Privacy Policy
Last updated: 23 August 2026
This Privacy Policy explains how minesales.ai ("MineSales," "we," "us," or "our") collects, uses, shares, and protects information when you visit our website or use our AI-driven B2B sales intelligence platform and related services (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.
1. Who we are
minesales.ai is a brand owned and operated by Turtlyx Technologies LLP, a limited liability partnership registered in India.
MineSales is an AI-driven B2B sales intelligence platform. You set up a business profile once, and our AI agents help you discover best-fit accounts, perform market and account research, identify decision-makers, build a valued opportunity pipeline, draft outreach-ready content, and run your daily pursuit workflow through My Space.
The Services are offered to businesses worldwide. Our operations and primary data storage are located in India.
For any privacy question or request, contact us at team@minesales.ai.
2. Our role: two different kinds of data
This is the most important section of this policy. We handle two categories of personal data, and our role is different for each.
| Category | What it covers | Our role |
|---|---|---|
| Your Data | Data you give us or create in the Services: your account, business profile, notes, feedback thread entries, pipeline records | You are the controller. We act as a processor on your instructions |
| Sourced Contact Data | Business contact and professional profile information we retrieve from third-party providers and public sources about prospects | We are an independent controller. When we make it available to you, you become an independent controller of it in your own right |
This split matters because it determines who is responsible for what. For Sourced Contact Data, we are responsible for how we source, score, and retain it. You are responsible for what you do with it after we hand it to you, including establishing your own lawful basis for contacting anyone.
Section 12 sets out your responsibilities as a business customer in full.
3. Information we collect
3.1 Information you provide directly
- Account information: your name, email address, phone or mobile number (used to send and verify one-time passcodes for login), company name, role, and how you found us.
- Payment and billing information: when you purchase a paid plan, billing details and transaction data processed through our payment provider. We do not store full card numbers.
- Business profile information: details you provide to configure the Services, such as what you sell, your value proposition, your ideal customer profile, target markets, geographies, industries, pricing, and similar business inputs.
- Company and account data: information about your company and the prospect accounts you research or target, including company names, websites, research notes, opportunity and pipeline data.
- Feedback thread entries and pursuit notes: plain-language status updates you log against an opportunity in My Space. These may contain personal data about the individuals you are pursuing, entered by you.
- Communications: information you share when you contact us, respond to surveys, or interact with our team.
3.2 Sourced Contact Data about prospects and third parties
To deliver the Services, we retrieve and process information about business contacts and companies, which may include names, job titles, seniority, department, company, professional email addresses, and professional social profile links such as LinkedIn profile URLs, together with confidence scores and source references.
This information is obtained from third-party data providers and from publicly available sources. It is retained for a maximum of thirty (30) days. See Section 8.
3.3 Information collected automatically
- Usage and device data: IP address, browser type, device identifiers, pages viewed, referring URLs, timestamps, and interactions with the Services.
- Cookies and similar technologies: used to operate the site, remember preferences, and measure performance. See Section 10.
3.4 Information from third parties
We receive information from integrated third-party services and data providers, including email-finding and enrichment providers, used to build and verify the research and contact information described above.
4. How we use information
We use information to:
- Provide, operate, maintain, secure, and improve the Services;
- Create and manage your account;
- Authenticate you and secure your login, including sending and verifying one-time passcodes by email and SMS;
- Process payments, billing, and subscriptions, and prevent payment fraud;
- Generate ICP matches, market and account research, decision-maker lookups, valued opportunities, pipeline, and outreach-ready content;
- Retrieve, verify, and enrich business contact information;
- Cite and reference the sources used in research;
- Generate written and image-based marketing content;
- Deliver automated leads and generate tasks according to the schedule you configure in My Space;
- Generate pursuit scores, sentiment indicators, and stage classifications from your feedback thread entries;
- Make workspace data available to other members of your workspace, as described in Section 7;
- Communicate with you, including service updates and responses to your requests;
- Monitor, troubleshoot, and prevent fraud or abuse;
- Analyse usage to understand and improve performance; and
- Comply with legal obligations and enforce our terms.
