Privacy Policy
1. About this policy
1.1 This policy explains what personal data Minalav collects when you use Minalav Size (the "Service") under demonstration access, why we collect it, and what rights you have over it.
1.2 It forms part of our Terms and Conditions. Minalav is the data fiduciary for the personal data described here.
2. What we collect
2.1 Account details. Your email address, and the name and company you enter when you set up your account.
2.2 Project data. The demand profiles, assumptions, project parameters and saved scenarios you enter into the Service. This is usually commercial rather than personal data, but we describe it here because it is stored alongside your account.
2.3 Sign in and security records. The times you sign in, the one time codes we send to verify it is you, and the version of our terms you accepted together with the date and the browser you accepted from.
2.4 Technical records. Server logs of the requests your account makes, each carrying a short reference we use to investigate errors.
2.5 We do not use advertising trackers, and we do not profile you.
3. Why we use it
3.1 To give you access to the Service and to keep your saved work available to you.
3.2 To verify who is signing in, and to protect the Service against misuse and excessive load.
3.3 To support you during the evaluation and to investigate faults you report.
3.4 To keep a record of which version of our terms you agreed to.
3.5 We process this data because it is necessary to provide the Service you have asked for, and because we have a legitimate interest in keeping it secure and working.
4. Who can see it
4.1 Your saved projects are isolated at the database level, so one customer cannot read another customer's work.
4.2 Minalav staff may access your data where it is necessary to support you or to investigate a fault.
4.3 We do not sell your data. We do not share it with anyone for their own purposes, and we do not use it to train third party artificial intelligence models.
5. Where it is held
5.1 The Service uses the following providers, which process data only on our instructions:
- Supabase, for accounts, authentication and the database that holds your saved projects.
- Railway, which runs the modelling engine that produces your results.
- Netlify, which serves the pages of the Service to your browser.
- Resend, which delivers the sign in and account emails we send you.
5.2 Some of these providers operate outside India. Where data is transferred abroad, it remains subject to this policy and to the contractual protections we have with each provider.
6. Your data is yours, and deletion is immediate
6.1 You own the data you enter and the results the Service produces from it. We hold them on your behalf in order to run the Service for you, and we claim no other right over them.
6.2 When you delete a project in the Service, we delete it at that moment, together with the inputs and results saved against it. It is not archived, queued for later removal or kept in a hidden state.
6.3 You may also ask us in writing to delete everything held for your account, and we will do so promptly.
6.4 Anything you have not already deleted yourself is kept for 30 days after your demonstration access ends, after which we delete it.
6.5 If your organisation takes a licence during that period, your data can be carried across to the licensed service.
6.6 Two things outlive a deletion, and neither contains your project work: records of which terms version you accepted, because they are the evidence of an agreement, and ordinary infrastructure backups, which are overwritten on their normal cycle rather than searched and edited.
7. Keeping it secure
7.1 Access to the Service is by invitation and requires both a password and a one time code sent to your email address.
7.2 Your data is encrypted in transit and at rest. Traffic between your browser and the Service is encrypted, and the stored database is encrypted where it sits.
7.3 Each customer's saved work is isolated at the database level rather than only in the application, so one account cannot read another's projects even if the application were at fault.
7.4 A session left untouched is signed out automatically, so an unattended screen does not stay open indefinitely.
7.5 No system is perfectly secure. Please tell us promptly if you believe your account has been compromised.
8. Your rights
8.1 You may ask us to give you a copy of the personal data we hold about you, to correct it if it is wrong or incomplete, or to delete it.
8.2 You may withdraw your agreement to this policy at any time, which will end your access to the Service.
8.3 We will respond to any such request within a reasonable period and in any event as required by applicable law.
8.4 If you are not satisfied with how we have handled your data, you may complain to the relevant supervisory authority in India.
9. Changes
9.1 This policy is versioned. Where we make a material change we will publish a new version and ask you to accept it before you continue to use the Service.
10. Contact
To exercise any of the rights above, or to ask a question about this policy, please contact the person at Minalav who arranged your access.