Privacy Policy

1. Introduction

Miniclay AI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our data validation platform and API services.

2. Information We Collect

We collect the following types of information:

• Account Information: Your name, email address, and authentication data provided through our Clerk-powered sign-in (Google, GitHub, or email).
• API Usage Data: Monthly line counts, API key metadata, and request timestamps for quota enforcement.
• Uploaded Data: CSV files uploaded for validation. These are processed in-memory and not stored permanently — they are deleted after your session expires (30 minutes).
• Technical Data: IP address, browser type, device information, and server logs for security and debugging purposes.

3. How We Use Your Information

• To provide and maintain our data validation and AI safety services.
• To manage your account, API keys, and usage quotas.
• To process and analyze uploaded datasets (temporarily, in-memory only).
• To communicate service updates, security alerts, and support responses.
• To enforce our Terms of Service and prevent abuse.

4. Data Retention

Account information and API usage statistics are retained for as long as your account is active. You may request deletion at any time by contacting us.

5. Data Security

We implement industry-standard security measures including:

• HTTPS encryption for all data in transit.
• Secure API key generation using cryptographic hashing.
• Supabase-hosted database with row-level security policies.
• Environment-variable-based secrets management (never exposed in frontend code).

6. Third-Party Services

We use the following trusted third-party providers:

• Clerk — Authentication and user management.
• Supabase — Database hosting (Postgres).
• Render — Backend server hosting.
• Vercel — Frontend hosting and CDN.
• Groq / NVIDIA — AI model inference for rescue data generation (only when you request it).

Each provider operates under their own privacy policies. We only share the minimum data necessary for each service to function.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Revoke your API key at any time via the dashboard.
• Withdraw consent for data processing.

8. Cookies

We use minimal cookies for authentication (Clerk session tokens) and do not use advertising or tracking cookies. Our site does not employ third-party analytics trackers.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: