MINIMUMRC PRIVACY POLICY

Last updated: November 5, 2026

1. About This Policy

Sengi Tech Co., Ltd. (“MinimumRC,” “we,” “us,” or “our”) operates MinimumRC Ads Monitor, also called MinimumRC Ads. It is an internal tool for managing authorized Meta advertising accounts, preparing advertising materials, and reviewing website and advertising performance.

This policy covers the application’s Meta integration, read-only Google Analytics 4 (GA4) connection, and website behavior reporting. It supplements, but does not replace, the privacy information for purchases, customer accounts, and other activities on www.minimumrc.com.

For privacy questions or requests, contact services@minimumrc.com.

2. Information We Process

What we process depends on the permissions granted, the features in use, and the visitor’s analytics consent choices.

• Meta accounts and advertising. We process authorization credentials; business, Page, pixel, and ad account identifiers; permissions, settings, campaigns, budgets, targeting, and creatives. Performance reports include spend, impressions, clicks, cart and checkout activity, and attributed purchase counts and values. They do not identify individual purchasers or provide shipping or payment-card details.

• Google Analytics authorization. With an administrator’s permission, the application uses read-only access (analytics.readonly) to list available Analytics accounts and properties and read reports for the selected property. We process property identifiers, names, time zones and currencies, and OAuth tokens that allow later reads without the administrator signing in each time. We do not receive the administrator’s Google password.

• Google Analytics reports. We store aggregate report snapshots covering traffic sources and campaigns, countries and devices, page views, sessions, engagement, event counts, product activity, purchases, and revenue. They are not individual order records or a stream of identifiable shopper activity.

• Website activity, collected separately from GA4 reports. When a visitor grants analytics consent, our website can send events to MinimumRC’s own collector. These may contain browser and session identifiers, page and referrer information, campaign tags, device category, products viewed or added to a cart, and a transaction reference on a purchase event. A browser identifier may come from an existing analytics cookie. A purchase event does not itself verify payment.

• Facebook ad comments and replies. For supported posts on connected Pages, we may process comment text and IDs, available author names, timestamps, related posts, and moderation status.

• Products and creative materials. We process MinimumRC product descriptions and images, operator uploads, and available review covers or screenshots, together with creator names and source-video links where provided.

• Operational records. These include drafts, experiment plans and results, operator settings, synchronization and error records, action logs, and technical access information used to run and secure the application.

3. How We Use Information

GA4 reporting. Authorized staff use the reports to see which sources brought traffic, which products attracted interest, and how many purchases and how much revenue GA4 reported. This Google permission cannot change Analytics settings, create campaigns, or change advertising budgets.

Website behavior comparisons. We use our own website events to compare ad visitors with visitors who generated a purchase event with an order reference. We compare actions such as adding to a cart, starting checkout, returning, and viewing several products. Historical GA4 summaries provide context, not individual purchase journeys. A group similarity score is not a prediction about a particular visitor.

Meta advertising operations. We use authorized Meta information to evaluate ads, prepare creatives, compare experiments, and manage supported comments. Where separately authorized, the application may create or change ads, adjust budgets, or pause ads within the operator’s configured limits. Operational records help prevent duplicate actions, diagnose failures, and provide support.

4. AI-Assisted Features

When enabled, the following features use DeepSeek:

• Ad copy. For drafting, we send official product-page text and writing instructions. For translation, we send the ad text and target language. The copywriting request does not include reviewer images. Generated copy is a draft for operator review.

• Review images. A separate feature sends selected review screenshots or video stills for assessment of image quality and composition. People may be visible; the model is not asked to identify them or infer endorsement.

• Facebook comment moderation. The classifier receives comment text and its identifier, not a separate author name or profile. The text can contain personal information the author included. The application may automatically hide clearly negative comments classified with high confidence. It does not delete comments or post replies through this feature, and an authorized operator can restore visibility.

GA4 reports, Google or Meta access tokens, customer order records, and stored visitor histories are not inputs to these models.

5. Disclosure and Service Providers

Access is limited to authorized MinimumRC personnel who need it for the functions described above. We use OpenAI’s ChatGPT Sites and Cloudflare for application hosting, authentication, or storage. These providers may process report data to operate the dashboard; hosting data is distinct from submitting it to an AI model. DeepSeek receives the inputs described in Section 4.

We send reporting requests to Google. We send advertising materials, configuration, and authorized management or moderation requests to Meta. We do not upload GA4 reports to Meta or other advertising platforms.

We handle information received through Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements. We do not sell that information or its derivatives, share them with data brokers, use them to serve ads (including retargeted or personalized ads), or train general-purpose AI models on them. We do not use Meta Platform Data for unrelated profiling, sell it, or share it with unrelated advertisers for their own marketing.

We may disclose information as required by law or as necessary to address fraud or security incidents, subject to applicable platform restrictions.

6. Storage, Security, and Retention

We store credentials on the server, restrict access, and use encrypted network connections. Google access and refresh tokens are encrypted before storage. The behavior dashboard stores keyed, pseudonymous representations of event, visitor, session, and order identifiers to recognize repeat records without displaying the original identifiers.

We retain saved reports, operational records, and experiment history as reasonably needed for reporting, support, security, and legal obligations. The purchase-behavior baseline accumulates over time; the seven-day advertising comparison window is not a deletion period. There is no single automatic deletion period for all records.

We delete or de-identify data no longer needed and honor verified deletion requests and applicable platform requirements. If the law requires us to keep specific records, we limit retention to that purpose. No method of storage or transmission is completely secure.

7. Revoking Access and Requesting Data Deletion

• Google Analytics. Revoke access in your Google Account connections, or have an authorized administrator disconnect GA4 in MinimumRC Ads settings. Disconnecting in the application removes its stored Google tokens. Either action stops future reads through that connection; neither automatically erases previously saved reports or records held by Google.

• Meta. Revoke access in the relevant Meta account or business integration settings. This stops future access under that authorization. It does not erase saved records or pause ads already running on Meta.

• Website analytics. Visitors can change analytics consent through the website’s cookie controls. Changing consent affects future collection; it does not itself erase existing records.

For access, correction, or deletion of data held by MinimumRC, email services@minimumrc.com with the subject “MinimumRC Ads Monitor — Privacy Request” or “MinimumRC Ads Monitor — Data Deletion Request.” Identify the records involved: for example, a GA4 property ID and date range, a Meta ad account ID, or a public comment link. Do not send passwords, authorization codes, tokens, payment-card details, or unnecessary identity documents.

We may ask for information needed to verify your identity or authority. We will address verified requests within applicable legal time limits, delete relevant records unless retention is legally required, and explain any limitation. Requests about records controlled by Google, Meta, or another provider may need to be made directly to that provider.

8. International Processing

Our service providers may process information in countries other than your own. Where applicable law requires safeguards for international transfers, those safeguards must be in place for the relevant processing.

9. Changes and Contact

We will publish changes to this policy and its revision date on our website and communicate material changes where required by law.

MinimumRC / Sengi Tech Co., Ltd.

Email: services@minimumrc.com

Website: https://www.minimumrc.com