Your Privacy Matters

Who We Are

MineSync.ai ("MineSync", "we", "us", "our") is a software platform for mine asset management. Our platform includes the Lifecycle, Scheduler, Benchmark, AI Chat, and Admin modules. This privacy policy applies to all MineSync products and the minesync.ai marketing website.

For privacy-related questions, contact us at privacy@minesync.ai.

What We Collect and Why

Identity & Access

When you sign up for MineSync, we collect your name and email address. This lets us create your account, authenticate you, and send service-related communications. We use NextAuth.js for authentication and do not store passwords in plain text.

Billing Information

If you upgrade to a paid plan, your payment details (credit card number, billing address) are collected and processed by our payment processor. We do not store full credit card numbers on our servers.

Product Usage & Customer Data

When you use MineSync, you input data about your fleet, equipment, maintenance schedules, and operations ("Customer Data"). This data is stored to provide you with the service. Your Customer Data belongs to you — we process it on your behalf under your organization's direction.

Geolocation & Technical Data

We log your IP address and basic browser information for security monitoring, rate limiting, and abuse prevention. We do not use this data for advertising.

Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

AI Chat

When you use the AI Chat feature, your queries and the relevant fleet data used to generate responses are processed by our AI providers. We do not use your prompts or Customer Data to train AI models. Conversations are logged for service quality and debugging purposes and are subject to the same data retention and deletion policies as other Customer Data.

When We Share Your Information

We do not sell your personal data. We share information only in these circumstances:

• Infrastructure providers — Our application is hosted on Vercel and our database runs on Neon (managed PostgreSQL). These providers process data on our behalf under data processing agreements.
• AI providers — The AI Chat feature sends relevant context to our AI provider to generate responses. We contractually prohibit the use of your data for model training.
• Legal requirements — We may disclose information if required by law, subpoena, or valid court order. We will notify you before disclosure unless legally prohibited from doing so.
• Business transfers — If MineSync is acquired or merged, your data may be transferred to the successor. We will notify you before any such transfer.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of your personal data.
• Correction — Ask us to fix inaccurate data.
• Deletion — Request that we delete your personal data.
• Portability — Receive your data in a machine-readable format.
• Restriction / Objection — Limit or object to certain processing activities.
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email privacy@minesync.ai. We will respond within 30 days.

California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA), California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a request, contact privacy@minesync.ai.

Data Security

All data in transit is encrypted via TLS 1.2 or higher. Data at rest is encrypted by our infrastructure providers. We enforce role-based access controls and audit logging across the platform. For more detail, see our Security page.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the service. If you cancel your account, we will delete your data within 60 days, except where retention is required by law (e.g., tax or financial records). Audit logs may be retained for up to 12 months for security purposes.

International Data Transfers

MineSync is hosted in the United States via Vercel and Neon. If you are accessing MineSync from outside the United States, your data will be transferred to and processed in the United States. Where required (e.g., for EU users), we rely on Standard Contractual Clauses (SCCs) to ensure adequate data protection for international transfers.

Children's Privacy

MineSync is a B2B platform designed for professional use. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at privacy@minesync.ai and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we will also notify you by email.