We do not use Sourced Contact Data to build or maintain a permanent contact database, and we do not sell it.
5. AI processing and third-party AI providers
The Services are powered by artificial intelligence. To deliver core features, we share relevant inputs with the providers below. We share only the data necessary to perform the requested task.
5.1 Anthropic (Claude)
We use Anthropic's Claude APIs to power research, reasoning, content generation, and agentic workflows. We may transmit your business profile, company and account data, market research, prospect information, and pipeline data to Anthropic for processing.
Some Claude models use a web search tool to gather and cite publicly available information about prospects and markets. The sources used are surfaced and cited so you can see the work behind each step.
5.2 Google (Gemini)
We use Google's Gemini models to generate image-based and certain other content. We may transmit relevant business profile, company account, and campaign information to Google for processing.
5.3 Hunter.io
We use Hunter.io to find, verify, and enrich professional email addresses and decision-maker contact details. We transmit company domains, names, and related lookup parameters to Hunter.io.
Under Hunter.io's terms, MineSales acts as an independent controller in respect of the personal data it returns to us. This is why we, and subsequently you, hold controller responsibilities for that data rather than passing them back to the data source.
5.4 Important notes on AI providers
- We rely on these providers' API and business terms, which are generally designed so that data submitted through the API is not used to train their foundation models by default. Each provider's own terms and privacy policy govern their processing:
- Anthropic: https://www.anthropic.com/legal/privacy
- Google: https://policies.google.com/privacy
- Hunter.io: https://hunter.io/privacy-policy
- AI outputs may be inaccurate, incomplete, inferred, or out of date. Contact details in particular may be pattern-derived rather than directly observed. You are responsible for reviewing outputs before acting on them. See our Terms of Service.
- Do not submit sensitive or special category personal data, including government identification numbers, health data, biometric data, or financial account details. The Services are intended for business sales data only.
6. Notice to individuals whose data appears in the Services
This section is for you if you are not a MineSales user, but your professional information may have been processed through our Services.
What we may hold. Your name, job title, seniority, department, employer, professional email address, and professional social profile links such as your LinkedIn profile URL.
Where it came from. Third-party business data providers, principally Hunter.io, and publicly available sources on the web.
Why we process it. To provide a business-to-business sales research service to our customers. Where the GDPR or UK GDPR applies, our legal basis is legitimate interests under Article 6(1)(f), namely the operation of a business-to-business sales intelligence service, balanced against your rights and reasonable expectations. We process professional contact data in a professional context only.
How long we keep it. A maximum of thirty (30) days from retrieval, after which it is deleted from our systems.
Your rights. You may ask us to confirm what we hold, correct it, or delete it, and you may object to our processing. Write to team@minesales.ai. We will also add you to our permanent suppression register so that your details are not retrieved again.
Important. Deleting your data from our systems does not delete any copy a customer has already exported into their own tools. If you have been contacted by someone using our Services, that person is an independent controller of your data and you may exercise your rights directly against them. We will assist you in identifying the route where we reasonably can.
7. Team workspaces and visibility
The Services support shared workspaces. If your organisation uses a shared workspace, other members of that workspace, including managers and administrators, may be able to see:
- The leads assigned to you and the opportunities you are pursuing;
- The tasks generated for you and their status;
- Your feedback thread entries and the notes you write; and
- Your pursuit scores, pursuit health, stage mix, and response signals.
If you use the Services through an account provided by your employer, your employer determines who has access to this information and is responsible for informing you about that use. Feedback thread entries are written only by the account holder they belong to. Pursuit scores are indicative signals generated in part from information you enter. They are not verified or audited and should not be used as a sole basis for any employment decision.
If you delete your account, all of the above is removed immediately, including from the view of other workspace members. See Section 8.
