Mirra Labs, LLC ("we", "us", "our") operates Minispace (minispace.ai). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

By using Minispace, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you create an account, we collect your name and email address. If you sign in with Google, we also receive your Google account ID.

Brand & Website Data

To generate your website, we collect the brand information you provide during onboarding — including your business name, tagline, description, industry, story, brand guidelines, color preferences, and typography choices.

Media & Files

Images, logos, and other files you upload are stored securely on our cloud infrastructure (Cloudflare R2) and used to build your website.

Conversations

We store your conversation history with our AI assistant. These conversations are used to understand your preferences and generate your website content.

Payment Information

When you purchase a custom domain, payment is processed by Stripe. We send your email address to Stripe to create the checkout session. We do not store your credit card details — Stripe handles all payment data directly.

Automatically Collected Data

When you use Minispace, we automatically collect your IP address, browser user agent, and session activity timestamps, which we use to maintain your login state. We also use cookies and similar technologies to understand how Minispace is used: the pages you visit and where you came from, what you click, session recordings, and error reports.

How We Use Your Information

To generate and host your website based on your brand data
To process your conversations and provide AI-powered assistance
To process payments for custom domain purchases
To set up and manage your custom domain
To maintain your account and session security
To send account-related notifications (e.g., password resets)
To understand how Minispace is used, improve it, and find and fix errors

Third-Party Services

We use the following third-party services to operate Minispace. Each receives only the data necessary for its function:

Google OAuth — Authentication. Receives and provides your name, email, and Google account ID when you sign in with Google.
Anthropic (Claude) — Website generation and AI assistance. Receives your conversation history, brand data, and uploaded images to generate your website and provide editing assistance.
Stripe — Payment processing. Receives your email address and processes your payment for custom domain purchases. Stripe's use of your data is governed by their privacy policy.
Cloudflare — Hosting, CDN, DNS, and file storage. Hosts your published website, stores your uploaded files, manages custom domain SSL certificates, and stores the visits counted on sites built with Minispace.
PostHog — Product analytics, error reports and session recordings. Receives the pages you visit, where you came from, what you click, session recordings, error reports, and, once you sign in, your user ID, email address and plan, along with the size and cost of our AI requests. Session recordings can show what's on your screen, including your conversations with Mini, your brand details and your photos. What you type stays hidden until you send it, and your payment card and invoices are hidden.
Google Analytics — Usage analytics, in the app of our previous version. Receives the pages you visit and how you use them.

Visitors to sites built with Minispace

When someone visits a site published with Minispace, we count the visit for the site's owner: the pages and sections they see, the buttons and links they tap, the site they came from, campaign tags in the link, their type of device, browser, and country. Their IP address is used for a moment, to tell visitors apart within a day, to find their country, and to stop abuse, and is never stored.

Where the law asks for consent (the European Economic Area, the UK, and Switzerland), the site asks first, and a visitor who declines gets no cookie. Elsewhere, a cookie (__Host-mns_id) holds a random number for 13 months, so the owner can see when the same visitor comes back. A second cookie (__Host-mns_consent) remembers the visitor's choice for 6 months. A browser's Global Privacy Control signal counts as declining, everywhere.

The site's owner decides why this data is collected; we handle it for them, as their processor, under our Data Processing Terms. We never sell it, never use it for advertising, and never combine it across different owners' sites. Every page of a site has a Privacy link at the bottom that explains this to its visitors and lets them change their choice.

Visit data is kept while the site is on Minispace and deleted within 30 days after the site or its owner's account is deleted. A visitor who wants their data deleted can ask the site's owner, or us at privacy@minispace.ai.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed — including your websites, brand data, conversations, uploaded files, and custom domain records.

Your Choices

Delete your account — You can delete your account at any time from your profile settings. This permanently deletes all your data.
Update your information — You can update your name and email from your profile settings.

Security

We take reasonable measures to protect your data. Passwords are hashed using bcrypt. File uploads use signed URLs with limited expiry. All traffic is served over HTTPS with SSL certificates managed by Cloudflare.

Children's Privacy

Minispace is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, contact us at privacy@minispace.ai.