Privacy Policy

Who we are

Mini Makers, LLC operates minimakers.ai from Bellevue, Washington. This Privacy Policy explains how we handle information when you visit, create an account, request a custom creation, receive a gift or team pack, or contact us. It covers our website and our design, payment, delivery, and support work. It does not cover a third-party site you visit through a link. Please read the notice shown by that provider as well. You can contact us using the details at the end of this policy.

Data we collect

Account information includes your email, password hash, verification and reset records, sign-in sessions, and any name, phone number, company details, or saved addresses you provide. We store a password hash rather than a readable account password. Order information includes your brief, tier and quantity choices, approved preview, revision requests, delivery choice, payment references, invoices, order milestones, and support correspondence. We record the choices and approvals needed to explain what was ordered and fulfilled. Please do not include payment card numbers in a brief or support message.

Uploaded artwork and gift messages

A brief can include artwork, logos, photos, written ideas, and other files you choose to upload. We also receive the gift message, recipient name, and story-card permission you supply. These can contain personal information even when they are part of an image. Provide only what is needed to make the creation, and make sure you have permission to share information about other people. Please avoid sensitive personal details such as medical records, government identifiers, financial account numbers, or a child's contact information. We do not need those details to design a set.

Recipient, support, and technical information

For a gift or team pack, we may receive a recipient's name, mailing address, phone number, or email from the buyer or directly through a teammate address link. We use those details to deliver the order and handle related support. Claims can include photos of the pieces or packaging. If you submit a testimonial, we receive its text, display name, photo, and publication permission. Hosting and security systems may receive your IP address, browser and device information, request times, and error information when you use the site. These help operate and protect the service.

Purposes

We use information to create and secure your account, check permissions, understand your brief, generate and review a design, show your preview, process payments, obtain pieces, pack and deliver an order, and handle revisions, refunds, and defects. We send verification, password reset, receipt, preview, shipping, and other service messages that relate to your activity. We also use order and payment records for bookkeeping, preventing abuse, resolving disputes, and meeting legal duties. We use limited site interaction records to understand which routes visitors use to start a commission.

Privacy: customer briefs and uploaded artwork are used only to make their set and are deleted on request; never used as marketing without written permission.

Processors and other recipients

We give providers the information needed for the service they perform. Stripe processes payments, invoices, refunds, and tax when enabled. It receives payment details directly along with the order and billing or delivery information needed for that transaction; we keep provider references and payment status rather than full card data. EasyPost processes shipment and label information, including sender and recipient addresses and the parcel details needed by the carrier. The carrier receives the delivery information needed to move and track the parcel.

The Ambiguous AI workspace mail service carries our transactional and support email through the hello@minimakers.ai shared mailbox. It processes recipient email addresses, message content, and delivery records; our authorized support team and AI assistant can read replies there. Neon hosts the production database containing account, order, and operational records. Vercel hosts the production website and processes web requests and service logs. Our configured file-storage provider holds uploaded artwork and creation files with access controls. Authorized team members access information only for their assigned work, such as reviewing a design or packing an order.

OpenAI supplies AI assistance for design generation and receives the artwork, brief, and design constraints needed for that work. Design prompts exclude account credentials, payment details, and delivery addresses. Avoid putting unrelated private information in artwork or the brief itself, since it may be included in the design input. We do not promise that every provider has identical retention or processing settings; we select and configure services for the order purpose described here. We do not authorize use of your brief or uploaded artwork for our marketing without separate written permission.

For physical orders we share the information needed to source and deliver pieces with the supplier, including the manufacturer through its Pick a Brick service and a BrickLink seller if a needed piece requires that fallback. Direct delivery requires the supplier to receive your delivery address. We may also disclose limited records where a valid legal demand requires it or to protect people and the service from fraud or abuse. If ownership of the business changes, information may transfer with the business subject to this policy and any notice or choices the law requires.

Gallery and testimonial choices

A purchase does not make your creation public in our gallery. Gallery publication requires your recorded consent and our operator's approval. Testimonials and their photos have a separate publication choice. If you allow a gift message on the story card, the same permission covers the linked creation page reached from its QR code. Anyone with that link may view the permitted content; it is not the same as a private account page. We omit gift messages from gallery cards and link-preview text. Ask us to remove material from public channels we control if you withdraw consent.

