Privacy Policy

MinzyAI ("we", "us", or "our") operates the MinzyAI web application. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our service to transform children's drawings into personalized keepsakes.

By using MinzyAI, you agree to the collection and use of information in accordance with this policy. This policy is designed to comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

We use the collected information for the following purposes:

• To process and fulfill your orders
• To generate AI-enhanced images from uploaded drawings using enterprise-grade AI processing (Google Gemini API)
• To communicate with you about your orders, including shipping updates
• To send promotional emails (only if you opt-in during account creation)
• To improve our service and user experience
• To analyze usage patterns through Google Analytics
• To comply with legal obligations and enforce our terms of service

We work with the following third-party service providers to operate our service:

Uploaded drawings and AI-generated images are stored securely in our Supabase storage. We keep these images long enough for you to download your digital files (if you purchased digital products), and then automatically delete them from our Supabase storage after 30 days from order completion. This retention period allows us to address any customer service inquiries or product quality issues that may arise after delivery, while ensuring your data is not retained longer than necessary.

We retain your personal information (name, email, address, phone) for as long as your account is active or as needed to provide you services. If you wish to delete your account or request that we no longer use your information, please contact us at hello@minzy.ai.

We use cookies and browser local storage to enhance your experience on our service:

You can instruct your browser to refuse all cookies or clear local storage at any time. However, if you do not accept cookies or clear local storage, some features of our service may not function properly.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure hosting infrastructure through Vercel
• Regular security assessments and updates
• Restricted access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Under the Personal Data Protection Act 2010 (PDPA), you have the following rights:

• Right to Access: Request access to your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete personal data
• Right to Withdrawal: Withdraw consent for processing your personal data
• Right to Object: Object to the processing of your personal data for direct marketing
• Right to Deletion: Request deletion of your personal data when it is no longer needed

To exercise any of these rights, please contact us at hello@minzy.ai. We will respond to your request within 21 days as required by PDPA.

During account creation, you will be asked whether you wish to receive promotional emails and newsletters from us. If you opt-in, we may send you marketing communications about new products, special offers, and other updates.

You can opt-out of receiving marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at hello@minzy.ai

Please note that even if you opt-out of marketing emails, we will still send you transactional emails related to your orders and account.

While our service involves children's drawings, we do not knowingly collect personal information from children. Our service is designed for use by adults (parents, guardians, or teachers) who upload children's drawings on their behalf. The drawings themselves contain no personally identifiable information and are processed anonymously.

If we become aware that we have collected personal information from a child without proper parental consent, we will take steps to delete that information immediately.

We currently operate only within Malaysia. However, some of our third-party service providers may process data in other countries. These include:

• Google Gemini (AI processing)
• Google Analytics (analytics)
• Stripe (payment processing)
• Supabase (database and storage)
• Vercel (hosting)
• Resend (email delivery)

When your data is transferred internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us: