Privacy Policy

Last Updated: July 7, 2026

1. Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the Data Controller for the Service is Facundo Martin Vega (NIF: Z2932527D), with registered address at Luis Lamarca 22, Valencia, Spain, located in Valencia, Spain. Contact: legal@minota.es.

2. Information We Collect

Account Data: Name, email, and profile picture (via Google Sign-In).
Service Data: Tasks, notes, financial tracking inputs, and WhatsApp message logs required to provide the AI assistant functionality.
Vault Data: Data stored in your Private Vault is end-to-end encrypted. We cannot access or decrypt this data.

3. Google User Data and Workspace API Policy

Minota AI requests access to specific Google user data strictly required to provide personalized assistance. We access the following information based on the granular scopes enabled by the user:

Google Profile Data: Name, email address, and profile picture used solely to authenticate your account and manage your user profile.
Gmail: We access email content (metadata and body) to provide summaries, search messages, and deliver proactive email management features at your request.
Google Calendar: We access calendar events (dates, times, attendees, titles) to manage scheduling, sync events, and set reminders.
Google Drive: We access file metadata and content (specifically for supported document types) to extract information, answer queries, and facilitate knowledge management within your personal vault/notes.

Prohibition of Non-Functional Uses

We use raw and aggregated/anonymized Google user data strictly to provide and improve the user-facing features of Minota AI. We do not use Google user data for targeted advertising, credit-worthiness determinations, market research, selling to third parties, or any other non-functional purposes prohibited by the Google API Services User Data Policy.

Explicit AI/ML Training Affirmation

We specifically confirm that our application does not use Google Workspace API data to develop, improve, or train generalized, foundational, or non-personalized AI and/or machine learning models.

Limited Use Compliance

The use and transfer to any other app of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Transfer and Sharing

Minota AI does not sell or lease your personal information. We do not share your raw or aggregated Google user data with third parties, except:

When necessary to provide the features explicitly requested by the user.
If required by law, regulation, or mandatory legal process.
With trusted service providers that support our infrastructure (e.g., cloud hosting, LLM query execution), all of whom are bound by strict confidentiality and data protection agreements.

5. Data Security

We prioritize the security of your data. Google user data is protected using industry-standard encryption, both in transit (TLS 1.3) and at rest. Access to data is strictly limited to the necessary automated systems required to function and is protected by robust internal access controls and zero-knowledge encryption architecture for sensitive private vaults.

6. Data Retention and Your Rights

We retain your data as long as your account is active. You may delete your account at any time via the app settings, which triggers the permanent deletion of your data within 30 days. Under the GDPR, you have the right to access, rectify, erase, restrict processing of, and request portability of your personal data.