Privacy Policy

Last updated: July 14, 2026

MiNiM3 is a Chrome extension that acts as an AI assistant inside Gmail, connected to your Streak CRM and other services you choose to connect. This policy explains what data MiNiM3 handles, why, and what happens to it. The short version: your data is processed to do the work you ask for, is never sold, and is never used for advertising.

Data we access and why

Google account profile (name, email address, profile photo) | to identify your account and personalize the interface.
Gmail content (the email threads and drafts you act on) | read and written only when you ask the assistant to do something that requires it (e.g. "summarize this thread", "draft a reply", a workflow you trigger). Content is processed transiently to complete your request and is not stored on our servers, except where a result becomes part of your chat history (below).
Google Contacts | searched when you ask the assistant to look someone up.
Streak CRM data (pipelines, boxes, tasks, notes) | accessed with the API key you provide, to read and update your CRM as you direct.
Your Anthropic API key (BYOK) | every plan uses your own Anthropic key. It is stored on our servers encrypted at rest, decrypted only when our server calls Anthropic on your behalf, and is never exposed to other users or sent back to any device.
Chat history and settings | your conversations with the assistant, installed workflows, and preferences are stored in our database (Cloudflare D1) so they sync across your devices. Large content such as attachments is kept on your device, not in the cloud copy.
Usage metrics | request counts and AI token totals per account, used for rate limits, to show you your own usage, and for capacity planning. Because every plan is bring-your-own-key, Anthropic bills you for tokens directly; we do not bill by token. We do not log the content of your requests for analytics.
Payment information | handled entirely by Stripe. We never see or store card numbers.

AI processing

When you use the assistant, the relevant content (your message, and any email/CRM context needed for the task) is sent to Anthropic's Claude API | using your own Anthropic API key, sent by our server with each request | to generate the response. Anthropic processes this data as our service provider; we use API settings under which inputs are not used to train Anthropic's models.

Google user data | Limited Use. MiNiM3's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide user-facing features you request, is never sold, never used for advertising, and never read by humans except with your explicit consent for support, for security, or where required by law.

What we never do

Sell your data, to anyone, ever.
Use your data for advertising.
Train AI models on your data.
Read your content, except automated processing to fulfill your requests.

Service providers

MiNiM3 runs on a small set of subprocessors: Cloudflare (hosting, database), Anthropic (AI processing), Stripe (payments), and Google (sign-in and the Google services you connect).

Retention and deletion

Chat history and settings persist while your account is active. You can clear any conversation in the app at any time, which deletes its cloud copy. You can delete your account data yourself at any time from minim3.ai/account, or email us at the address below | we'll confirm deletion within 30 days. You can also download a copy of the data MiNiM3 stores for you, anytime, from the same page.

Security

Data in transit is encrypted with TLS. All stored credentials | your Anthropic API key, Streak API key, and OAuth tokens for connected services | are encrypted at rest at the application layer (AES-256-GCM) in our database, which Cloudflare additionally encrypts at rest. They are decrypted only inside our server to call the provider you connected and are never sent to your browser or any other device. Your device keeps only your MiNiM3 license token and local caches, in Chrome's storage. Access to production systems is limited to the operator of the service.

Changes

If this policy changes materially, we'll note it here with a new date and announce it in the app before the change takes effect.

Contact

Questions or deletion requests: contact us or email hello@minim3.ai.