Privacy Policy

miniexplain collects the least amount of data needed to run the service. No tracking, no advertising cookies, no profiling, no data sold or shared for marketing.

Documents you paste, upload, or photograph are analysed in memory to produce your result and then discarded. By default nothing you submit is written to disk or kept after the request finishes. We do not build a profile of you from your documents.

Free tier: nothing is stored — every analysis is ephemeral. Plus tier: nothing is stored either, unless you explicitly opt in to history. When you do, your analysis is encrypted at rest (AES-256-GCM) under a key only Dekimu holds, kept for up to 180 days, and you can delete any single entry or your entire history at any time. A stored analysis includes short verbatim excerpts of your document (the clauses we flag), so opt in only if you are comfortable keeping those. Separately, if you joined the Plus waitlist, we hold the email address you submitted. The waitlist is closed, we will not email you about it, and we will delete all waitlist records by 30 November 2026. You can ask us to delete yours sooner at any time.

Your documents are sent to our AI provider only to generate your analysis. They are never used to train AI models — not ours, not the provider's — and are not retained by the provider for training.

Vercel (hosting and serverless compute), Upstash (Redis storage — waitlist entries and, if you opt in, your encrypted Plus history), Resend (waitlist confirmation email delivery), and our AI provider for the analysis itself: Anthropic Claude models, served through Amazon Web Services (EU region by default). No third party receives your data for marketing.

Two strictly-necessary cookies, both used only to sign you in and keep you signed in. The authentication cookie (miniexplain_access) is set after you sign in, is used solely to maintain your authenticated session, lasts 2 hours from when it is set and is deleted earlier if you sign out. The sign-in security cookie (__Host-miniexplain_auth_state) is set when you start to sign in — by clicking a sign-in link or when a page that requires sign-in sends you to it — so it is also set before you are signed in. It holds only a random value, with no personal data and no identifier linked to you or your account, and is used solely to check that the sign-in response coming back from Dekimu ID (id.dekimu.com) belongs to the browser that started it, which stops anyone from signing you into an account they control without you noticing. It lasts at most 30 minutes and is deleted earlier, as soon as you come back from Dekimu ID with a sign-in response that matches it, whether sign-in then succeeds or fails. Because both cookies are strictly necessary for the sign-in you ask for, neither needs your consent (art. 5(3) ePrivacy Directive 2002/58/EC; art. 22.2 LSSI-CE). No tracking cookies, ever.

Under the GDPR you have the rights of access, rectification, erasure, objection, restriction of processing, and data portability over your personal data. Erasure removes your stored history immediately. Use the Privacy Center in Dekimu ID at id.dekimu.com. You may also lodge a complaint with a supervisory authority.

Dekimu Labs, S.L. is the data controller for miniexplain. Full provider details:

Dekimu Labs, S.L. · CIF B55431357 — identificación completa en el Aviso Legal.

You may also use the Contact options in Dekimu ID at id.dekimu.com.

This policy is governed by the laws of Spain. You may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or the supervisory authority of your habitual residence.