Mini Agency

Privacy Policy

Last updated 2026-05-15. This is a placeholder draft — final policy pending legal review.

1. Data controller

Mini Agency is the data controller for personal data processed under this policy. Contact: privacy@miniagency.ai.

2. What we collect

  • Account data: first name, last name, email, hashed password.
  • Usage data: pages visited, features used, IP address and user-agent for security and analytics.
  • Content: the sites, pages, media and collections you create inside the Service.
  • Newsletter consent (optional): if you opt in, we record the timestamp of consent.

3. Why we process it (legal basis)

  • Contract (Art. 6.1.b GDPR): providing the Service you signed up for.
  • Consent (Art. 6.1.a): marketing emails — freely given, separable, revocable at any time.
  • Legitimate interest (Art. 6.1.f): securing the Service against fraud and abuse.
  • Legal obligation (Art. 6.1.c): billing records, tax compliance.

4. Retention

Account data is kept while your account is active and for 3 years after closure for legal-claim purposes. Billing records are kept for 10 years per French tax law.

5. Recipients

Your data is processed by sub-processors strictly needed to operate the Service: hosting (Vercel, USA — SCC), database (Neon, EU), email (Resend, EU), payment (Stripe, EU/USA — SCC), analytics (PostHog, EU). A full list is available on request.

6. International transfers

Where data is transferred outside the EEA we rely on the European Commission's Standard Contractual Clauses (2021/914).

7. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, port your data, and to object to processing. You can withdraw newsletter consent at any time via the unsubscribe link in every email, or by writing to privacy@miniagency.ai. You may lodge a complaint with the CNIL (cnil.fr).

8. Cookies

We split cookies into three categories you control from the banner that appears on your first visit (and can be re-opened any time from the footer's Manage cookies link):

  • Strictly necessary— session + authentication. Always on; the app doesn't work without them. No consent required under ePrivacy.
  • Analytics — anonymised usage signals via Google Tag Manager (Google Analytics 4). Loaded only after you opt in.
  • Marketing — conversion attribution for paid campaigns (Meta Pixel, Google Ads). Loaded only after you opt in. Used to measure how visitors find us, never to target ads to you on this site.

Your choice is stored in a ma_cookie_consent cookie scoped to .miniagency.ai, shared with our marketing site at miniagency.aiso you only see the banner once. The cookie lasts 12 months; you can clear it any time by re-opening the banner and saving fresh preferences.

9. Changes

We'll notify you by email at least 30 days before material changes take effect.