Privacy Policy

Email address, display name, and authentication credentials required to create and maintain your account. If you sign in via Google OAuth, we receive your name and email address from Google. We collect only what is necessary to operate the service.

Basic usage patterns including pages visited, API calls made, features accessed, and subscription status. This data helps us maintain service quality, enforce tier limits, detect abuse, and improve the platform. We do not track individual keystrokes, mouse movements, or screen recordings.

All payment processing is handled exclusively by Stripe, Inc. We never receive, store, or process credit card numbers, bank account details, or other financial credentials on our servers. Stripe's privacy policy governs the handling of your payment information. We store only your Stripe customer ID and subscription status.

We automatically collect standard server log data including IP address, browser type and version, operating system, referring URL, and timestamps. This data is used for security monitoring, abuse prevention, and aggregate analytics. IP addresses are not associated with your account profile.

We do not collect: Social Security numbers or government IDs; financial account numbers or credit card details; biometric data; precise geolocation data; health or medical information; data from minors under 13 years of age. We do not purchase data about you from third-party data brokers.

Your data is used to operate, maintain, and improve the Ai Mining Co. platform. This includes: authenticating your identity; enforcing subscription tier limits; delivering market intelligence data and reports; processing payments; sending transactional emails (password resets, billing confirmations); and monitoring for security threats and abuse.

We process your personal data under the following lawful bases: (a) Contract Performance — to provide the service you have subscribed to; (b) Legitimate Interest — to maintain security, prevent fraud, and improve the service; (c) Legal Obligation — to comply with applicable laws, regulations, and legal processes; (d) Consent — where you have explicitly opted in, such as for marketing communications. You may withdraw consent at any time.

We do not sell, rent, lease, or trade your personal information to third parties. We do not share your data with advertisers. Your data is never monetized beyond the service you are paying for. We do not engage in data brokering of any kind. For purposes of the California Consumer Privacy Act (CCPA), we do not "sell" or "share" personal information as those terms are defined under the CCPA.

We share data only with the following infrastructure providers essential to operating the service: Supabase (authentication and database hosting — data stored in the United States); Stripe (payment processing); Resend (transactional email delivery); Vercel (application hosting and anonymous analytics); Sentry (error tracking and monitoring — configured with PII scrubbing enabled); and Rewardful (affiliate referral tracking — receives referral attribution data when you arrive via a partner link). We share only the minimum data each provider requires to function. All providers are contractually bound to protect your data.

We may disclose your information when required by law, subpoena, court order, or government request. We may also disclose information if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation; (b) protect the rights, property, or safety of AIMC Technologies, LLC, our users, or the public; (c) detect, prevent, or address fraud, security, or technical issues. We will notify affected users when legally permitted to do so.

We implement commercially reasonable administrative, technical, and physical security measures to protect your data. All data is encrypted in transit via TLS 1.2+ and at rest via AES-256 encryption. Access to production systems is restricted to essential personnel using multi-factor authentication. We conduct regular security reviews. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Your data is stored and processed in the United States. If you are accessing the service from outside the United States, you acknowledge and consent to the transfer, storage, and processing of your data in the United States, where data protection laws may differ from those in your jurisdiction. We take reasonable steps to ensure your data receives an adequate level of protection in accordance with applicable law.

In the event of a data breach that compromises the security of your personal information, we will notify affected users via email within 72 hours of discovering the breach, or as otherwise required by applicable law. Notification will include: the nature of the breach, the types of data involved, steps we are taking to address the breach, and recommended steps you can take to protect yourself.

You have the right to request a complete copy of all personal data we hold about you. We will provide this in a standard machine-readable format (JSON or CSV) within 30 days of your verified request. You may make this request at no charge up to twice per calendar year.

You have the right to request correction of inaccurate personal data or complete deletion of your account and all associated personal data. Deletion requests are processed within 30 days and are irreversible. You can delete your account directly through the account settings page or by contacting us.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including: the right to know what personal information we collect and how it is used; the right to delete your personal information; the right to opt-out of the sale or sharing of personal information (we do not sell or share your data); the right to non-discrimination for exercising your privacy rights; and the right to correct inaccurate personal information. To exercise these rights, contact us at lucas@aiminingco.com.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including: the right of access; the right to rectification; the right to erasure; the right to restrict processing; the right to data portability; the right to object to processing; and the right not to be subject to automated decision-making. AIMC Technologies, LLC is the data controller. We do not currently engage in automated decision-making or profiling that produces legal or similarly significant effects. To exercise your rights, contact lucas@aiminingco.com.

The service is not directed to and not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If we learn that we have collected personal information from a child under the applicable age, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us immediately at lucas@aiminingco.com.

For all privacy inquiries, data access requests, deletion requests, or concerns about how we handle your data, contact us at lucas@aiminingco.com or through our contact page at aiminingco.com/contact. AIMC Technologies, LLC is the data controller for this service. We aim to respond to all privacy-related requests within 30 days.