1. Introduction
This policy explains how Minket handles personal information when you visit minket.com, use the Minket console or API, or receive email sent through Minket. Questions go to privacy@minket.com.
When an organization uses Minket to send or receive email, it decides what that email contains and who receives it, and Minket processes the information on its behalf. That organization's own privacy policy covers what it does with your information.
2. What we collect
- Account information: your email address, your name if you give it, how you sign in, and the organizations and roles you belong to.
- Usage information: the requests you make to minket.com, the console and the API, with the address they came from, the time and the result.
- Email information: for the organizations that use Minket, the email they send and receive, its recipients, and what happened to it (delivered, bounced, opened or clicked, when the sender turns tracking on).
- Contacts: the names, addresses and subscription choices an organization keeps in Minket.
- Mailbox access: the sign-in tokens Google, Microsoft or a mail server issue when someone connects a mailbox.
3. How we use it
Minket uses personal information to provide the service: to send, receive and deliver email, show organizations what happened to it, honour unsubscribes, stop sending to addresses that bounce or complain, keep accounts secure, prevent abuse and fix problems. It does not sell personal information, use it for advertising, or use email content to train AI models.
Where the GDPR applies, Minket relies on the contract with the organizations it serves, on its legitimate interest in keeping the service secure and email deliverable, and on its legal obligations.
4. Google user data
An organization can connect a Gmail or Google Workspace mailbox so that Minket sends email as that account. The account's owner connects it on Google's consent screen, which asks for three permissions: gmail.send to send email as the account, and email and openid to show which account is connected.
- Minket uses this data only to send the email the organization asks it to send from that mailbox. It cannot read, search or delete any email in the mailbox.
- The tokens are encrypted at rest and never shown, returned by the API or logged.
- Google user data is not sold, not used for advertising, not used to train AI models, and not shared except as needed to send the email or as the law requires.
- Removing the mailbox in Minket revokes its access and deletes the tokens. Access can also be removed at any time in the Google account's settings.
Minket's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Microsoft user data
A Microsoft 365 or Outlook mailbox is connected the same way, with the Mail.Send, email, openid and offline_access permissions, and under the same rules: used only to send what the organization asks, never to read the mailbox, tokens encrypted, deleted when the mailbox is removed.
6. Retention
- Email content and attachments: 30 days.
- Addresses and delivery events: 13 months.
- Request logs: 30 days.
- Unsubscribes and consent records: as long as the organization uses Minket, so each choice keeps being honoured.
- Account information: until the account or organization is deleted.
8. Where data is kept
Minket stores and processes information in the United States. Where a transfer out of your country needs a safeguard, such as the European Commission's standard contractual clauses, Minket relies on the ones its providers offer.
9. Security
Information is encrypted in transit and at rest, API keys are stored only as hashes, and each organization's data is kept apart from every other's. More on the security page. If a breach affects your information, Minket will tell you as the law requires.
11. Your rights
Depending on where you live, including under the GDPR and California law, you can ask to see, correct, export or delete your personal information, or object to how it is used. Write to privacy@minket.com; Minket answers within 30 days. If you received email from an organization that uses Minket, write to that organization first. You can also complain to your data protection authority.
12. Children
Minket is not meant for anyone under 16 and does not knowingly collect their information.
13. Changes
Changes to this policy are published on this page. Significant changes are also sent by email to the organizations that use Minket.