Privacy Policy

Last updated: October 23, 2026

This Privacy Policy explains how Human Work (HK) Limited (“Human Work,” “Minions,” “we,” “us,” or “our”) collects, uses, and shares information when you use Minions, our website at minions.co, and related services (together, the “Services”). Minions builds a personal report about you from the email, calendar, and other tools you choose to connect. By using the Services, you agree to this Policy.

1. Information we collect

Information you give us

• Contact and account details, such as your phone number, which we use to pair your account and send you one-time login codes.
• Payment information. When you pay for a report, our payment processor (Stripe) collects and processes your card details. We do not store full card numbers; we receive limited transaction data such as confirmation of payment and the last four digits.
• Invitation and referral information, such as invitation codes you enter and codes you share with others.
• Communications. Messages you send us (for example, support requests) and your messaging preferences.

Information from accounts and tools you connect

To build your report, you authorize us to access accounts and tools you connect, currently including your Google account (Gmail and Google Calendar) and any additional tools you choose to link. We access this information on a read basis through our integration provider (Composio) solely to generate and deliver your report. This may include the content and metadata of your messages and events, contacts you interact with, and related activity. We do not send email, modify your calendar, or take actions on your behalf.

Information the Services generate

• Your report and analysis, meaning the persona report and the derived observations, summaries, and signals we produce from the information you connect.

Information we collect automatically

• Device and log data, such as IP address, browser type, device identifiers, pages viewed, and timestamps.
• Cookies and similar technologies used to keep you signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings; some features may not work without them.

2. Google user data and Limited Use

Minions’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing feature you request — building your report.
• We do not use Google Workspace or other Google user data to develop, improve, or train generalized AI or machine-learning models.
• We do not sell Google user data, and we do not transfer it except as necessary to provide or improve the Services, to comply with applicable law, or as part of a merger or acquisition after notice.
• We do not allow humans to read your Google user data unless you give explicit consent, it is necessary for security or to comply with law, or the data has been aggregated and de-identified.

You can revoke our access to your Google account at any time from your Google account’s third-party access settings or by contacting us.

3. How we use information

• To generate, deliver, and support your report;
• To operate, maintain, secure, and improve the Services;
• To process payments and manage invitations and referrals;
• To communicate with you, including login codes, report-ready notifications, and service messages by SMS, WhatsApp, or email;
• To detect, prevent, and respond to fraud, abuse, security, and technical issues;
• To comply with legal obligations and enforce our terms.

4. AI models

Your report is produced using AI. We do not use the content of your connected accounts, your report, or other personal information to train generalized AI models. We may use aggregated or de-identified data — information that does not identify you — to operate and improve the Services.

5. How we share information

We do not sell your personal information, and we do not share it with data brokers. We disclose information only as described here:

• Service providers and sub-processors that help us run the Services under contract, including: Composio (connecting your accounts and tools); our analysis engine and its underlying AI model provider(s), which process your connected data to generate the report; Stripe (payments); Twilio (SMS and WhatsApp messaging); and our hosting, database, and content-delivery providers (currently Railway and Cloudflare).
• At your direction, such as with tools you connect or people you refer.
• For legal reasons, to comply with law, respond to lawful requests, or protect the rights, safety, and property of users, the public, or Human Work (HK) Limited.
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. Data retention

We keep the information from your connected accounts only as long as needed to generate and deliver your report. By default, we revoke our access to your mailbox and delete the underlying source data we indexed once your report has been delivered. We retain your account, payment records, and report for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

7. Security

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us right away.

8. Your choices and rights

• Disconnect accounts and revoke access at any time through your account settings or the provider’s permissions page.
• Access, correct, or delete your personal information by contacting us; we will respond as required by applicable law.
• Messaging preferences. Reply STOP to opt out of non-essential SMS or WhatsApp messages; you may still receive transactional messages such as login codes.
• Cookies. Manage cookies through your browser settings.

Depending on where you live, you may have additional rights — such as the rights to access, correct, delete, port, or restrict certain processing, and to appeal a decision. We do not discriminate against you for exercising these rights. To make a request, contact us using the details below.

9. Children

The Services are not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.

10. International users

We operate the Services from the United States and process and store information there. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide additional notice as required by law. Your continued use of the Services after an update means you accept the revised Policy.

12. Contact us

If you have questions about this Policy or your information, contact us at privacy@minions.co.