard
To send transactional emails (account verification, sale notifications, billing)
To improve the Service (aggregated, anonymised usage patterns)

We do not sell, rent, or share your data or your visitors' data with third parties for advertising or marketing purposes.

4. Legal Basis for Processing (GDPR)

Contract: Processing your account data is necessary to provide the Service you subscribed to.
Legitimate interest: Analytics data collection serves your legitimate interest in understanding your store's performance. You are responsible for establishing the legal basis for collecting data from your own visitors.
Consent: Where required by law (e.g., marketing emails), we obtain explicit consent.

5. Data Sharing

We share data only with:

Supabase (database hosting, EU region available)
Cloudflare (CDN, edge computing, DDoS protection)
Paddle (payment processing)

All sub-processors are GDPR-compliant. We do not transfer data outside the EEA without adequate safeguards.

6. Data Retention

Free plan: Visitor analytics data retained for 30 days
Starter plan: 90 days
Growth plan: 1 year
Pro plan: Unlimited retention
Account data: Retained for the duration of your subscription, plus 30 days after cancellation

7. Cookies

The Minted tracking snippet sets a single first-party cookie (_minted_id) on your store visitors' browsers. This cookie contains a randomly generated ID and expires after 1 year. It is used solely to recognise returning visitors for analytics purposes. We do not use third-party tracking cookies.

On useminted.com, we use only essential cookies for authentication. No advertising or third-party cookies.

8. Your Rights (GDPR)

If you are in the EEA or UK, you have the right to:

Access your personal data
Rectify inaccurate data
Request erasure ("right to be forgotten")
Restrict or object to processing
Data portability (export your data)
Withdraw consent at any time

To exercise these rights, contact support@useminted.com or use the Data Privacy controls in your Minted dashboard (Settings → Data Privacy).

9. Your Visitors' Rights

As a Minted customer, you are the data controller for the visitor data collected on your store. You are responsible for providing your visitors with appropriate privacy disclosures and honouring their data rights. Minted provides tools in the dashboard to export and delete individual visitor data to help you comply with data subject requests.

10. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security reviews. All data is hosted on infrastructure provided by Supabase and Cloudflare.

11. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. The "Last updated" date at the top indicates the most recent revision.

13. Contact

For privacy-related inquiries, contact us at support@useminted.com.