Privacy Policy

Overview

This policy covers both the MinuteMind application (including our mobile apps) and the MinuteMind marketing website at minutemind.co. The section The MinuteMind Application below describes how the app handles your account and content, including AI processing and account deletion. The remaining sections describe data submitted through the marketing website and basic website analytics.

Who Is Responsible for Your Data

EDFAST AS is the data controller for personal data processed through the MinuteMind app and this website. That means we decide what data is collected and why, and we are the party you exercise your rights against.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy questions go to the contact address above.

Our Legal Basis for Processing

Under the GDPR we must have a lawful basis for each purpose we process personal data for. Ours are:

• Performance of a contract (Art. 6(1)(b)) — operating your account, transcribing and summarising the content you give us, processing payments, and providing support. Without this processing we cannot deliver the service you signed up for.
• Legitimate interests (Art. 6(1)(f)) — keeping the service secure, preventing fraud and abuse, troubleshooting, and understanding aggregate product usage. We balance these against your rights, and you can object (see below).
• Consent (Art. 6(1)(a)) — marketing emails, the waitlist, the lead-magnet downloads, and optional website analytics. You can withdraw consent at any time, and withdrawing it does not affect processing already carried out.
• Legal obligation (Art. 6(1)(c)) — retaining invoices and transaction records for the periods accounting and tax law require.

Meeting recordings and transcripts can contain whatever participants happened to say, which may include sensitive topics. We do not ask for, and do not intentionally process, special categories of data under Article 9 — you control what you record and upload.

The MinuteMind Application

When you use the MinuteMind app to capture thoughts, run or upload meetings, and manage tasks, we process the following to provide the service.

Information the App Collects

• Account information: your name and email address
• Audio you record or upload (voice captures and meeting recordings)
• Content you create: transcripts, summaries, notes, tasks, documents, and messages
• Usage and diagnostic information to operate and improve the app (via our own, self-hosted analytics)

AI Processing

MinuteMind uses AI to transcribe, summarize, and help act on your content. Audio is transcribed on our own servers. To generate summaries, action items, drafts, and assistant responses, your text content is processed by AI models. Depending on your plan and settings, this runs either on our own self-hosted models or is sent to third-party AI providers — currently Google (Gemini), OpenAI, Anthropic, and Perplexity. These providers process your content to return results on our behalf and do not use API content to train their models. We do not send your name or email to these AI providers, and we do not sell your data.

Deleting Your Account and Data

You can request deletion of your account and all associated data from within the app (Settings → Delete account) or by emailing hello@minutemind.co. A deletion request starts a 30-day grace period during which it can be cancelled; after that, your account and all associated content are permanently deleted from our systems.

Security in the App

Data exchanged between the app and our servers is encrypted in transit using TLS (HTTPS).

Information We Collect Through This Site

Contact Form

• Name
• Email address
• Message content
• Whether you checked the privacy consent box
• Your browser timezone, which is added to API requests by the frontend

Lead Magnet and Waitlist Forms

• Email address
• Your browser timezone
• For the Elite waitlist only: optional campaign parameters such as utm_source and utm_campaign

Try-It-Out Demo

• Text you type into the demo
• Audio you record and upload through the demo
• Your browser timezone

Checkout and Payment-Related Data

• Email address
• Full name, if provided by you or supplied by Stripe
• Selected plan and billing cycle
• Stripe session, customer, and subscription identifiers
• Payment status and refund or cancellation events sent by Stripe webhooks

Website Analytics

• We may load Microsoft Clarity on this site when it is configured in the environment
• That can collect usage and device information such as page interactions, clicks, scrolls, and technical/browser data

How We Use This Information

• To reply to messages sent through the contact form
• To send requested downloads or waitlist confirmations
• To process demo submissions
• To create and manage paid subscriptions and related account setup workflows
• To operate, troubleshoot, and improve the website and onboarding flow
• To monitor website usage through analytics when enabled
• To comply with legal obligations and handle abuse, fraud, refunds, or disputes

Where Data Goes

Based on this website code, data submitted through the site may be sent to the following service providers or systems:

• Mailjet for contact emails, lead magnet emails, and waitlist emails
• Stripe for checkout, subscriptions, and payment webhooks
• Microsoft Clarity for website analytics, when enabled
• MinuteMind backend services for demo processing, lead capture, account provisioning, and subscription updates

Processors We Use

These are the third parties that process personal data on our behalf, what they do, and where they are established. We update this list when we add or change a provider.

