Privacy policy

This page explains what information AIMacMini keeps about you, what it is used for, who it is shared with, how long it is kept and how you can manage it.

1. What we keep

• Account: email, interface language and the version of the terms you accepted at sign-up.
• Sign-ins: device, time and IP of each sign-in (for the Devices and security activity page and to spot unusual sign-ins).
• Services: orders, service records and expiry dates. Remote connection details, Claude account details and the sign-in verification codes those accounts receive are stored encrypted, shown only after you sign in, and every view is logged; verification codes are deleted after 7 days.
• Money: wallet activity, deposit and withdrawal records (including wallet addresses and transaction IDs).
• Support: ticket contents and screenshots you upload.
• Notifications: your notification preferences; if you link Telegram, your Telegram account ID.

2. What we don’t keep

• Plain-text passwords: we only store an irreversible hash; two-step verification secrets are kept by the sign-in system and can’t be read by our business systems.
• Data on your Mac mini: files, code, chats and browsing history on the machine don’t pass through our systems, and we don’t view, copy or back them up. After delivery we don’t connect to the machine unless you ask us for help and agree, and no monitoring software is installed. When the service expires, the disk is wiped before the machine goes to the next customer. See Privacy protection.

3. What the information is used for

• Providing the service: sign-up and sign-in, wallet bookkeeping, orders and renewals, delivery and transaction records.
• Notifying you: deposits received, deliveries, expiry reminders, low balance, support replies and so on.
• Support and checks: handling your tickets and checking unusual deposits.
• Preventing misuse: spotting unusual sign-ins and bulk sign-ups.
• For analytics and measuring our ads: where you agree, or where it is allowed by default in your region, we use analytics and advertising cookies to understand how the site is used and to measure the ads we run (see section 8).

We never sell your information.

Information we receive from Google when you sign in with Google (including your email) is still not used for advertising: for accounts created with Google, the server-side conversions below don’t include your email. See section 10.

Server-side conversions

When you create an account or pay for an order, we report these two events to the advertising platforms we use, to measure our ads. We send the event itself (time, order amount), hashed identifiers (for example a SHA-256 hash of your email, which the platform can’t turn back into your email), ad click IDs, and your IP address and browser type at the time (so the platform can match the event to an ad click) — and only if you agree to advertising cookies or they are allowed by default in your region. Deposits and renewals are counted only in our analytics (if you agree to analytics) and are not sent to advertising platforms.

4. Who it’s shared with

• Payment and payout providers (the USDT payment channel and, when offered, card and e-wallet payment providers such as Alipay): the amounts, addresses and other details needed for payments and withdrawals.
• Email delivery service: to send you verification codes and notification emails.
• Our stock and fulfilment partner (the inventory system for machines and Claude accounts): your order number, the plan you bought and your email, to assign machines and accounts and to handle renewals and after-sales support.
• Telegram: only after you link it yourself, to send you notifications.
• Analytics and advertising platforms: where you agree, or where it is allowed by default in your region, for the purposes in sections 3 and 8. Which platforms this site currently uses, and the cookies each one sets, are listed in the Cookie notice.

5. How long it’s kept

• While your account is in use, the information above is kept.
• Wallet, deposit, withdrawal, order and service records are kept long term for reconciliation and to handle your future questions.
• Signed-in device records stop showing after the session expires.
• The database is backed up daily, and backups are deleted automatically after a retention period.

6. How it’s protected

• The whole site uses encrypted connections; two-step verification and passkeys are supported.
• Staff permissions are assigned by role so they only see what their work needs, and sensitive admin actions are logged.

7. What you can do

• Change your email, language, password and two-step verification, and manage signed-in devices, on the settings page.
• Turn off notification categories you don’t need in notification settings (except notifications about charges and suspension), and unlink Telegram at any time.
• To view, correct or delete certain information, contact support; for accounts with money or order records, the accounting records must be kept.

8. Cookies and local storage

We group cookies and browser storage into three categories:

• Essential: your sign-in session, security checks, remembering your language, theme and cookie choices, and one cookie that records how you found us (the campaign parameters of an ad or referral link, the referring site’s domain and the landing page, kept for 30 days; once you sign in it is moved to your account for our staff to measure marketing, and the cookie is deleted). These are used only on this site, aren’t shared with third parties and can’t be turned off, because the site doesn’t work without them.
• Analytics: help us understand traffic and usage to improve the site.
• Advertising: measure the ads we run and may show you more relevant ads on other sites.

For visitors in the European Economic Area, the UK and Switzerland (and visitors whose region we can’t determine), analytics and advertising cookies are not used until you agree. Elsewhere they are on by default and you can turn them off at any time. To change your choices:

• Select “Cookie settings” at the bottom of any page; once signed in, you can also use Settings → Account → Privacy & cookies.
• If your browser sends Global Privacy Control (GPC), advertising cookies are off by default.
• You can also clear this site’s cookies in your browser; we’ll ask again or apply the defaults on your next visit.

Cookies and browser storage used on this site:

See the Cookie notice for more.

9. Updates

When this policy is updated, we update the version and effective date on this page.

10. Signing in with Google (Google user data)

• What we receive: when you choose to sign up or sign in with your Google account, Google shares, with your permission, your email address, name, profile picture, language setting and Google account ID. We store only your email address, Google account ID and language setting; we don't store, display or use your name or profile picture.
• How we use it: only to create your account, let you sign in with Google, and send you notification emails in your language.
• No selling or sharing: we don't sell it or share it with third parties. The service providers we rely on (such as email delivery and payments) receive only what they need to provide their service, see section 4; your Google account ID is not given to any provider.
• No advertising or AI: it is not used for advertising, not used to train artificial intelligence or machine learning models, and not used to generate any content.
• How long we keep it: for as long as your account is open and linked to Google. When you unlink Google in Settings → Sign-in & security → Connected accounts, your Google account ID is deleted right away; closing your account also removes Google sign-in (see "How to close your account" in the Help Center). Database backups are deleted automatically after a retention period. You can also revoke AIMacMini's access at any time under "Third-party apps & services" in your Google account.
• AIMacMini's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
• For questions about Google user data, or to view or delete it, email us at support@aimacmini.com.