8. Data retention
| Data type | Retention |
|---|---|
| Sourced Contact Data (names, professional emails, titles, LinkedIn URLs) | Maximum 30 days from retrieval, then deleted. This applies uniformly to all users and all individuals, regardless of location |
| Suppression register | Indefinite, limited to the minimum data needed to recognise a suppression match, retained solely to keep honouring the request |
| Account and business profile data | Duration of your account. Deleted immediately when you delete your account |
| Pipeline, tasks, and feedback thread entries | Duration of your account. Deleted immediately when you delete your account |
| Usage, device, and security logs | Typically up to 12 months |
| Billing and transaction records | Retained as required by applicable tax, accounting, and company law, regardless of account deletion |
When data is no longer needed, we delete or anonymise it.
Account deletion. You can delete your account at any time from within the Services. Deletion is immediate: your account data, business profile, pipeline, tasks, and feedback thread entries are removed from our live systems at the point you confirm deletion. This action is permanent and cannot be reversed.
Two categories of data are not removed by account deletion:
- Billing and transaction records, which we are required to retain by tax and accounting law; and
- Suppression records, which are retained indefinitely and are limited to the minimum data needed to recognise a suppression match, so that requests not to be contacted continue to be honoured.
Encrypted backups are retained on a rolling basis and are overwritten within 30 days, so a residual copy may persist in backup for a short period after deletion. Backups are not used for any operational purpose and are only accessed for disaster recovery.
Export before you delete. Deletion is immediate and irreversible. If your data forms part of a shared workspace, deleting your account also removes it from the view of other workspace members. Export anything you or your organisation needs before you delete.
Deletion of Sourced Contact Data from our systems does not delete any copy you have exported, saved, or transferred into your own tools. You remain responsible for that copy.
9. How we share information
We share information with:
- Service providers and subprocessors: the AI and data providers in Section 5, plus hosting, database, infrastructure, analytics, email, and support providers acting on our behalf. See the table below;
- Other members of your workspace: as described in Section 7;
- Professional advisors: such as lawyers, accountants, and auditors;
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets;
- Legal and safety: where required by law or legal process, or to protect rights, safety, and the integrity of the Services; and
- At your direction: when you export your pipeline data to a spreadsheet or otherwise move it into your own tools.
We do not sell your personal data for money. To the extent certain data sharing could be considered a "sale" or "sharing" under some laws, you may opt out as described in Section 13.
9.1 Subprocessors
| Subprocessor | Purpose | Data processed | Privacy policy |
|---|---|---|---|
| Anthropic (Claude) | AI research, reasoning, content generation, web search and source citation | Business profile, company and account data, market research, prospect information, pipeline data | https://www.anthropic.com/legal/privacy |
| Google (Gemini) | Image-based and other content generation | Business profile, account, and campaign information | https://policies.google.com/privacy |
| Hunter.io | Finding, verifying, and enriching professional email addresses and decision-maker contacts | Company domains, names, and lookup parameters | https://hunter.io/privacy-policy |
| Microsoft Azure | Hosting of the website and landing pages | Website data, usage and device data | https://www.microsoft.com/privacy |
| Supabase | Application backend, database, and authentication | Account, business profile, account data, pipeline data, email, phone number | https://supabase.com/privacy |
| RazorPay | Payment and transaction processing | Billing details and transaction data | https://razorpay.com/privacy-policy/ |
| Resend | Transactional and notification email delivery, including email one-time passcodes | Name, email address, message content | https://resend.com/legal/privacy-policy |
We may update this list as the Services evolve. Material changes will be notified as described in Section 17.
10. Cookies and analytics
We use cookies and similar technologies to operate the site, remember preferences, and measure performance. You can control cookies through your browser settings, though disabling some may affect functionality. Where required by law, we will request your consent before setting non-essential cookies.
11. International data transfers
We and our providers may process and store information in countries other than your own, including India, the United States, and other locations where our providers operate. Our primary application data storage is located in India.
