Last updated 22 September 2026
Privacy Policy
This notice says who we are, what we collect, why, who sees it, how long we keep it, and how you complain. It is meant to be readable.
1. Data fiduciary and grievance
The data fiduciary for MiniStaff is Aditya Prakash Sahu, Faridabad, Haryana, India. Grievance Officer: Aditya Prakash Sahu, itsmeadityabro@gmail.com. We acknowledge within 24 hours and aim to close within 15 days. Hours: Monday–Friday, 10:00–18:00 IST.
2. Data we handle — by category
- Site: IP address, device/browser type, pages viewed, referrer, and strictly necessary cookies needed to serve the site securely.
- Contact form: name, email address, message, and optional Gumroad order ID, delivered to the MiniStaff support inbox by our own form-delivery service on Cloudflare when the form is used. A copy of each submission is kept in that service's private, key-protected storage so no message is lost to a delivery failure; it is deleted after the conversation is resolved.
- Checkout: handled by Gumroad. Gumroad processes name, email, and a payment token. We never see PAN, card number, UPI ID, or CVV.
- Service: Google Workspace scopes you grant, email and documents the staffer is asked to work on, WhatsApp number you give for onboarding, written scope, and task logs needed to run and support your instance.
3. Purpose per category
- Site data: keep the site up, debug, and prevent abuse.
- Contact: answer you and handle grievances.
- Checkout data at Gumroad: billing coordination (we receive that you paid, your email, and membership status — not your card).
- Service data: onboarding, delivering the paid assistant, support, and security.
We do not use your private mail or documents to train public AI models. We do not sell personal data.
4. Legal basis
Contract: delivering the paid service you bought. Consent: the contact form and any future marketing cookies (none at launch). Legitimate operational need: security logs. Where DPDP requires consent for a specific use, we will ask before that use.
5. Processors, by name
- Gumroad, Inc. (United States) — checkout, billing, receipts, memberships, refunds.
- Site host — static hosting and CDN for this website (currently the MiniStaff web host / Vercel-class hosting).
- Google — Gmail for support mail; Google Workspace APIs only after you connect an account during onboarding.
- Cloudflare — hosting, CDN, form delivery, and email forwarding for this website.
- Google Analytics 4 — page analytics without advertising features or cross-site tracking. No ad pixels. Details in the Cookie Policy.
6. Retention
Support emails: 24 months. Form-delivery storage copies: until the conversation is resolved, then deleted. Service logs: for the life of the subscription plus 90 days. Then delete, unless a legal hold applies. Gumroad keeps billing records under its own policy. You can ask us in writing to erase what we hold; we will, subject to that hold and to records we must keep for tax or dispute.
7. Your rights
You can ask for access, correction, erasure, and withdrawal of consent (where processing is based on consent). Write to itsmeadityabro@gmail.com. You can also use the grievance path on Contact.
8. Cross-border transfers
Gumroad and some hosts process data in the United States and other countries. Transfer is part of delivering checkout and the website. We do not send personal data to countries that Indian law restricts, if and when that list is in force for us. We will update this page if that duty changes what we can do.
9. Security
Encryption in transit (HTTPS). Access to customer instances is limited to people who need it to run support or setup. We do not share admin passwords. OAuth is used for Google — we do not ask for your Google password. No security practice is perfect; we will treat a breach as described below.
10. Children
We do not knowingly collect data of persons under 18. MiniStaff is not a children’s product.
11. Breach
If a personal-data breach is likely to affect you, we will notify affected users and, when that duty is live under DPDP, the Data Protection Board, in the form and time the law then requires.