Privacy
Last updated 26 August 2026
This is a plain-language summary of what Minaya stores and why. It is not a substitute for legal review before you launch — have a lawyer confirm it fits your jurisdiction and your business.
What we store
Your account details (email and, if you signed up with a password, a hashed version of it), your business profile, and the knowledge sources you add — the text, files, and crawled pages you choose to give Minaya, along with the embeddings generated from them.
We also store chat transcripts between Minaya and your visitors, plus aggregate analytics: session counts, message counts, the domain the widget was loaded from, and coarse visitor country.
Your OpenAI key
If you supply your own OpenAI key it is encrypted at rest and used only to make requests on behalf of your business. It is never shown back to you in full, never shared with other accounts, and you can rotate or remove it at any time from your dashboard.
What your visitors see
The widget runs on the domains you allowlist. It does not set advertising cookies or track visitors across other sites. It stores a session identifier so a conversation survives a page refresh.
You are responsible for telling your own visitors that a chat widget is present, in whatever way your jurisdiction requires.
Third parties
Message content is sent to the AI provider that answers it — OpenAI when you supply a key, or our configured provider on the free tier — solely to generate a reply. Payments, where applicable, are handled by our payment processor; we never see or store full card details.
Deleting your data
Removing a knowledge source deletes its stored content and embeddings. Closing your account removes your business profile, knowledge sources, and transcripts. Write to hello@minaya.ai and we will confirm once it is done.
Contact
Questions about any of this go to hello@minaya.ai.