Privacy Policy
Last Updated: October 2026
See previous versions of the Privacy Policy in our Policy Archives.
The highlighted text is aimed to give a plain English summary of our Privacy Policy. Please ensure you read the main text, as the plain English summary is just a summary and doesn’t capture all of the terms.
What does this policy cover
Welcome to Minora AI. Our Privacy Policy explains how LLC "MINORAAI" and its affiliates (“Minora AI”, “we”, “our” or “us”) collect, use, disclose, and protect information when you use Minora AI’s enterprise marketing automation platform, autonomous media buying engine, and related services (collectively, the "Service") or interact with us.
Capitalized terms that are not defined in this Privacy Policy have the meaning given to them in our Terms of Use. If you do not want your information processed in accordance with this Privacy Policy, you should not use our Service.
Data Controller vs. Data Processor: For the purpose of privacy laws such as the GDPR and CCPA, Minora AI acts as a Data Processor (or Service Provider) with respect to the marketing, advertising, and customer data you ingest into our Service to run your campaigns. We act as a Data Controller (or Business) with respect to the account information, billing details, and operational telemetry of the individuals who register for and manage a Minora AI account. This Privacy Policy primarily governs situations where Minora AI acts as a Data Controller. Our processing of your marketing and CRM data is governed by our Data Processing Addendum.
Summary: Welcome to the Minora AI Privacy Policy. This policy explains how we collect and use information when you act as a user of our B2B SaaS platform. When you connect advertising platforms or customer data to our engine, we process that strictly on your behalf according to our Data Processing Addendum and enterprise agreements.
1. Information we collect and Meta Platform Data
We collect the following types of information about you and your connected marketing accounts:
(a) Information you provide us directly
We ask for certain information when you register for a Minora AI account, request a demo, or interact with our team. This includes your name, corporate email address, job title, company name, and phone number. We also collect any messages you send us through the Service (such as strategy briefs, support requests, and user feedback), and information you provide in the content you upload to the Service (such as brand guidelines, ad copy, and campaign assets).
We ask for certain information when you register for a Minora AI account, request a demo, or interact with our team. This includes your name, corporate email address, job title, company name, and phone number. We also collect any messages you send us through the Service (such as strategy briefs, support requests, and user feedback), and information you provide in the content you upload to the Service (such as brand guidelines, ad copy, and campaign assets).
(b) Information we receive from third-party applications and advertising platforms
To utilize our autonomous media buying and marketing optimization features, you may connect Minora AI to third-party advertising platforms (such as Meta Ads, Google Ads, TikTok Ads), CRMs, and analytics tools via authorized OAuth integrations or API tokens. When you connect an integration, Minora receives authorization tokens and specific data necessary to execute campaign management on your behalf.
Meta Platform Data: In connection with the Meta app Minora AI Ads, depending on the features and resources you connect (which may include Facebook Pages, ad accounts, catalogs, Pixels, and professional Instagram accounts under configured permissions such as ads_management, ads_read, business_management, catalog_management, instagram_basic, instagram_content_publish, leads_retrieval, pages_manage_ads, pages_read_engagement, and pages_show_list), we process:
Exclusion of Private Correspondence: Minora AI does not access, collect, or process private messaging or correspondence from WhatsApp, Messenger, or Instagram Direct.
To utilize our autonomous media buying and marketing optimization features, you may connect Minora AI to third-party advertising platforms (such as Meta Ads, Google Ads, TikTok Ads), CRMs, and analytics tools via authorized OAuth integrations or API tokens. When you connect an integration, Minora receives authorization tokens and specific data necessary to execute campaign management on your behalf.
Meta Platform Data: In connection with the Meta app Minora AI Ads, depending on the features and resources you connect (which may include Facebook Pages, ad accounts, catalogs, Pixels, and professional Instagram accounts under configured permissions such as ads_management, ads_read, business_management, catalog_management, instagram_basic, instagram_content_publish, leads_retrieval, pages_manage_ads, pages_read_engagement, and pages_show_list), we process:
- Authentication and access tokens;
- Advertising account identifiers, names, business country, currency, timezone, status, and account balance;
- Facebook Page and connected Instagram account identifiers and names;
- Campaigns, ad sets, ads, targeting parameters, and creative assets;
- Aggregated advertising statistics and metrics: impressions, clicks, spend, reach, frequency, conversions, and cost metrics;
- User-selected image and video assets imported from Meta into Minora's secure cloud storage for campaign execution.
Exclusion of Private Correspondence: Minora AI does not access, collect, or process private messaging or correspondence from WhatsApp, Messenger, or Instagram Direct.
(c) Information we collect from you automatically
We directly collect certain technical information about your use of the Service (such as user activity, audit logs, and operational telemetry) for security monitoring and system performance.
We directly collect certain technical information about your use of the Service (such as user activity, audit logs, and operational telemetry) for security monitoring and system performance.
(d) Cookies and log files
When you visit our website or use the Service, we use cookies and log files to authenticate your session and protect security. For more details, see our Cookie Policy.
When you visit our website or use the Service, we use cookies and log files to authenticate your session and protect security. For more details, see our Cookie Policy.
Summary: We collect information you provide directly and the specific advertising data (like ad accounts, campaigns, and metrics) from platforms you connect. We do not access private messages from WhatsApp, Messenger, or Instagram Direct.
2. How we use your information (Including AI Data Processing)
We use the information we collect for the following enterprise purposes:
- Providing the Service: To operate, execute, and maintain our autonomous marketing engine, media buying automation, budget reallocations, and analytics reporting.
