Privacy Policy

1. Introduction

Minus One Labs ("we," "us," or "our") operates a voice-first AI coaching platform for aspiring founders. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information: When you sign in, we receive your email address, name, and profile image from your authentication provider.

Profile Information: You may provide your current role, skills, motivations, risk tolerance, timeline, and domains of interest.

Conversation Data: Voice conversations with our AI coach are processed in real-time. Audio is not stored. However, text transcripts of conversations, AI-generated insights, and session metadata (duration, timestamps) are stored in our database.

Usage Data: We collect session cookies necessary for authentication and service operation.

3. How We Use Your Information

• To provide and maintain our AI coaching service
• To personalize your coaching experience based on your profile
• To store conversation transcripts so you can review past sessions
• To authenticate your identity and secure your account
• To improve our service and fix issues

4. Third-Party Services

ElevenLabs: We use ElevenLabs Conversational AI to power voice interactions. Your voice data is sent to ElevenLabs for real-time processing. Please review ElevenLabs' Privacy Policy for details on their data handling.

Authentication Provider: We use OAuth/OpenID Connect for authentication. Your sign-in credentials are handled by your authentication provider, not by us.

Cloudflare Turnstile: We use Cloudflare Turnstile for bot protection. See Cloudflare's Privacy Policy.

5. Data Retention

Authentication sessions expire after 7 days. Your profile data and conversation transcripts are retained for as long as your account is active. You may request deletion of your data at any time by contacting us.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing

To exercise any of these rights, please contact us at the email below.

7. Data Security

We implement security measures including encrypted connections (HTTPS), HTTP-only secure cookies, rate limiting, webhook signature verification, and parameterized database queries. However, no method of electronic transmission or storage is 100% secure.

8. Cookies

We use essential cookies for authentication and session management. These cookies are HTTP-only and secure. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated date.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].