If you are located in the European Economic Area or the United Kingdom, please note that India has not received an adequacy decision from the European Commission or the UK Government. If you require details of the safeguards applicable to a transfer, or a Data Processing Addendum, contact us at team@minesales.ai before using the Services.
12. Your responsibilities as a business customer
When you use the Services to research and contact prospects, you act as an independent controller of the Sourced Contact Data we make available to you. You are responsible for:
- Establishing a valid lawful basis for your own processing and for any contact you make;
- Obtaining prior consent where the law applicable to you or to the individual requires it, including under the GDPR and ePrivacy rules in parts of the European Economic Area, the UK, and Canada's CASL;
- Providing any notice the law requires you to give to individuals you contact;
- Including sender identification, a physical address, and a working opt-out mechanism in your communications where required, for example under CAN-SPAM;
- Maintaining your own suppression list and honouring opt-out and data subject requests you receive; and
- Complying with applicable marketing, anti-spam, telemarketing, and data protection laws.
MineSales does not send communications to your prospects. We are not the sender of any message you originate.
For personal data within Your Data, as defined in Section 2, we act as a processor on your instructions. Where required, we will enter into a Data Processing Addendum with you on request.
13. Your rights and choices
Depending on your location, you may have rights to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Delete your data;
- Object to or restrict certain processing;
- Data portability, where applicable;
- Withdraw consent where processing is based on consent;
- Opt out of marketing communications; and
- Opt out of any "sale" or "sharing" of personal data and certain targeted advertising, where applicable.
If you are in India, the Digital Personal Data Protection Act 2023 gives you rights of access, correction, erasure, grievance redressal, and nomination. If you are in the European Economic Area or the UK, the GDPR and UK GDPR apply. If you are in California or another US state with a comprehensive privacy law, those laws apply.
Deleting your account. You can delete your account at any time from within the Services, without contacting us. Deleting your account removes your account data, business profile, and pipeline data in accordance with the retention table in Section 8.
To exercise any other right, email team@minesales.ai. We will respond within the timeframes required by applicable law and will acknowledge requests within seven days. We may need to verify your identity first. You also have the right to lodge a complaint with your local data protection authority.
If you wish to be permanently excluded from our Sourced Contact Data, we will add you to our suppression register as described in Section 6.
14. Legal bases for processing
Where the GDPR, UK GDPR, or a comparable regime applies, we rely on:
| Basis | Used for |
|---|---|
| Performance of a contract | Providing the Services to you as a user, account management, billing |
| Legitimate interests | Operating, securing, and improving the Services; processing Sourced Contact Data to provide a B2B sales intelligence service; fraud prevention; direct marketing of our own Services |
| Consent | Non-essential cookies, and marketing communications where required |
| Legal obligation | Tax, accounting, and regulatory compliance, and responding to lawful requests |
You may withdraw consent at any time where processing is based on consent, and you may object to processing based on legitimate interests.
15. Security
We implement technical and organisational measures designed to protect information, including encryption in transit, role-based access controls, authentication safeguards, and logical data isolation so that each account's data is segregated and accessible only to authorised users, hosted on secure cloud infrastructure.
We apply a maximum retention period to Sourced Contact Data as a deliberate security and data minimisation measure: data we do not hold cannot be exposed.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
16. Children's privacy
The Services are intended for business use and are available only to individuals aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
17. Third-party links and changes to this policy
The Services may contain links to third-party websites and services. We are not responsible for their privacy practices.
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide reasonable notice by email or in-product notification. Your continued use of the Services after changes take effect constitutes acceptance.
18. Contact us
For questions, requests, or complaints regarding this Privacy Policy or our data practices:
Turtlyx Technologies LLP Thane, Maharashtra, India
- Email: team@minesales.ai
- Website: https://www.minesales.ai
Requests will be acknowledged within seven (7) days and resolved within thirty (30) days, or such shorter period as applicable law requires.