Privacy Policy

Minibite AI ("Company", "we", "us", or "our") knows you care about how your personal information is used and shared, and we take your privacy seriously. Please read the following to learn more about our Privacy Policy. By using or accessing our Services ("minibite.ai") in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy.

The privacy of your data is a big deal to us. We'll only ever access your account to help you with a problem or squash a software bug. We'll never open any private content unless you ask us to.

Information We Collect

When you use minibite.ai, we collect the following types of information:

• Account Information: When you sign up, we collect your email address and name through Google authentication or magic link.
• Business Information: Information you provide about your products, services, or offerings (name, URL, description, target audience, key features, calls to action) used to generate content.
• Generated Content: Slideshows you create — including AI-generated images, captions, and hashtags — are stored in our database and object storage so you can access them in your dashboard.
• Usage Data: Information about how you use our Service, including content generated, features used, and preferences.
• Connected Accounts: If you connect social media accounts (like TikTok), we store the necessary tokens and basic account information to enable publishing.
• Rewards Submissions: Content you submit through our Rewards program (testimonials, tweet URLs, ratings, names, roles, profile links) for our review.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Generate personalized content for your business
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities in connection with our Services

Use of Google User Data

Access: Our application accesses Google user data through OAuth 2.0 authentication. We request only the minimum permissions necessary to provide our services.

Usage: We store your Google account email address to identify your account. This data is used solely for authentication and account management purposes.

Storage: Google user data is stored securely on Supabase servers. All data is encrypted at rest and in transit.

Sharing: We do not share Google user data with any third parties, except when required by law.

Minibite.ai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok Integration

If you choose to connect your TikTok account, we access and store:

• Your TikTok username and profile information
• Authentication tokens required to publish content on your behalf
• Basic account statistics for analytics purposes

We only publish content to TikTok when you explicitly request it. You can disconnect your TikTok account at any time from your dashboard settings.

Data Sharing and Third-Party Tools

We don't share any personally identifying information publicly or with third parties, except when required to by law.

Our application uses the following third-party services:

• Supabase: For database, authentication, and storage services. All data is stored securely on Supabase servers with encryption at rest.
• Polar.sh: For subscription and payment processing. We do not store your full payment card details.
• Google Gemini (paid API): For AI-powered content generation (slide text, captions, hashtags, images). We use Google's paid Gemini API. Per Google's API terms, content submitted to the paid tier is not used to train Google's models. Your business information is sent to Gemini only as needed to generate the content you request.

Important: We do not sell your personal information and we do not share your content with any AI provider other than those listed above.

Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• All data is encrypted in transit using TLS/SSL
• Data at rest is encrypted using Supabase's built-in encryption
• Access to user data is restricted to authorized personnel only
• Row Level Security (RLS) policies protect database access
• Authentication is handled securely through Supabase Auth

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you wish to cancel your account or request that we delete your data, please contact us at support@minibite.ai.

GDPR Compliance

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

• The right to access, update, or delete your personal information
• The right to rectification
• The right to object to processing
• The right to restriction of processing
• The right to data portability
• The right to withdraw consent

Rewards Program Submissions

If you submit a testimonial, tweet link, or other content through our Rewards program, the submission (including name, role, quote, rating, and any profile URL you provide) is stored in our database and reviewed manually by our team. Approved testimonials may be displayed publicly on our marketing pages, homepage, and paid ads. See our Terms of Service for the content license you grant by submitting.

You can request removal from marketing use at any time by emailing support@minibite.ai.

Cookies and Tracking

We use the following types of cookies and similar technologies:

• Essential cookies: Required for the Service to function — session cookies set by Supabase for authentication, and by Vercel for hosting.
• Functional cookies: Remember your preferences (e.g. selected language on the user manual).
• Analytics and advertising: We may use third-party analytics and advertising platforms (such as Meta Pixel, TikTok Pixel, or Google Analytics) to measure usage and reach new users. When we do, we will update this policy and, where required by law, display a cookie consent banner before placing such cookies.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you refuse essential cookies, some portions of our Service may not function properly.

Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.

Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about how we handle user data and personal information, feel free to contact us at support@minibite.ai.