Privacy Policy

Mirra Labs, LLC ("we", "us", "our") operates Minispace (minispace.ai). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

By using Minispace, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

When you create an account, we collect your name and email address. If you sign in with Google, we also receive your Google account ID.

Brand & Website Data

To generate your website, we collect the brand information you provide during onboarding — including your business name, tagline, description, industry, story, brand guidelines, color preferences, and typography choices.

Media & Files

Images, logos, and other files you upload are stored securely on our cloud infrastructure (Cloudflare R2) and used to build your website.

Conversations

We store your conversation history with our AI assistant. These conversations are used to understand your preferences and generate your website content.

Payment Information

When you purchase a custom domain, payment is processed by Stripe. We send your email address to Stripe to create the checkout session. We do not store your credit card details — Stripe handles all payment data directly.

Automatically Collected Data

When you use Minispace, we automatically collect your IP address, browser user agent, and session activity timestamps. This data is stored in your session and used to maintain your login state.

How We Use Your Information

• To generate and host your website based on your brand data
• To process your conversations and provide AI-powered assistance
• To process payments for custom domain purchases
• To set up and manage your custom domain
• To maintain your account and session security
• To send account-related notifications (e.g., password resets)

Third-Party Services

We use the following third-party services to operate Minispace. Each receives only the data necessary for its function:

• Google OAuth — Authentication. Receives and provides your name, email, and Google account ID when you sign in with Google.
• AI Language Models (via OpenRouter) — Website generation and AI assistance. Receives your conversation history, brand data, and uploaded images to generate your website and provide editing assistance.
• Stripe — Payment processing. Receives your email address and processes your payment for custom domain purchases. Stripe's use of your data is governed by their privacy policy.
• Cloudflare — Hosting, CDN, DNS, and file storage. Hosts your published website, stores your uploaded files, and manages custom domain SSL certificates.

Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed — including your websites, brand data, conversations, uploaded files, and custom domain records.

Your Choices

• Delete your account — You can delete your account at any time from your profile settings. This permanently deletes all your data.
• Update your information — You can update your name and email from your profile settings.

Security

We take reasonable measures to protect your data. Passwords are hashed using bcrypt. File uploads use signed URLs with limited expiry. All traffic is served over HTTPS with SSL certificates managed by Cloudflare.

Children's Privacy

Minispace is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, contact us at privacy@minispace.ai.