Draft — not yet in force
This notice describes how MinuteTalk is built to handle personal data. It is a working draft pending legal review and is published for transparency during our closed beta.
Privacy Policy
What we collect
When you create a creator account we store your email address, the country you signed up from, and your confirmation that you are 18 or older. Your public profile holds whatever you choose to publish — display name, handle, biography, profile image and timezone.
When you call a creator as a guest, we store the name you give for the call, the email address you type — as you typed it, with the call — and your confirmation that you are 18 or older and that no one under 18 will take part. If a creator reports that someone under 18 took part in a call, we pause new calls for that account or email address while a person reviews it. The list of paused addresses keeps only a keyed hash of each address, never the address itself. The creator who reported it can add a short note about what they saw; only our team reads it, and we ask them to leave out names and contact details.
If we suspend or close an account under our rules, we keep a record of what happened and why. When we close an account, we keep a keyed hash of its email address and of the card or payout bank account it used — Stripe tells us when two are the same without giving us the numbers — so the same person can't come back. The same email address can't set up a new creator account or check out as a guest. A new account that uses the same card or payout bank account, or the same email address as a banned guest, is paused (no calls, bookings or payouts) until a person checks it and decides.
Payments and payouts are handled by Stripe. Card details never reach our servers. Identity documents you submit for payout verification go directly to Stripe; we do not retain them. Stripe emails the receipt for each payment, so with each payment we give Stripe the email address on your account — or, if you pay as a guest, the one you type at checkout.
If you choose to save your details with Stripe's Link when you pay, Stripe receives the details you give Link — your email address, phone number and payment details, and your name where Link asks for it — and handles them under Stripe's own terms and privacy policy.
We keep a log of material changes to your account — publication, moderation outcomes, policy acknowledgements. These records hold state and version information only, never the content of your profile, your messages, or your calls.
How long we keep it
| Data | Retention |
|---|---|
| Payment records (charge amounts, payout references) | 7 years |
| Booking records (who, when, which service) | 3 years |
| Call session metadata (start, end, duration) | 2 years |
| In-call chat transcripts, where stored at all | 90 days |
| Reviews and ratings | Account lifetime + 1 year |
| Authentication and access logs | 12 months |
| Acceptable-Use acknowledgements | Account lifetime + 1 year |
| Moderation decisions on profiles and listings | Account lifetime + 1 year |
| Unfinished onboarding drafts | 30 days after last edit |
| Paused-client list (a keyed hash of the email address, never the address) | Until a person lifts the pause, even if the account is deleted |
| Warnings, suspensions and account closures under our rules | Account lifetime + 1 year; a suspension in force, until it is lifted |
| Banned-account list (keyed hashes of the email address, payout bank account and card, never the details themselves) | As long as the ban lasts, even if the account is deleted |
| Your account after you ask to delete it | 30 days to change your mind (until your last booked call, if you keep them); then your profile, photos, services and sign-in are deleted |
| Photos kept as evidence after a decision under our rules about serious harm, when the account is deleted | Locked away, never shown, and deleted 12 months after the decision |
| Your email address and payment details after your account is deleted, locked away for disputes, refunds, legal requests and, for a creator, paying money we still owe them | 120 days after your last payment, or until no dispute or refund on those payments is still open, whichever is later |
| A deleted creator's email address, when we still owe them money after that, locked away only to pay them | Until what we owe is paid |
| A deleted creator's Stripe payout account (held at Stripe) | Kept open until 120 days after the last paid call, for payouts, tax forms and disputes; then we close it |
| Stripe's own record of each payment and card hold, in our Stripe account, including any that didn't go through: the amount, what it was for (a call or a fee, and the creator's name), the payment method used and the email address we gave Stripe for the receipt | As long as Stripe keeps its payment records; deleting your account, or asking us to remove your details as a guest, doesn't remove it, and we can still see it there |
| A deleted account's email code (a keyed hash), when it owes MinuteTalk money, MinuteTalk still owes it money, or our rules were applied to it | Until the debt is repaid or what we owe is paid; a ban for as long as it lasts; a warning or suspension for 12 months |
| A deleted account's email code (a keyed hash), when it still owes a fee or a balance for a booking or a call | Until what's owed is paid, and no longer than 3 years after the booked time or the call |
| A coded form of a card (a keyed hash, never the card number) behind a payment still owed for a call or a booking | While it's owed, and no longer than 3 years after the call or the booked time |
| A guest's email code (a keyed hash, never the address), when they ask us to remove their details while a payment for their call is still owed | While it's owed, and no longer than 3 years after the call |
| A deleted creator's page address (a keyed hash, never the handle itself) | Kept indefinitely, so it's never given to anyone else |
| Aggregated, non-identifiable analytics | Kept indefinitely |
Where a deletion request collides with a record we are required to keep — payment history, for example — we de-identify the record in our database instead, keeping the transaction but removing the link to you (a creator's name stays on their clients' receipts). Stripe's record of the same payment, in our Stripe account, isn't de-identified: it keeps what the payment was for and the email address we gave Stripe for the receipt (see the table above). Deleted data ages out of backups on the next backup cycle; we do not edit backups in place.