Audio transcription runs on our own servers and is not sent to any of these providers. Which AI provider handles a given request depends on your plan and settings; on self-hosted models, no third party is involved at all.

What This Site Stores

This marketing site forwards most submitted data to email providers, payment providers, or MinuteMind backend services. Based on the code in this repository, the landing site itself does not maintain its own user database for contact messages, lead magnets, or the try-it-out demo.

The site may still temporarily process or log request data on the server while handling a submission. If a third-party email provider is not configured or returns an error, the server code may log submitted form data for operational troubleshooting.

Cookies and Tracking

We do not operate a cookie consent banner on this website today. If Microsoft Clarity is enabled, Clarity may use cookies or similar technologies as part of its analytics service.

You can limit cookies through your browser settings. You can also block analytics scripts using browser privacy tools or content blockers.

Security

We take reasonable steps to protect information submitted through this site, including using established third-party providers for email delivery and payment processing.

We do not claim on this page that MinuteMind is certified under SOC 2 or similar programs unless and until that has actually been completed.

Retention

Retention depends on the system that receives the data:

• Contact and lead emails may remain in Mailjet mail logs or internal inboxes
• Payment and subscription records are retained by Stripe and the MinuteMind backend as needed for billing and support
• Demo submissions sent to the backend are retained according to backend-side rules, which are not defined in this repository
• Analytics retention is determined by Microsoft Clarity when enabled

Your Choices

• You can choose not to submit forms on this site
• You can request deletion of your app account and data in the app (Settings → Delete account) or by email, and you can contact us to request deletion of information you submitted through the marketing site
• You can use browser controls to limit cookies and analytics technologies
• You can contact Stripe directly for payment-method management handled inside Stripe Checkout

Your Rights Under the GDPR

If you are in the EEA or the UK, you have the following rights over your personal data. They apply to both the app and this website.

• Access — get confirmation of what we process about you, and a copy of it.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — have your data deleted. In the app this is self-service: Settings → Delete account, described in full on our account deletion page.
• Data portability — receive the data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible.
• Restriction — ask us to pause processing while a dispute about accuracy or legitimate interests is resolved.
• Objection — object to processing based on legitimate interests, and object to direct marketing at any time, with no reason required.
• Withdraw consent — where processing rests on consent, withdraw it at any time without affecting processing already carried out.
• Automated decision-making — we do not make decisions with legal or similarly significant effects about you by automated means, so no right of human review arises. Our AI features generate suggestions; they do not decide anything about you.

To exercise any of these, email hello@minutemind.co from the address on your account. We respond within one month, as Article 12(3) requires; if a request is complex we may extend that by two further months and will tell you why. Exercising your rights is free unless a request is manifestly unfounded or excessive.

If you think we have handled your data wrongly, you can complain to your local supervisory authority — for us that is the Norwegian Data Protection Authority (Datatilsynet). You can also complain to the authority in the EU or UK country where you live or work.

International Data Transfers

Our own servers process and store your content in Europe. Some of the providers listed above are established in the United States, so using those features transfers personal data outside the EEA — specifically to Google (Gemini), OpenAI, Anthropic, Perplexity, Stripe, and Microsoft (Clarity).

Those transfers rely on the European Commission's Standard Contractual Clauses, and, where the provider is certified, the EU–US Data Privacy Framework. We do not send your name or email address to the AI providers, and they do not use API content to train their models. You can ask us for details of the safeguards that apply to a specific provider.

Children

MinuteMind is a workplace productivity tool and is not directed at children. You must be at least 16 to create an account, or the minimum age of digital consent in your country if that is higher. We do not knowingly collect personal data from children. If you believe a child has given us data, email hello@minutemind.co and we will delete the account and its content.

Changes to This Policy

We may update this page when our website flows or providers change. When we do, we will update the date at the top of this policy.

Contact

For privacy questions or deletion requests for the app or this marketing site, contact: