Privacy Policy

Who this policy is for

This policy covers the sales site Minata Entertainment, LLC (Delaware LLC) serves from minatacommerce.com, the panel, and the storefronts we publish for our customers on their own domains; it covers everybody who visits the sales site too.

There are two relationships: ours with you, and yours with your own buyers. In the first we are the controller; in the second you are the controller and we are the processor.

The rules for the second relationship are in the Data Processing Agreement.

What we process

Account data: the authorised person's name, e-mail address, phone number and an irreversible hash of the password.

Company data: the trading name, country, city and, if given, the tax office and tax number.

Subscription and billing data: plan, period, amount, payment status and invoice history. We do not hold the card number; card details go straight to the payment provider.

Technical records: IP address, browser information, request time and error logs, kept for security and for fault finding.

Why we process it

Performing the contract: opening the account, taking the subscription, answering support requests.

Legal obligation: keeping invoices and accounting records.

Legitimate interest: keeping the service secure, preventing abuse and improving the product.

Consent: taken only for marketing messages and withdrawable at any time. Withdrawing it does not affect the service.

Who we share it with

We do not sell data. It is shared only with the sub-processors needed to run the service, and with the authorities where the law requires it.

The sub-processors and what each one does are named in the list on this page. When the list changes this page is updated.

The application and the database are hosted in the European Union, while the edge network, the image storage and the payment infrastructure are global, so data crosses borders. Transfers rest on the written agreements we hold with the sub-processors.

How long we keep it

Account and subscription data is kept while the relationship lasts and afterwards for the limitation periods that apply.

Invoices and accounting records are kept for the period the law requires.

Technical records are kept for at most twelve months and are then deleted or anonymised.

Users outside the United States (including Türkiye)

Minata Entertainment, LLC (Delaware LLC) is a company formed in the United States and is not established in Türkiye. This policy is written under the law of the State of Delaware and applies in the same way wherever outside the United States you use the service from, Türkiye included.

For the buyer data you keep in the panel and in your storefront YOU are the controller and we are a processor acting on your instructions. The rules for that relationship are in the Data Processing Agreement.

Requests from your own buyers reach you first; we give you the support you need to answer them, within the times the law allows.

Complying with the data protection law of the country you trade in, telling your own buyers what you do with their data and any registration duties are yours.

Security and your rights

Traffic is encrypted with TLS, database backups are kept encrypted, access is granted by role, and administrative actions are written to an audit log.

You can ask to see, correct, delete or port your data, and object to processing. Requests are answered within thirty days at the latest.

Write to support@minatacommerce.com for a request, or to hello@minatacommerce.com for anything else.