Privacy Policy – DataMinder

Effective Date: 27 May 2025

1.Introduction

Welcome to DataMinder (“we”, “our”, “us”) – a platform that simplifies data analysis
through AI-driven tools designed for students, academics, and businesses. This Privacy
Policy explains how we collect, use, store, and share your personal information when
you use our website (dataminder.ai) and web/mobile application (collectively, the
“Services”).

By using our Services, you agree to the practices described in this Privacy Policy. If you
do not agree, please do not use the Services.

2. Who we are

DataMinder is developed and operated by DataMinder sp. z o.o. with its registered
office in Poland 09-400 Maszewo Duże, ul. Lipnowska 207, entered in the register of
companies kept by the District Court in Łódź, XX Commercial Division of the National
Court Register, under the number 0001152130, NIP (VAT No.) 7743295226; REGON
(statistical ID) 540761152.

For questions, contact us at: contact@dataminder.ai

3. What Data We Collect

a. Account Information

 Name, email address, institution/company (optional)
 Password (encrypted)

b. Usage Data

 Actions taken within the app (e.g., selected statistical tests, report generation)
 Session logs and clickstream data
 Error logs and diagnostics

c. Device & Technical Data

 IP address
 Browser type and version
 Operating system
 Device identifiers (e.g., mobile device ID)

d. Uploaded Data

 Datasets you upload or paste into the tool
 Descriptions, variable labels, and annotations
 Feedback and interaction with the AI assistant

e. Billing Data (only for premium users)

 Name, address, tax identification number (if applicable)
 Payment method (processed via secure third-party services; we do not store card
details)

4.How We Use Your Data

We use your data to:

 Provide and improve our Services
 Train and fine-tune AI models (only on anonymized and aggregated data)
 Ensure service security and stability
 Generate user-specific reports and suggestions
 Communicate with you (e.g., updates, support, newsletters)
 Comply with legal obligations (e.g., accounting, data retention)

5. AI Models and Third-Party Providers

To deliver our AI-assisted analysis, we use Microsoft Azure OpenAI models. When
you interact with AI-based features in our platform (e.g., natural language questions,
test selection suggestions, automated conclusions), your input data is processed by
Microsoft.

Microsoft states that it does not use or store customer data to train its models, and
does not share customer data with third parties.

You can review Microsoft’s data privacy policy for Azure OpenAI here:

https://learn.microsoft.com/en-us/legal/cognitive-services/openai/data-privacy

By using these features, you acknowledge that your data will be shared with Microsoft
for processing purposes.

6. AI Models and Third-Party Providers

We process your data on the following legal bases:

 Performance of a contract (e.g., creating an account, using premium features)
 Legitimate interest (e.g., security, analytics)
 Consent (e.g., for optional newsletters or future research participation)
 Legal obligation (e.g., taxation or regulatory reporting)

7.Data Sharing

We do not sell your data. We may share your data with:

 Trusted service providers, such as cloud hosting (e.g., Microsoft Azure, AWS),
analytics tools (e.g., Plausible Analytics), or payment processors (e.g., Stripe)
 Academic or research collaborators – only with anonymized or aggregated
data, and only after obtaining the user’s explicit consent
 Law enforcement or regulatory authorities, when required by law

8. Data Storage and Retention

Your data is stored securely on servers within the European Economic Area (EEA). We
retain personal data only as long as needed to fulfill the purposes stated above or to
comply with legal obligations.

You may delete your account and all associated data at any time via your account
settings or by contacting us.

9.Your Rights (under GDPR and other applicable
laws)

As a user based in the EU, you have the right to:

 Access, correct, or delete your personal data
 Restrict or object to data processing
 Withdraw consent at any time
 Data portability
 Lodge a complaint with a data protection authority (in Poland: UODO)

Rights for Users Outside the EU

If you are located outside the EU, you may also have specific privacy rights based on
local regulations:

 United Kingdom (UK GDPR): similar rights to EU GDPR, including access,
rectification, erasure, and objection
 United States (e.g., California CCPA/CPRA): rights to know, delete, opt-out of
sale/sharing, and non-discrimination for exercising these rights
 Canada (PIPEDA): rights to access and correct personal information, and to
challenge data handling practices
 Other jurisdictions: we will make reasonable efforts to honor valid requests
based on your country’s data protection laws

To exercise your rights, contact us at contact@dataminder.ai. We handle all requests
fairly and transparently, regardless of your location.
To exercise your rights, contact us at contact@dataminder.ai

10. Data Security Measures

We implement industry-standard security measures to protect your data. This includes:

 Data encryption in transit (HTTPS) and at rest
 Secure authentication and authorization mechanisms
 Regular software updates and vulnerability scanning
 Access controls and audit logging

11. Automated Decision-Making and Profiling

Some features in DataMinder use AI to suggest statistical methods or generate
automated outputs. These are meant to assist users and do not result in legally binding
or similarly significant effects. All final decisions remain with the user.

12. Data Export and Portability

You can export your datasets and generated reports through your account settings at
any time. We may also provide downloadable archives of your usage history upon
request.

13. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we use
recognized legal mechanisms to ensure your data is protected. This includes the use of
Standard Contractual Clauses (SCCs) approved by the European Commission and
compliance with other applicable regulations.

14.Cookies and Analytics

We use minimal, privacy-friendly analytics (e.g., Plausible or Matomo) that do not use
cookies. Functional cookies may be used for login and language settings.
You can manage cookie preferences via your browser settings.

15. Children’s Privacy

Our Services are not intended for users under the age of 16. We do not knowingly
collect personal data from minors. If you believe we have inadvertently collected such
data, contact us for immediate deletion.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this
page with an updated effective date. We encourage you to review this policy
periodically.