- Executing Marketing Workflows: To analyze authorized advertising data, identify market opportunities, and generate tailored campaign recommendations and creative drafts.
- Artificial Intelligence Processing: Minora engages enterprise AI providers (Google Cloud Vertex AI and OpenRouter) to process prompts, strategic parameters, and necessary campaign context strictly to deliver the Service. Data transmitted to AI subprocessors is governed by contractual terms restricting use solely to providing the requested functionality.
- No Model Training on Customer Data: Minora AI does not use customer proprietary data, user prompts, campaign content, or connected platform data (including Meta data) to train, retrain, or fine-tune artificial intelligence models or algorithms. Previous policies permitting model training on aggregated customer data are superseded.
- Google Cloud Vertex AI: Processed via a global endpoint on Google Cloud infrastructure. Model cache configuration is disabled (disableCache: true), and request-response logging is disabled by default. Under applicable Google Cloud terms, Google Cloud may temporarily retain prompts suspected of abuse for up to 90 days solely to review potential security or policy violations; such data is not used to train models.
- OpenRouter: Utilized with Zero Data Retention (ZDR) routing policies enforced across primary model groups, routing strictly through endpoints with zero retention where available, and with logging, broadcast, and data-training discount settings disabled.
- Safety and Security: To detect, prevent, and mitigate fraud, security incidents, unauthorized budget consumption, and API abuse.
- Communications: To deliver system notifications, ROI reports, billing statements, and critical security notices.
Summary: We process your data to operate automated marketing campaigns. We do not use your customer data or Meta data to train AI models. Data processed through Google Cloud Vertex AI and OpenRouter is subject to strict enterprise controls and zero-retention routing where configured.
3. Sharing your information and Subprocessors
(a) Service Providers and Subprocessors
We share necessary data with third-party subprocessors who assist us in operating our platform, including cloud hosting, AI processing, file storage, and email delivery. All subprocessors are bound by enterprise data protection agreements. A full, current list of authorized subprocessors is available at minora.ai/subprocessors.
(b) Connected Advertising Platforms
To execute media buying, campaign changes, and creative deployments that you configure, Minora programmatically transmits campaign parameters and creatives to the third-party platforms you authorize (e.g., Meta, Google).
(c) Corporate Transactions
In the event of a merger, acquisition, reorganization, or sale of assets, customer information may be transferred subject to equivalent confidentiality and notice obligations.
(d) No Sale of Personal Information
Minora AI does not sell customer personal information or connected advertising platform data to third parties.
We share necessary data with third-party subprocessors who assist us in operating our platform, including cloud hosting, AI processing, file storage, and email delivery. All subprocessors are bound by enterprise data protection agreements. A full, current list of authorized subprocessors is available at minora.ai/subprocessors.
(b) Connected Advertising Platforms
To execute media buying, campaign changes, and creative deployments that you configure, Minora programmatically transmits campaign parameters and creatives to the third-party platforms you authorize (e.g., Meta, Google).
(c) Corporate Transactions
In the event of a merger, acquisition, reorganization, or sale of assets, customer information may be transferred subject to equivalent confidentiality and notice obligations.
(d) No Sale of Personal Information
Minora AI does not sell customer personal information or connected advertising platform data to third parties.
4. How we transfer, store, and protect your data
(a) Security Measures: We employ enterprise-grade technical and organizational safeguards, including encryption in transit (TLS) and at rest, role-based access control, and strict API access verification.
(b) Infrastructure and Sovereignty: Global platform services are hosted in secure cloud infrastructure (primarily Google Cloud). Data for users and entities based in the Republic of Uzbekistan is maintained on localized servers in compliance with applicable local data localization requirements.
(b) Infrastructure and Sovereignty: Global platform services are hosted in secure cloud infrastructure (primarily Google Cloud). Data for users and entities based in the Republic of Uzbekistan is maintained on localized servers in compliance with applicable local data localization requirements.
5. Data Retention, Token Disconnection, and Deletion
We adhere to structured data lifecycle and deletion standards:
Detailed deletion instructions are published at minora.ai/data-deletion.
- Maximum Retention: In the absence of an earlier deletion request or integration disconnection, account profiles, billing records, and audit logs are retained for up to five (5) years following account termination to satisfy legal, tax, and accounting compliance obligations.
- Immediate Deletion on Token Revocation: When an integration access token (including a Meta token) is deleted or disconnected in Minora, associated advertising profiles and stored campaign data are immediately deleted on Minora's side.
- User Deletion Requests: Customers and individual users may request deletion of their data at any time by contacting contact@minora.ai. We acknowledge deletion requests within five (5) business days.
- Active System Deletion: Following verification of identity and authority, in-scope data is deleted from Minora's active production systems within thirty (30) calendar days.
- Purging of Backups: Residual disaster-recovery backup copies are systematically purged within ninety (90) calendar days following deletion from active systems.
- Third-Party Systems: Deletion of data held by Minora does not delete live campaigns, accounts, or records residing directly within third-party platforms like Meta. Users must manage those platforms directly.
Detailed deletion instructions are published at minora.ai/data-deletion.
6. Your Rights and Choices
You have the right to access, update, correct, or request the deletion of your personal data held by Minora AI as a Data Controller. You can disconnect integrations at any time via your workspace settings. To exercise your rights, email contact@minora.ai.
7. How to contact us
LLC MINORAAI
Email: contact@minora.ai
Address: Uchtepa District, Vatan MFY, 24-mavze, House 43, Apt 50, Tashkent, Republic of Uzbekistan
Contact us:
E-mail: contact@minora.ai