Privacy Policy

1. Who we are

Auxity AB is the data controller for personal data processed through the Minecontacts service. Where we process mailbox data on behalf of business customers, we may act as a data processor. Our registered address is Skogsdungegatan 7d, 254 74 Ödåkra, Sweden. You can contact us at privacy@minecontacts.com.

2. Personal data we process

We may process the following categories of personal data:

• Account and profile data — name, email address, password (hashed), and authentication details.
• Mailbox-derived data — names, email addresses, job titles, companies, phone numbers, and domains extracted from connected inboxes.
• Support data — communications you send to us for support or enquiries.
• Payment and subscription data — billing details processed via Stripe (we do not store full card details).
• Technical and usage data — IP addresses, browser type, device information, and service usage logs.
• Deduplication and integrity data — hashed identifiers only, used to prevent duplicate charges.

3. Sensitive data

Minecontacts is not designed to process special-category data (such as health, religious beliefs, or political opinions). Where such data is incidentally present in a mailbox, it is processed only to the minimum extent necessary to deliver the service, and is not used for advertising or profiling.

4. Where the data comes from

We collect personal data from the following sources:

• Directly from you when you register and use the service.
• From connected mailboxes (Google or Microsoft accounts) with your explicit authorisation.
• From payment, authentication, and analytics service providers.
• Automatically when you use the service (usage logs, technical data).

5. Why we process personal data and our legal bases

• Account management — to create and maintain your account (legal basis: contract).
• Service delivery — to scan inboxes, extract contacts, and provide exports and integrations (legal basis: contract / legitimate interests).
• Service notices — to send you important service updates (legal basis: contract / legitimate interests).
• Support — to respond to your enquiries (legal basis: contract / legitimate interests).
• Security and fraud prevention — to protect the integrity of the service (legal basis: legitimate interests / legal obligation).
• Legal compliance — to comply with applicable laws and regulations (legal basis: legal obligation).
• Non-essential analytics — to understand how the service is used and improve it (legal basis: consent).

6. AI use

We use AI tools to identify and extract business contact details from email content and signatures. We send only the minimum necessary text to AI providers. Our AI processing does not make decisions with legal effects about individuals, and is not used for automated profiling.

7. Sharing of personal data

We share personal data only where necessary, with the following categories of recipients:

• Authentication, database, and infrastructure providers (Supabase, Microsoft Azure)
• Hosting and cloud providers
• Payment providers (Stripe)
• Email delivery and support providers (Resend)
• Analytics providers where enabled (Google Analytics)
• AI providers (OpenAI) for contact extraction processing
• Public authorities where required by applicable law

We do not sell personal data to third parties.

8. International transfers

Some of our service providers process data outside the EEA, UK, or Switzerland. Where this occurs, we ensure that appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Data minimisation and retention

We apply data minimisation principles throughout our processing. Temporary session data is kept for up to 24 hours and then deleted. Account, billing, support, and log data is retained only for as long as necessary for the purpose for which it was collected, or as required by law. Hashed deduplication fingerprints are retained to prevent duplicate billing charges.

10. Security

We implement appropriate technical and organisational security measures to protect your data, including: access controls, encryption in transit (TLS), logging and monitoring, vendor security controls, and security incident response procedures.

11. Children

The Minecontacts service is intended for business use and is not directed to individuals under the age of 18. We do not knowingly process personal data of minors.

12. Your privacy rights

Depending on applicable law, you may have the following rights:

• Access — the right to obtain a copy of your personal data.
• Correction — the right to have inaccurate data corrected.
• Deletion — the right to have your data deleted ("right to be forgotten").
• Restriction — the right to restrict processing in certain circumstances.
• Objection — the right to object to processing based on legitimate interests.
• Portability — the right to receive your data in a structured, machine-readable format.
• Withdraw consent — the right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@minecontacts.com. You also have the right to lodge a complaint with your local supervisory authority. In Sweden, this is Integritetsskyddsmyndigheten (IMY) at imy.se.

13. US state privacy disclosures

Where applicable under US state privacy laws (including CCPA/CPRA), you have rights to know, access, correct, delete, and obtain a copy of your personal data. We do not sell personal data and do not engage in targeted advertising. We may need to verify your identity before fulfilling a request.

14. Cookies and analytics

We use essential cookies required for the operation of the service. Where permitted or where you have given consent, we may also use analytics technologies to understand usage patterns and improve the service. You can manage cookie preferences through your browser settings.

15. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

16. Contact

For any questions or requests relating to this Privacy Policy or the processing of your personal data, please contact us: