Privacy Policy

1. Scope

This policy covers personal information we handle as a business (for example, information about visitors to our websites and account users). When we process borrower and loan information on behalf of a customer organization, that organization is the controller of the data and our handling is governed by our Data Processing Addendum. If you are a borrower, please direct privacy requests to the broker or lender managing your loan.

2. Information we collect

• Account information — name, email, organization, role, and authentication identifiers used to create and secure your account.
• Loan and borrower data — information you submit to manage loan files, including application (URLA / 1003) data, documents, and conditions. This may include sensitive financial information processed on behalf of your organization.
• Usage data — log data, device and browser information, and actions taken in the product, used to operate and secure the Services.
• Cookies and similar technologies — see our Cookie Policy.

3. How we use information

• To provide, maintain, secure, and improve the Services;
• To authenticate users and prevent fraud and abuse;
• To provide support and respond to requests;
• To send service and administrative communications;
• To comply with legal obligations and enforce our terms.

We do not sell personal information, and we do not use borrower loan data to train general-purpose AI models. AI features process file data only to generate outputs for your organization.

4. Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, and consent where required.

5. How we share information

• Service providers (subprocessors) — vendors that host and support the Services under contractual confidentiality and security obligations.
• At your direction — third-party integrations you enable, such as email, e-signature, payments, mapping, and AI providers.
• Legal and safety — when required by law or to protect rights, safety, and the integrity of the Services.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Subprocessors

We use trusted infrastructure and service providers, including Amazon Web Services (hosting and storage) and providers for email delivery, document processing, e-signature, payments, and AI features. A current list of subprocessors is available on request.

7. Data retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes. Customer Data is retained according to your organization’s instructions and the Data Processing Addendum, and is deleted or returned upon termination as described there.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest and access controls. See our Security page for details.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. Residents of California and other U.S. states may have rights under applicable privacy laws, including the right to know and the right to delete, and the right not to be discriminated against for exercising those rights. To exercise a right, contact privacy@minapro.io. If your request concerns data we process on behalf of a customer, we will refer you to that organization.

10. International transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards such as standard contractual clauses for cross-border transfers.

11. Children

The Services are not directed to children, and we do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the Services or by other reasonable means.

13. Contact

For privacy questions or requests, contact privacy@minapro.io.