Privacy policy

1. Who we are

mintti is operated by [mintti legal entity name] ("mintti", "we", "us"), [registered business address]. This policy explains how we handle personal information when you visit mintti.co, request a demo, or use the mintti point of sale, mintti AI and any mintti module (together, the "Service").

When a business uses mintti to serve its own customers, that business decides how its customers' information is used, and we process it on the business's behalf. In that case, the business's own privacy policy also applies.

2. Information we collect

We collect the following kinds of information:

• Contact and account details: name, email address, mobile number, business name, number of venues, job title and login details.
• Business and transaction data: menus, prices, orders, payments, refunds, stock, staff rosters, bookings and other records you create in the Service.
• Payment information: card and bank details are handled by our payment partners. We receive limited details such as card type, last four digits and payment status.
• Requests to mintti AI: the text or voice requests you send, and the suggestions and changes that result, so we can carry them out and keep an audit log.
• Device and usage data: IP address, device and browser type, app version, pages viewed, features used, error logs and approximate location.
• Communications: messages you send us, demo notes, support conversations and survey responses.

3. How we use information

• To provide, operate and maintain the Service, including processing orders and payments.
• To carry out requests you make to mintti AI, and to show you what will change before you approve it.
• To respond to demo requests, enquiries and support questions.
• To keep the Service secure, prevent fraud and investigate misuse.
• To improve and develop the Service, including measuring how features are used.
• To send service messages, such as receipts, security alerts and changes to these terms.
• To send product news and offers, where you have agreed or the law allows. You can opt out at any time.
• To comply with legal, tax and accounting obligations.

4. mintti AI and your data

Requests you make to mintti AI are processed to understand your instruction, look up the relevant records in your account and prepare a suggested change. Changes are only applied after an authorised user approves them.

We may use AI service providers to process requests. They act on our instructions, under contracts that require them to keep the data confidential and secure. We do not sell your business data or use it to train AI models made available to other customers.

5. How we share information

We share personal information only when needed to run the Service, or when the law requires it:

• Service providers that host, secure, support and help us operate the Service.
• Payment partners to process card, tap and QR payments and payouts.
• Integrations you connect, such as delivery platforms, accounting software or messaging services, to send and receive the data those integrations need.
• Professional advisers, such as lawyers, auditors and insurers.
• Authorities, where we are legally required to, or to protect the rights, property or safety of mintti, our customers or others.
• A buyer or successor if mintti is involved in a merger, acquisition or sale of assets.

We do not sell personal information.

6. International transfers

Our service providers may store or process information in other countries. When we transfer information overseas, we take reasonable steps to make sure it is protected to a standard comparable to the one described in this policy.

7. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Service. After that, we keep it only as long as required for legal, tax, accounting or dispute purposes, and then delete or anonymise it. Demo requests that don't lead to an account are deleted after 24 months.

8. Security

We use administrative, technical and physical safeguards to protect information, including encryption in transit, access controls, staff training and logging. No system is completely secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects you, we will notify you as required by law.

9. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Ask us to delete your information, or to restrict or object to how we use it.
• Receive a copy of your information in a portable format.
• Withdraw consent where we rely on it, and opt out of marketing messages.
• Make a complaint to your local data protection authority.

To make a request, contact us using the details below. We will respond within the time required by law.

10. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, keep the Service secure and understand how our website is used. You can control cookies through your browser settings. Blocking some cookies may stop parts of the Service from working.

11. Children

The Service is designed for businesses and is not directed at children. We do not knowingly collect personal information from children under 16.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date. If the changes are significant, we will let you know by email or in the Service.

13. Contact us

For privacy questions or requests, email privacy@mintti.co or write to [mintti legal entity name], [registered business address].