Privacy Policy

This policy explains how PolicyMint handles your personal information. PolicyMint is a product of Mindset Cyber Pty Ltd (Australia). It covers this website at policymint.ai and the PolicyMint application at app.policymint.ai. By using the site or the app you agree to the handling of information described here. If you have any questions, email us at hello@policymint.ai.

Information we collect

Information you give us

• Contact form. When you send us a message, we collect your name, email address and the content of your message so we can reply.
• Account and business details. When you sign up for the app, we collect your name, email address, and the business or brand details you enter (such as company name, logo and colors) so we can generate documents for you.
• Documents and content. Any existing policies you upload for review, and the documents the app generates, are stored so you can access and edit them.

Information we collect automatically

• Usage analytics. We use Google Analytics 4 and Microsoft Clarity to understand how the site is used (pages viewed, device and browser, approximate location from your IP address, and interaction events). These tools set cookies or similar identifiers.
• Server and security logs. Our hosting and content delivery provider, Cloudflare, records technical information such as IP address and user agent to keep the service secure and reliable.

Cookies and analytics

PolicyMint loads Google Analytics and Microsoft Clarity with analytics storage denied by default. Before you accept optional analytics cookies, those services can send limited, cookieless measurement signals but may not store analytics cookies in your browser. If you accept, they can use analytics cookies to measure journeys across policymint.ai and app.policymint.ai and help us improve the service. You can control or block cookies through your browser settings, and you can opt out of Google Analytics using the Google Analytics opt-out browser add-on. Blocking these cookies will not stop you using the site.

How we use your information

• To respond to your enquiries and provide support.
• To provide, operate and improve the PolicyMint service, including generating and reviewing documents for you.
• To process payments and manage your account.
• To keep the service secure, prevent abuse and diagnose problems.
• To meet our legal and regulatory obligations.

Legal bases for processing

Where the General Data Protection Regulation (GDPR) or similar laws apply, we rely on: your consent (for example, optional analytics where consent is required); our legitimate interests in running and improving a secure service; the performance of a contract when we provide the service to you; and compliance with legal obligations.

How we share information

We do not sell your personal information. We share it only with the service providers that help us run PolicyMint, and only as needed to deliver the service:

• Cloudflare for website hosting, content delivery and security.
• Vercel for hosting and delivering the PolicyMint application.
• Resend to deliver contact form messages and account email.
• Google Analytics and Microsoft Clarity for usage analytics on our website.
• PostHog for product analytics and session replay inside the application. Replays mask the information you type into forms.
• Sentry for error monitoring and diagnostics.
• Supabase for application data storage and authentication.
• Stripe for payment processing.
• OpenRouter and the AI service providers it routes to, which generate and check document drafts. Your business inputs are sent only to produce your documents.

We may also disclose information where required by law, to protect our rights, or as part of a business transfer such as a merger or acquisition.

International transfers

Some of our providers process data outside your country, including in the United States and the European Union. Where we transfer personal information across borders, we take steps to ensure it remains protected under applicable law.

How long we keep it

We keep contact messages for as long as needed to handle your enquiry and our records. Account and document data is kept while your account is active and for a reasonable period afterwards, unless you ask us to delete it sooner. Analytics data is retained according to each provider's settings.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email hello@policymint.ai and we will respond within the time required by law. Australian users can also raise a concern with the Office of the Australian Information Commissioner (OAIC), and users in other regions can contact their local data protection authority.

Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

PolicyMint is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page. Significant changes will be highlighted where appropriate.

Contact us

For any privacy question or request, contact us at hello@policymint.ai. PolicyMint is a product of Mindset Cyber Pty Ltd, Australia.