Retention and deletion on request

We retain account records while they are needed to provide your account and order history. Order, payment, approval, and shipping records are retained as needed for fulfillment, claims, accounting, tax, fraud prevention, and legal obligations. We assess retention by the kind of record, the service it supports, and whether a dispute or legal duty still requires it. We do not use one indefinite retention promise for every kind of information. Uploaded briefs and artwork are deleted on request in keeping with the policy above; deleting them can prevent further design revisions or reproduction.

Email hello@minimakers.ai to request deletion of your artwork, brief, account, or other information. Tell us which material you mean and give the account email or order reference so we can find it. We may verify that the request is yours before acting, and we ask only for information needed for that check. We remove requested material from active systems and ask relevant processors to handle the request. Restricted backup copies may remain until they are rotated out; if a backup is restored, the deletion request must be reapplied. If law requires us to retain a record, we explain the exception and limit its use to that purpose.

Cookies and analytics

We use essential cookies for sign-in, session security, and protecting form requests. Browser storage may remember local interface choices, such as whether you have already seen a preview reveal. Blocking essential cookies can prevent sign-in or checkout from working. You can clear site cookies and storage through your browser settings, and use Sign out everywhere in account security to revoke active sessions. Clearing local storage alone does not delete account or order records held by us.

Our own commission-start analytics record a random click identifier, gift or team choice, the general page category, and the location of the link, such as the header. They do not record a private creation link, query token, or customer identity in the event. We do not use advertising cookies or third-party behavioral advertising analytics on the storefront, and we do not sell personal information or share it for cross-context behavioral advertising. Payment providers may use their own security cookies on their payment pages. We will explain any changed analytics practice and obtain consent where required before adding it.

No users under 13

Our account and ordering service is for adults aged 18 or over. It is not intended for children under 13 to submit information, create accounts, or use independently, and we do not knowingly collect personal information directly from them. Adults manage orders for children and should avoid uploading a child's personal details. If you believe a child under 13 has provided information, contact us so we can investigate and delete it as appropriate. A child receiving a physical gift does not need an account or an email address to build it.

California and other US state rights

Depending on your state and whether its privacy law applies to the business and information involved, you may have rights to know or access the personal information held about you, receive a portable copy, correct inaccurate information, and request deletion. Some laws also allow you to opt out of sale, targeted advertising, certain profiling, or sharing for cross-context behavioral advertising, and to limit certain uses of sensitive information. We do not sell or share personal information for those advertising purposes or use it to make automated decisions with legal or similarly significant effects about you.

California residents may have these rights under the California Consumer Privacy Act when it applies. Other state laws may provide similar rights and a right to appeal a denied request. Send a request or appeal to hello@minimakers.ai and identify your state and the action you want. An authorized agent may contact us with evidence of permission; we may still verify your identity directly where allowed. We respond within the period required by applicable law, explain a denial or retention exception, and provide any required appeal information. We will not unlawfully discriminate against you for using a privacy right.

You may also contact us about access, correction, or deletion even if a particular state law does not apply. You can correct some account and address details yourself. Requests do not require you to send a password or full payment card number. Since we do not sell information or use it for targeted advertising, there is currently no such activity to opt out of through a browser privacy signal. We will honor applicable opt-out signals if our practices change to include activity covered by those signals.

Security

We use access controls, password hashing, restricted file access, and secure connections in production to protect information. Payment card handling is delegated to the payment provider. Staff permissions separate customer, operator, packing, and agent work. No website, email system, or storage service can guarantee absolute security. Protect your password, sign out on shared devices, and contact us if you suspect unauthorized access. Information is processed in the United States and may be processed where our providers operate, subject to the protections and legal requirements applicable to the service.

Changes

We publish the effective date and what changed note at the top of this page when the policy changes. We give additional notice of material changes through the site or your account email where appropriate and obtain any consent required by law. A revised notice does not itself grant permission to use old artwork for a new purpose. Keep a copy if you want a record of the policy that applied when you ordered.

Contact

Mini Makers, LLC, Bellevue, Washington. Contact and notices: 800 Bellevue Way NE, Floor 5, Bellevue, WA 98004, United States. Email hello@minimakers.ai.

Address privacy requests to the Mini Makers privacy contact at that email. You can use it for questions about this policy, recipient data, a child's information, or withdrawing publication permission. Give enough detail to identify the request and a way to reply. We will explain the next steps without asking you to disclose unnecessary sensitive information.