Privacy Policy
Last updated: April 9, 2026
MintFace AI ("we", "our", or "us") operates the MintFace service ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your information.
1. Information We Collect
We collect the following categories of information:
- Account Information — Email address, content preference, and optional use case description when you join our waitlist or create an account.
- Payment Information — Card payments are processed by Stripe; cryptocurrency payments are processed by a third-party crypto-payment provider. MintFace does not directly collect, store, or process credit card numbers, CVVs, banking details, wallet addresses, or private keys. We receive only transaction confirmations, order identifiers, and payment status from our payment providers.
- AI Generation Data — Text prompts, generation settings, and generated images you create through our service.
- Log Information — IP address, browser type, operating system, referring URLs, and browsing behavior collected automatically when you visit our site.
- Analytics Data — UTM parameters, page views, and anonymized usage patterns via PostHog.
- Cookies — Minimal, functional cookies required for the service to operate. We do not use advertising cookies or cross-site tracking.
2. Biometric Data Notice
MintFace processes facial geometry derived from the photographs you upload to train custom AI personas. Under applicable state biometric privacy laws (including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and Washington's biometric statute), this constitutes biometric data. We commit to the following:
- Biometric data is processed solely for the purpose of generating the AI persona you requested.
- We do not use biometric data for identification, surveillance, authentication, or any third-party purpose.
- When you delete a persona, the associated reference photographs and derived biometric data are permanently deleted.
- We never sell, lease, trade, or otherwise profit from your biometric data.
3. How We Use Your Information
- Provide & Improve Services — To operate, maintain, and enhance our AI persona generation platform.
- Process Payments — To process one-time credit-pack purchases securely via our payment providers.
- Content Moderation — We may review generated content and prompts to ensure compliance with our Content Policy and applicable laws, particularly to prevent illegal content.
- Communication — To send transactional emails, waitlist updates, and service-related information via Resend.
- Analytics & Research — To analyze anonymized usage patterns and improve service quality.
- Legal Compliance — To comply with applicable laws, respond to legal requests, and protect our rights.
4. Sharing Your Information
We do not sell, trade, or share your personal information with third parties for marketing purposes. We may share information in these circumstances:
- Service Providers — Third-party providers that help operate our service, including database hosting, email delivery, payment processing, analytics, AI generation, and CDN/storage.
- Legal Requirements — When required by law, court order, or to protect our rights, privacy, safety, or property. This includes cooperation with law enforcement regarding prohibited content.
- Business Transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.
We do not use your prompts or generated images to train AI models. Your content is yours.
5. Data Storage & Security
Your data is stored securely using managed database infrastructure and object storage. We use industry-standard encryption for data in transit (TLS) and at rest.
We take precautions to secure your generated images, prompts, and account data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We recommend maintaining the confidentiality of your account credentials and not sharing generated content publicly if you wish to maintain privacy.
6. Data Retention
- Account data — Retained while your account is active; permanently erased 30 days after account deletion.
- Generated content (images / videos) — Deleted upon account deletion. You may download your content via your dashboard before deletion.
- Payment transaction records — Retained for 7 years to comply with tax and legal obligations.
- Security and moderation logs — Retained 90 days.
7. Your Rights
Depending on your location (including rights under GDPR, CCPA, and similar regulations), you may have the following rights:
- Access — Request a copy of the personal data we hold about you.
- Correction — Request correction of inaccurate personal data.
- Deletion — Request deletion of your personal data and generated content.
- Objection — Object to the processing of your personal data.
- Portability — Request a machine-readable export of your data.
- Unsubscribe — Opt out of marketing emails at any time via the unsubscribe link.
- Analytics opt-out — Opt out of analytics tracking.
- CCPA — No Sale of Personal Data — We do not sell personal data. We have not sold or shared personal information for monetary or other valuable consideration in the preceding 12 months.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
8. Age Restrictions
MintFace is intended for adults only. We do not knowingly collect personal information from anyone under the age of 18 (or the age of majority in their jurisdiction). If we become aware that we have collected personal information from a minor, we will take immediate steps to delete that information and terminate the associated account.
9. International Data Transfers
Your information may be transferred to and processed in countries outside of your country of residence, including countries where our service providers operate. These countries may have data protection laws that differ from those in your country. By using MintFace, you consent to these transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
For questions about this Privacy Policy, email [email protected].