---
title: "Security and data protection"
description: "How MintCheck protects your data: encryption in transit and at rest, role-based access, backups, sub-processors, retention and who owns your data."
url: "https://mintcheck.today/en/security/"
language: "en"
updated: "2026-11-04"
---

# Security and your data

This page summarizes how MintCheck protects your data. The Privacy Policy, Terms of Service and Data Processing Addendum are the binding documents, and they apply if anything here differs.

## How we protect data

- Personal data is encrypted in transit and at rest.
- Access controls and role-based permissions follow least-privilege principles.
- Network security, logging and monitoring.
- Regular backups and recovery procedures.
- Personnel confidentiality commitments and security training.

## Who can see what in MintCheck

- The super admin manages the plan, payment card, organization settings and other administrators.
- An administrator manages only the site assigned to them.
- Workers don't use the admin console. They sign in on a phone and see the checklists and tasks for their site.
- Visitors who scan a complaint QR code or a public logbook QR code see only that form. Other checklists, work tasks and floor plans are not shown to them.

## Your data

- You own your customer data, and we use it only to provide the service to you.
- We do not sell personal data.
- We do not use identifiable customer data to train our own AI models.
- Payments are processed by Stripe, and MintCheck does not store your card number.
- Inspection records and work tasks can be exported to Excel.

## If you cancel

When an account ends, data is kept in a recoverable state for up to 90 days, in case of accidental loss, and then permanently deleted. The exceptions are information we are legally required to keep and residual copies that may stay in routine backups for a limited period.

## Where data is processed

We are based in the United States and process data on infrastructure in the United States and other countries. For transfers from the EEA, the UK or Switzerland we use appropriate safeguards such as the Standard Contractual Clauses.

## Sub-processors

These service providers help us run MintCheck, under appropriate contractual safeguards.

| Provider | Purpose |
| --- | --- |
| Google Cloud Platform | Hosting |
| Cloudflare | Content delivery and security |
| Firebase Cloud Messaging | Push notifications |
| Twilio SendGrid | Email delivery |
| Stripe | Payment processing and billing |

## Questions

For security or privacy questions, email privacy@mintcandi.com.

## Binding documents

- [Privacy policy](https://mintcheck.today/en/privacy/)
- [Terms of service](https://mintcheck.today/en/terms/)
- [Data Processing Addendum](https://mintcheck.today/en/dpa/)