Last Updated: March 2026
See previous versions of the Privacy Policy in our
Policy Archives.
The highlighted text is aimed to give a plain English summary of our Privacy Policy. Please ensure you read the main text, as the plain English summary is just a summary and doesn’t capture all of the terms.
What does this policy cover
Welcome to Minora AI. Our Privacy Policy explains how OOO "MINORAAI" and its affiliates (“Minora AI”, “we”, “our” or “us”) collect, use, disclose, and protect information when you use Minora AI’s enterprise marketing automation platform, autonomous media buying engine, and related services (collectively, the "Service") or interact with us.
Capitalized terms that are not defined in this Privacy Policy have the meaning given to them in our
Terms of Use. If you do not want your information processed in accordance with this Privacy Policy, you should not use our Service.
Data Controller vs. Data Processor: For the purpose of privacy laws such as the GDPR and CCPA, Minora AI acts as a Data Processor (or Service Provider) with respect to the marketing, CRM, and end-user data you ingest into our Service to run your campaigns. We act as a Data Controller (or Business) with respect to the account information, billing details, and usage telemetry of the individuals who register for and manage a Minora AI account. This Privacy Policy primarily governs situations where Minora AI acts as a Data Controller. Our processing of your marketing data is governed by our
Data Processing Addendum.
Summary: Welcome to the Minora AI Privacy Policy. This policy explains how we collect and use information when you act as a user of our B2B SaaS platform. It also clarifies that when you feed your own customer data into our engine, we process that strictly on your behalf according to our Data Processing Addendum.
1. Information we collect
We collect the following types of information about you:
(a) Information you provide us directly
We ask for certain information when you register for a Minora AI account, request a demo, or interact with our team. This includes your name, corporate email address, job title, company name, and phone number. We also collect any messages you send us through the Service (such as strategy prompts, support requests, and user feedback), and information you provide in the content you upload to the Service (such as brand guidelines, ad creatives, and strategic briefs). We use this information to operate, maintain, improve, and provide the features of the Service to you.
(b) Information we receive from third-party applications or integrations
To utilize the autonomous GTM engine, you may integrate Minora AI with third-party applications, including Advertising Platforms (e.g., Meta Ads, Google Ads, TikTok Ads, localized DSPs), CRMs (e.g., Salesforce, HubSpot), and analytics tools. When you authenticate these integrations via OAuth or API keys, we receive access tokens and data regarding your campaigns, audiences, and ad spend. You should review the privacy settings and policies of these third-party platforms. We process this integration data strictly to deliver the Service (e.g., for automated budget reallocation and performance tracking).
(c) Information we receive from other third parties
We may obtain information about you from third-party B2B data providers, public sources, and professional social media platforms (like LinkedIn). Examples include your company size, industry, and funding stage. We use this information to understand our enterprise prospects, qualify leads, and deliver customized B2B offers.
(d) Information we collect from you automatically
We directly collect or generate certain information about your use of the Service (such as user activity data, analytics event data, audit logs, and clickstream data) for operational analytics, security monitoring, and to help us measure usage trends.
(e) Cookies, log files, and tracking technologies
When you visit our marketing website or use the Service, we (and our third-party partners) will create online identifiers and collect information using cookies and similar technologies. These help us authenticate your session, enforce security, and track usage. Our servers automatically record certain log file information, including your web request, IP address, browser type, and interaction data. For more information, please read our
Cookie Policy.
Summary: We collect information you provide directly (like account details), data from the platforms you integrate with us (like your ad accounts and CRMs), and automated usage data (like logs and cookies) to ensure our platform operates securely and efficiently.
2. How we use your information (Including AI Data Processing)
We use the information we collect about you for the following enterprise purposes:
- Providing you with the Service: To operate and maintain our autonomous marketing engine, authenticate your access, execute media buying across channels, and bill you for transactions.
- Executing Marketing Workflows: To analyze your connected data sources (CRM, Ad Platforms) in order to discover market gaps, allocate budgets, and automatically generate and deploy ad creatives.
- For Service Improvement and AI Training: We analyze platform usage, prompts, and campaign performance data to improve our Service, including our Large Action Models (LAMs) and predictive algorithms.
- Aggregated AI Training: We may use anonymized and highly aggregated campaign performance data (which is entirely stripped of any personally identifiable information and cannot be tied back to your specific brand) to improve the platform's general algorithms and market trend models.
- Zero Data Retention for LLMs: We utilize enterprise-grade APIs with our Large Language Model partners. Minora AI has strict Zero Data Retention agreements in place with these providers. This ensures that your proprietary prompts, strategic inputs, and CRM data are never used by external AI providers to train their public or foundational models.
- For safety, security, fraud, and abuse measures: To prevent, detect, investigate, and address safety, security, and fraud risks, including verifying the integrity of API calls and preventing unauthorized access to your ad budgets.
- To communicate with you: To send administrative messages, technical notices, CFO-ready ROI reports, and security alerts.
- For compliance and legal obligations: Where we reasonably believe such action is necessary to comply with the law, enforce our Terms of Use, or protect the rights and property of Minora AI and our users.
Summary: We use your information primarily to run our autonomous marketing engine on your behalf. We use anonymized, aggregated data to improve our systems, but we maintain strict Zero Data Retention agreements with LLM providers to ensure your proprietary business data is never used to train external public models.
3. Sharing your information
(a) How we share your information with service providers
We share your information with trusted third-party service providers who assist us in operating our business. These parties are strictly vetted and are bound by stringent data processing agreements. This includes providers for:
- Cloud hosting and infrastructure (e.g., Google Cloud).
- Large Language Model (LLM) processing (e.g., Anthropic, Google, Perplexity, Alibaba QWEN) – Under Zero Data Retention / Enterprise API agreements.
