Privacy Policy

Introduction

Mintstack AB ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital temperature logging platform (the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you register for an account, we collect:

• Name and email address
• Organization name and details
• Password (encrypted)
• Payment information (processed securely by Stripe)

1.2 Temperature Log Data

When you use the Service, we collect:

• Temperature readings and timestamps
• Equipment unit identifiers
• Location information (facility names, not geographic coordinates)
• Corrective actions and notes
• User activity logs for audit trail purposes
• Calibrated probe serial numbers (if provided)

1.3 Automatically Collected Information

We automatically collect:

• Device information (browser type, operating system)
• IP address and general location (country/region level)
• Usage data (features accessed, time spent)
• Sync events and offline queue status

2. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process and sync temperature logs
• Generate compliance reports and audit trails
• Send missed log alerts and system notifications
• Process payments and manage subscriptions
• Improve and optimize the Service
• Provide customer support
• Comply with legal obligations and regulatory requirements
• Detect and prevent fraud or security issues

3. Data Retention

We retain your information for different periods depending on the type of data:

• Temperature Logs: Minimum 2 years (FDA compliance requirement), unlimited for PRO tier subscribers
• Audit Trail: Permanent retention for compliance purposes
• Account Information: Until account deletion, plus 90 days for backup retention
• Payment Records: 7 years (tax and accounting requirements)

FREE tier accounts have a 30-day data retention limit for temperature logs (older logs are automatically deleted).

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Clerk: Authentication and user management
• Stripe: Payment processing
• MongoDB Atlas: Database hosting
• Vercel: Application hosting and deployment
• Resend: Email delivery for alerts and notifications

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect the rights, property, or safety of Mintstack AB, our users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Regular security audits and updates
• Role-based access control (RBAC)
• Webhook signature verification
• Secure authentication via Clerk

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA), you have the following rights:

6.1 Right to Access

You can request a copy of your personal data. Export your temperature logs as CSV from the Reports page.

6.2 Right to Rectification

You can update your account information in Settings. Note: Temperature logs are append-only and cannot be edited for compliance reasons.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your account. We will anonymize temperature logs (required for FDA compliance) and delete personal information within 30 days. Audit trail entries will be anonymized but retained for 2 years.

6.4 Right to Data Portability

You can export your data in machine-readable format (CSV) from the Reports page.

6.5 Right to Object

You can opt out of marketing emails. However, we must send transactional emails (missed log alerts, billing notifications) as part of the Service.

To exercise these rights, contact us at support@templog.app

7. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality (Clerk session cookies)
• Offline Storage: IndexedDB for offline-first temperature log queue
• Service Worker: Enables offline functionality and PWA features

We do not use third-party analytics or advertising cookies.

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using the Service, you consent to the transfer of your information to countries that may not have the same data protection laws as your jurisdiction.

We ensure that all service providers comply with GDPR and other applicable data protection regulations through standard contractual clauses.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically.

Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: