Privacy Policy
Last updated: April 9, 2026
1. Information We Collect
We collect the following categories of information:
- Account Information — Email address, content tier preference, and optional use case description when you join our waitlist or create an account.
- Payment Information — Cryptocurrency transaction details processed by NOWPayments.io. We do not store wallet addresses or private keys on our servers.
- AI Generation Data — Text prompts, generation settings, and generated images you create through our service. This may include adult/NSFW prompts and content.
- Log Information — IP address, browser type, operating system, referring URLs, and browsing behavior collected automatically when you visit our site.
- Analytics Data — UTM parameters, page views, and anonymized usage patterns via PostHog.
- Cookies — Minimal, functional cookies required for the service to operate. We do not use advertising cookies or cross-site tracking.
2. How We Use Your Information
- Provide & Improve Services — To operate, maintain, and enhance our AI persona generation platform.
- Process Payments — To process cryptocurrency transactions securely via our payment provider.
- Content Moderation — We may review generated content and prompts to ensure compliance with our Content Policy and applicable laws, particularly to prevent illegal content.
- Communication — To send transactional emails, waitlist updates, and service-related information via Resend.
- Analytics & Research — To analyze anonymized usage patterns and improve service quality.
- Legal Compliance — To comply with applicable laws, respond to legal requests, and protect our rights.
3. Sharing Your Information
We do not sell, trade, or share your personal information with third parties for marketing purposes. We may share information in these circumstances:
- Service Providers — Third-party providers that help operate our service: Supabase (database), Resend (email), NOWPayments.io (payments), PostHog (analytics), wavespeed.ai (AI generation), Cloudflare (CDN/storage).
- Legal Requirements — When required by law, court order, or to protect our rights, privacy, safety, or property. This includes cooperation with law enforcement regarding prohibited content.
- Business Transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.
We do not use your prompts or generated images to train AI models. Your content is yours.
4. Data Storage & Security
Your data is stored securely using Supabase (hosted on AWS infrastructure) and Cloudflare R2 (generated images). We use industry-standard encryption for data in transit (TLS) and at rest.
Given the sensitive nature of adult content, we take extra precautions to secure your generated images, prompts, and account data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We recommend maintaining the confidentiality of your account credentials and not sharing generated content publicly if you wish to maintain privacy.
5. Data Retention
- Waitlist data — Retained until you request deletion or 12 months after service launch, whichever comes first.
- Account data — Retained for the duration of your active account.
- Generated content — Stored in your account for the duration of your subscription. Content may be automatically deleted after account termination or prolonged inactivity. Download any content you wish to keep.
- Payment records — Retained as required by applicable tax and financial regulations.
- Moderation logs — Content flagged or removed for policy violations may be retained for compliance and law enforcement purposes.
6. Your Rights
Depending on your location (including rights under GDPR, CCPA, and similar regulations), you may have the following rights:
- Access — Request a copy of the personal data we hold about you.
- Correction — Request correction of inaccurate personal data.
- Deletion — Request deletion of your personal data and generated content.
- Objection — Object to the processing of your personal data.
- Portability — Request a machine-readable export of your data.
- Unsubscribe — Opt out of marketing emails at any time via the unsubscribe link.
- Analytics opt-out — Opt out of analytics tracking.
To exercise these rights, contact us at [email protected]. We will respond within 30 days.
7. Age Restrictions
MintFace is strictly for adults only. We do not knowingly collect personal information from anyone under the age of 18 (or the age of majority in their jurisdiction). If we become aware that we have collected personal information from a minor, we will take immediate steps to delete that information and terminate the associated account.
8. International Data Transfers
Your information may be transferred to and processed in countries outside of your country of residence, including countries where our service providers operate. These countries may have data protection laws that differ from those in your country. By using MintFace, you consent to these transfers.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact
For questions about this Privacy Policy, email [email protected].