Last updated: April 22, 2026
Privacy Policy
Horarium LLC · 30 N Gould St, STE R, Sheridan, WY 82801, USA
1. Introduction
InMinutes is a product of Horarium LLC, a company registered in Wyoming, USA ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using InMinutes, you agree to the practices described in this policy.
2. Information We Collect
- Account information: name, email address, and hashed password when you register.
- OAuth profile data: name, email, and profile picture when you sign in with Google or GitHub.
- Usage data: pages visited, features used, actions taken, and timestamps of interactions.
- Payment information: billing details processed securely by Stripe — we never store card numbers or CVVs.
- Business data: publicly available business details (e.g. from Google Places via Apify) that you initiate scraping of, used solely to generate websites on your behalf.
- Content inputs: prompts, modification requests, and any text you provide when instructing the AI to generate or edit websites.
- Device and log data: IP address, browser type, operating system, and referrer URL collected automatically via server logs.
3. How We Use Your Information
- Provide, operate, and maintain our services.
- Generate AI-powered websites using the business and content data you provide.
- Process payments and send transactional emails (receipts, subscription updates).
- Send administrative messages, security alerts, and product updates.
- Respond to support requests and communications.
- Detect and prevent fraud, abuse, or violations of our Terms of Service.
- Analyse usage trends in aggregated, anonymised form to improve our platform.
- Comply with applicable legal obligations.
4. AI Data Usage
4.1 How AI is Used
InMinutes uses Anthropic's Claude AI models to generate complete HTML websites and process modification requests. When you request website generation or edits, we transmit relevant inputs — including business details, your prompts, and existing site content — to the Anthropic API.
4.2 What Data Is Sent to the AI
Data sent to Anthropic for processing includes: the business name, category, location, contact details, and description sourced from public directories; your written instructions and modification prompts; and, for edit requests, portions of the previously generated HTML. We do not send your payment details, passwords, or OAuth tokens to the AI.
4.3 Anthropic's Data Practices
Anthropic processes your data as a sub-processor under our instructions. Anthropic does not use API-submitted data to train its models by default. Inputs and outputs may be retained by Anthropic for a limited period for safety monitoring and debugging per their API data usage policy. We encourage you to review Anthropic's Privacy Policy at anthropic.com/privacy.
4.4 AI Output Accuracy
AI-generated website content is produced algorithmically and may not always be accurate, complete, or suitable for your specific purpose. You are responsible for reviewing and verifying any AI-generated content before publishing. InMinutes does not guarantee the accuracy, legality, or fitness of AI outputs.
4.5 Minimising Data Exposure
For site modification requests that do not involve design changes, we strip CSS from HTML before transmitting to the AI in order to reduce the volume of data sent and lower token usage. We apply the minimum data necessary principle when constructing AI prompts.
5. Automated Decision-Making
5.1 AI-Assisted Website Generation
The core function of InMinutes — generating a website from business data — is performed automatically by our AI pipeline without human review of each individual output. This automated process selects design styles, copy, images, and layout based on your business category and inputs. You retain full control to request modifications or reject the generated site at any time.
5.2 No Solely Automated Decisions Affecting Legal Rights
We do not use automated decision-making, including profiling, to make decisions that produce legal effects or similarly significant effects on you (such as credit decisions, employment assessments, or access to essential services). AI is used exclusively as a creative and productivity tool to generate website content.
5.3 Fraud and Abuse Detection
We may use automated systems to detect unusual usage patterns, potential fraud, or violations of our Terms of Service. If your account is flagged or suspended as a result, you have the right to request human review by contacting us at hello@inminutes.app.
5.4 Your Right to Object
Where applicable under GDPR or other regulations, you have the right to object to automated processing and request human intervention. To exercise this right, contact us at hello@inminutes.app.
6. Sharing of Information
We do not sell, trade, or rent your personal information to third parties. We share data only with the following categories of sub-processors, strictly to operate our platform: Stripe (payment processing), MongoDB Atlas (database hosting), Anthropic (AI generation), Apify (business data scraping), Cloudinary (media storage), and email delivery providers. We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
7. Data Retention
We retain your account data for as long as your account is active or as needed to provide services. Generated website content is retained to allow you to access and modify it. Scraping results are retained per your account settings. You may request deletion of your account and all associated data at any time by emailing hello@inminutes.app. We will fulfil deletion requests within 30 days, except where retention is required by law.
8. Security
We implement industry-standard security measures including TLS encryption in transit, bcrypt-hashed passwords, environment-isolated secrets, and access controls. Payments are handled entirely by Stripe and are PCI-DSS compliant. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
9.1 General Rights
Depending on your jurisdiction, you may have rights to: access a copy of your personal data; correct inaccurate data; request deletion of your data; restrict or object to certain processing; and data portability.
9.2 GDPR (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR including those listed above. Our lawful bases for processing are: performance of a contract (providing our services), legitimate interests (security, fraud prevention, analytics), and consent (optional cookies). You may lodge a complaint with your local supervisory authority.
9.3 CCPA (California Users)
California residents have the right to know what personal information we collect and how it is used, request deletion of their personal information, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at hello@inminutes.app.
10. Cookies
We use cookies for authentication (session tokens required for login) and optional analytics. Essential cookies are set automatically and cannot be disabled without breaking core functionality. Optional analytics cookies are only placed with your explicit consent, which you may withdraw at any time via the cookie settings in our footer.
11. Children's Privacy
InMinutes is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently collected such information, please contact us immediately at hello@inminutes.app and we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date below. Continued use of the platform after changes constitutes your acceptance of the revised policy.
13. Geographic Restrictions
13.1 Restricted Countries
InMinutes is not available to users located in, or ordinarily resident in, the following countries and territories due to applicable US export control laws, sanctions regulations (including OFAC), and our own operational policies:
- 🇨🇺Cuba
- 🇮🇷Iran
- 🇰🇵North Korea (DPRK)
- 🇸🇾Syria
- 🇷🇺Russia
- 🇧🇾Belarus
- 🏴Crimea (occupied territory)
- 🏴Donetsk People's Republic (DNR)
- 🏴Luhansk People's Republic (LNR)
- 🇸🇩Sudan
- 🇲🇲Myanmar (Burma)
- 🇿🇼Zimbabwe
- 🇻🇪Venezuela
13.2 IP-Based Detection and Access Denial
We use your IP address to determine your approximate geographic location. If we detect that your connection originates from a restricted country or territory listed above, we will automatically block your access to the InMinutes platform, including the website, API, and all associated services. This determination is made at the time of each request and may result in immediate denial of access without prior notice.
13.3 VPN and Circumvention
Attempting to circumvent geographic restrictions using a VPN, proxy, Tor, or any other method to mask your true location is a violation of our Terms of Service and may result in permanent account termination. We reserve the right to take additional technical and legal measures to enforce these restrictions.
13.4 Why We Collect Location Data for This Purpose
IP-based geolocation is used exclusively for compliance with sanctions and export control obligations. It is not used for advertising targeting or sold to third parties. IP addresses collected for this purpose are processed in real time and are subject to the same retention and security practices described in this policy.
14. Contact Us
For privacy-related questions, requests, or complaints — including appeals of access denials under Section 13 — contact us at: Horarium LLC — InMinutes 30 N Gould St, STE R Sheridan, WY 82801, USA Email: hello@inminutes.app