- Billing and payment processing.
- Customer support and CRM systems.
(b) Sharing with connected platforms
To execute the autonomous media buying functionality, the Service programmatically shares necessary campaign data, targeting parameters, and generated creatives with the third-party advertising platforms you authorize (e.g., Google, Meta, local DSPs, digital out-of-home networks).
(c) Sharing in connection with a corporate transaction
We may share, sell, or transfer your information in connection with any merger, acquisition, reorganization, financing, or sale of assets. You will be notified via email and/or a notice on the Service if such a transaction takes place.
(d) Sharing within your organization (Administered Accounts)
Because Minora AI is an enterprise B2B product, if you register using a corporate email address, your account and the data within it may be subject to the control of your employer or the organization acting as the Admin Entity. We will share your name, email, and activity audit logs with the Admin Entity for governance and billing purposes.
(e) Agency and White-Label Partners
If your access to Minora AI is provided through a marketing agency acting as a managed service provider or utilizing our White-Label Portal, your account information and campaign data may be visible to and managed by that agency.
Summary: We do not sell your account data. We only share it with vetted infrastructure providers, the advertising platforms you ask us to manage, and the administrative owners of your corporate account.
4. How we transfer, store and protect your data
(a) Security Measures
Minora AI cares deeply about the security of your corporate data. We implement commercially reasonable, enterprise-grade technical and organizational measures to preserve the integrity and security of all information processed by the Service. This includes encryption of data in transit and at rest, SAML-based Single Sign-On (SSO), and strict role-based access control (RBAC). However, no system is impenetrable, and we cannot guarantee that information may not be accessed, disclosed, altered, or destroyed by a breach of our physical, technical, or managerial safeguards.
(b) Cross-border data transfers and Data Sovereignty
Information collected through the Service may be stored and processed globally. Primarily, our global data infrastructure is hosted on Google Cloud in the United States.
Data Localization: To comply with specific regional data sovereignty laws, data pertaining to users and entities based in the Republic of Uzbekistan is stored on localized servers physically situated within Uzbekistan.
Where we transfer your information across borders, we take steps to ensure your information remains protected in accordance with applicable laws, including utilizing Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.
Summary: We use enterprise-grade security to protect your data. Global data is securely hosted in the US via Google Cloud, while data for Uzbekistan-based users is stored locally in Uzbekistan to ensure strict compliance with regional data localization laws.
5. Your choices about your information
You control your account information and settings:
- You can manage your user profile, notification preferences, and SSO configurations within your account settings.
- You can disconnect third-party ad platforms or CRMs at any time by revoking API access within the Minora AI dashboard or the respective third-party platform.
- You can opt out of receiving promotional B2B marketing emails by clicking the “unsubscribe” link provided in such communications. You may not opt out of Service-related communications (e.g., account verification, billing, system performance).
- If you wish to request access, correction, or deletion of the personal data Minora AI holds about you as a Data Controller, please contact us at contact@minora.ai.
6. How long we keep your information
Following termination or deactivation of your enterprise account, Minora AI will retain your profile information, audit logs, and financial transaction data for a period of 5 years to comply with tax, auditing, and general legal obligations.
Customer Data (as defined in our Master Services Agreement) imported from your CRM or ad platforms will be securely deleted or permanently anonymized following the termination of your agreement, in accordance with the timelines specified in our Data Processing Addendum—strictly within 90 days of contract termination.
7. Additional information for users in Europe (GDPR)
This section applies to users located in the European Economic Area (EEA), Switzerland, or the United Kingdom (UK).
Controller's details: For the purposes of the GDPR and UK GDPR, OOO "MINORAAI" is the controller of your personal account data. Where we process your CRM and marketing data to execute campaigns, we act solely as a Data Processor on your behalf, governed by our DPA.
Legal bases for processing: We collect and use your personal data as a controller based on:
- Contractual necessity: To provide the Service and fulfill our obligations under our Master Services Agreement.
- Legitimate interests: To enhance our Service via research and development, send relevant B2B marketing, and protect our platform.
- Legal obligations: To comply with tax, corporate, and law enforcement obligations.
Your Rights: You have the right to request access, correction, deletion, or portability of your personal data. You also have the right to object to our processing or withdraw your consent. To exercise these rights, contact us at
contact@minora.ai. You have the right to lodge a complaint with your local data protection supervisory authority.
8. Additional information for users in the United States
This section applies to users located in the United States and addresses rights granted under applicable state privacy laws (including the CCPA/CPRA, CPA, CTDPA, UCPA, and VCDPA).
Categories of personal information: We collect identifiers, commercial information, internet/network activity, and professional or employment-related information as detailed in Section 1.
No Sale of Personal Information: Minora AI is a B2B enterprise service. We do not sell your personal information or the proprietary marketing data you entrust to our platform. We do not "share" your personal information for cross-context behavioral advertising, except in the context of standard B2B retargeting on our own marketing website, which you may opt out of via our cookie consent manager.
Your Rights: Subject to certain limitations, you have the right to request access to, correction of, and deletion of your personal information. You may make a rights request by contacting us at
contact@minora.ai. We will not discriminate against you for exercising your privacy rights.
9. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our enterprise practices, AI technology developments, or legal requirements. When we post changes, we will revise the “Last Updated” date at the top of this policy. If we make material changes to how we process your data—particularly regarding AI training protocols or data sharing—we will notify account administrators via email or a prominent notice within the platform.
10. How to contact us
If you have any questions about this Privacy Policy, our AI data processing practices, or wish to exercise your privacy rights, please contact our legal and compliance team at:
Write:
OOO "MINORAAI"
Uchtepa District, Vatan MFY
24-mavze, House 43, Apt 50
Tashkent
Republic of Uzbekistan