Deleting your account
You can delete your account yourself, from Settings, with Delete account. One Delete closes the whole account, as a creator and as a client.
We take the request at once: your page goes offline and nothing new can start. You have 30 days to change your mind (sign in and choose Keep my account); if you keep your booked calls, the time runs until the last one has happened. Then we delete your profile, photos, services and sign-in. If money is still on its way (a payout, a refund or a dispute), we finish that first and email you when it's done. Photos we must keep as evidence after a decision under our rules about serious harm are locked away, never shown, and deleted 12 months after that decision.
A creator's Stripe payout account stays open until 120 days after their last paid call, so they can still see payouts and tax forms there and a late dispute can be settled through it; then we close it (only once nothing is left in it).
We keep your payment and payout records (amounts and dates) for 7 years, for tax and accounting. Your email address and payment details are locked away, used only to answer a dispute, a refund or a legal request (or, for a creator, to pay them money we still owe them), for 120 days after your last payment, then removed (if a dispute or a refund on those payments is still open then, once it is settled). If we still owe a deleted creator money then, we keep their email address, locked away and only to pay them, until it is paid; if they make a new account with the same email address, a person pays it to that account once it has a payout account, after taking off anything their old account still owes us. The time zone your device was set to when you asked is kept until then too, only so our emails about the deletion give times in it. Clients who had calls with a creator still see the creator's name on their own receipts. Stripe keeps its own record, in our Stripe account, of each payment, each card hold and each card saved for a booking, even one that didn't go through: what it was for (a call or a fee, and the creator's name), the payment method used and, for a payment or a hold, the email address we gave it for the receipt. Deleting your account doesn't remove these records.
A cancellation or no-show fee of yours that never went through, or a balance still owed for a call you had, stays owed until it is paid, whether or not you delete your account. Until then, you can't make a new booking, start a call or join a group call from your account. After your account is deleted it stays owed: we don't charge it to any card automatically, and it never stops your account closing. We keep a keyed code of your email address (never the address itself) until it is paid, and no longer than 3 years after the date the booking was for, or the date of the call. If your email address was confirmed and you make a new account with the same address (at Gmail, dots and anything after a “+” don't count; anywhere else it must be exactly the same), it shows there as owed, you can pay it, and you can't make a new booking, start a call or join a group call from that account until it is paid.
Money you owe MinuteTalk stays owed after your account is deleted. We keep a keyed code of your email address (never the address itself) so it comes off your first payouts if you come back, and so a decision under our rules still applies.
If a problem on our side means we don't take the payment for a call you had as a guest, it stays owed, and we email a link to pay it to the address you gave at checkout. Until a payment for a call or a booking is paid, a new call or booking paid with the card it was taken on may not go through. For that, we keep a coded form of the card (a keyed hash, never the card number) only while the payment is owed, and no longer than 3 years after the call or the booked time. Removing your details doesn't cancel what's owed. If you ask us to remove them while it's owed, we keep a keyed code of the email address you gave (never the address itself) for as long as it's owed, up to 3 years after the call.
If you paid for a call as a guest, email support@minutetalk.com from the address you paid with to ask us to remove your details. A person replies within 30 days; your payment records follow the same rules as above.
Who else processes your data
- Supabase
- Database, authentication, file storage, server functions
- Stripe
- Payments and their receipts, payouts, and identity verification for creators, and the address and name of each creator's page, so Stripe can check the business
- LiveKit
- Video and audio calls
- Anthropic
- AI review of profiles and listings against our Acceptable Use Policy
- Email provider
- Transactional email — verification, reminders, notifications
We will give at least 30 days' notice before adding a new processor that handles personal data.
Your rights
You can ask for a copy of your data or ask us to correct it, and you can delete your account yourself (see Deleting your account, above). We aim to acknowledge any request within 72 hours and complete it within 30 days, subject to the retention rules above.
To make a request, email support@minutetalk.com.
AI review of what you publish
Profiles, service listings and endorsements are checked automatically against our Acceptable Use Policy before they go live. Borderline cases go to a human reviewer, and you can appeal any decision. For now, a person also checks every automatic rejection before you are told. Your content is not used to train anyone's models.
To check that the automatic review treats everyone fairly, we test it with examples we write ourselves. We may also use examples rewritten from real cases with every identifying detail removed (no names, handles, links or exact wording), so that no one can be recognised.
Questions about this notice? Contact us before relying on it — it is a draft.