Privacy Policy

1. Who We Are

No Limit Apps LLC, a Wyoming limited liability company ("Minionix", "we", "us", "our"), operates the websites minionix.com, app.minionix.com, and related subdomains (together, the "Platform"). For the purposes of applicable data-protection law, Minionix is the data controller of the personal data described in this Privacy Policy.

Contact for privacy matters: support@minionix.com. For data-protection questions specifically, use the subject line "Data Protection".

If you are located in the European Economic Area ("EEA"), United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local supervisory data-protection authority.

2. Scope of This Policy

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal data about:

• Clients who create Campaigns and purchase distribution services on the Platform (including personnel of Business Clients);
• Account Managers (AMs) who accept and fulfill Missions; and
• Visitors who browse any Minionix website.

It does not cover third-party websites or services — including TikTok, Instagram, our payment processor, or external analytics providers — that are not under our control. We encourage you to read those services' own privacy policies.

3. Personal Data We Collect

3.1 Account Information (provided by you)

• Name, username, and password (stored as a salted hash — never in plaintext).
• Email address.
• Optional profile photo.

3.2 Identity & Device Data — Account Managers only (provided by you)

• Date of birth (all users must be 18 or older).
• Government-issued identification (e.g., passport or national ID) for identity verification.
• Device information: country of operation, device model, and operating system of the smartphone(s) used for content distribution.
• Payout information (bank account or payment method details).

Identity verification may be performed by a specialized third-party identity-verification provider. If the verification flow includes a selfie or facial-scan comparison, the provider may process biometric information derived from your images. Where required by law (including the Illinois Biometric Information Privacy Act and equivalent laws of Texas and Washington), you will be informed and asked for separate, explicit consent before any biometric data is collected. Biometric verification data is retained only as long as reasonably necessary to complete verification and prevent fraud, and is permanently destroyed no later than when that purpose is fulfilled or three (3) years after your last interaction with the Platform, whichever occurs first. Copies of identity documents are deleted once verification is complete, except where longer retention is required by law.

3.3 Payment & Payout Data

• Last four digits of the payment card and billing address supplied by Clients.
• Payout bank or payment account details supplied by Account Managers.
• Payment-processor transaction tokens. Minionix never stores full card numbers.

3.4 Campaign Content & Social-Media Credentials (provided by Clients)

• Text instructions and Campaign descriptions.
• Video files and image thumbnails.
• Social-media credentials or access tokens provided by Clients solely for the purpose of executing a Campaign.

Social-media credentials and access tokens are the most sensitive category of data we handle. They are encrypted at rest and in transit; access is limited to the personnel and systems strictly required to run your Campaign (least-privilege); and they are deleted when the related Campaign ends, when you remove them, or upon your request. Please note that sharing account credentials may itself violate the terms of service of the relevant social-media platform — you are responsible for assessing that risk before providing credentials.

3.5 Communications (generated or provided by you)

• Messages exchanged via the Platform chat.
• Support tickets and feedback forms.
• Email correspondence with our team.

3.6 Usage & Device Data (collected automatically)

• IP address and approximate geographic location (country/region level).
• Browser type and operating system.
• Referral URL, page-view timestamps, and clickstream data.

3.7 Cookie & Tracking Data (collected automatically — see § 5)

• Session and authentication cookies.
• Payment-processor cookies required for secure payment flows.
• Analytics cookies (e.g., aggregate audience measurement).

3.8 Business Billing & Verification Data (Business Clients)

For Clients that pay by bank transfer against invoices, we additionally process:

• company bank account details as they appear in incoming payment records and bank statements;
• billing contact details — name, role, work email, and phone number — of the Client's personnel;
• tax identifiers (e.g., EIN / VAT number) and business registration details collected for business verification (KYB), including, for larger transactions, beneficial-ownership information.

We process this data to perform our contract and to comply with legal obligations, including tax, accounting, and sanctions-screening requirements. It is encrypted at rest, access to it is restricted, and it is retained for 7 years together with transaction records.

We do not intentionally collect sensitive personal data (such as race, religion, or health data) except as described in § 3.2 for identity verification, and we do not knowingly collect data from anyone under 18.

4. How and Why We Use Personal Data

We use personal data for the following purposes and on the following legal bases:

• Create and manage your account; authenticate you — necessary for performance of our contract with you.
• Enable Clients to post Campaigns and engage Account Managers — performance of contract.
• Process payments from Clients and payouts to AMs — performance of contract and legal obligation (tax and accounting compliance).
• Verify identity and business registration; screen users and transactions against applicable sanctions lists — legal obligation and our legitimate interest in preventing fraud and complying with U.S. sanctions law.
• Provide customer support and resolve disputes — performance of contract and our legitimate interest in ensuring service quality.
• Send transactional emails and service notices — performance of contract; and compliance with CAN-SPAM and other applicable law.
• Improve and secure the Platform; monitor trends; detect and prevent fraud and abuse — our legitimate interest in operating a reliable, secure marketplace.
• Send marketing emails or newsletters — your consent; you may withdraw consent at any time by clicking "unsubscribe" or contacting us.
• Comply with laws, court orders, or law-enforcement requests — legal obligation.

5. Cookies, GPC & Similar Technologies

We use cookies and local-storage objects to:

• keep you logged in between sessions;
• remember your preferences;
• enable secure payment flows;
• measure aggregate Platform usage via analytics tools.

Essential cookies (login, security, and payment cookies) are always active because the Platform cannot function without them. Where required by applicable law, non-essential cookies are set only after you consent through our cookie banner, which offers equally prominent "Accept" and "Reject" choices. You can also control or delete cookies through your browser settings. Disabling cookies may affect certain Platform functionality (e.g., staying logged in).

Global Privacy Control and Do Not Track

We do not sell or share personal information as those terms are defined under applicable U.S. state privacy laws, so there is no sale or sharing to opt out of. To the extent a Global Privacy Control (GPC) signal constitutes a valid opt-out request under applicable law (e.g., in California or Colorado), we treat it as such for that browser. We do not currently respond to legacy "Do Not Track" browser signals, for which no industry standard has been adopted.

6. Sharing & Disclosure

We share personal data only as necessary:

• Between users: When a Client publishes a Campaign, the Campaign content and Client username are visible to prospective Account Managers. When an AM accepts a Mission, the Client can view the AM's profile and messages.
• Payment processing: Card payments and payouts are processed by our third-party payment processor, which acts as an independent controller of the payment data it collects and processes under its own privacy policy.
• Service providers: Cloud hosting, analytics, email delivery, and identity-verification providers. These processors are bound by written data-processing agreements and may process data only on our instructions.
• Legal & safety: Courts, law-enforcement agencies, or other third parties when required by law, to enforce our Terms of Use, or to protect the rights, property, or safety of Minionix, our users, or the public.
• Business transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.

A current list of the categories of our subprocessors is available on request at support@minionix.com. Business Clients may request a Data Processing Addendum (DPA) incorporating standard contractual protections by contacting the same address.

7. International Transfers

Our servers are located in the United States. Some of our service providers (e.g., payment processing and analytics tools) may process data in other countries, including in the European Economic Area or elsewhere. Where we transfer personal data outside a jurisdiction that requires safeguards, we rely on:

• an adequacy decision by the relevant regulatory authority; or
• the European Commission's Standard Contractual Clauses (SCCs) — together with the UK Addendum where applicable — or equivalent transfer mechanisms, plus additional safeguards where appropriate.

8. Data Retention

We retain personal data only as long as necessary for the purposes set out in this Policy or as required by law:

• Account data: for as long as your account is active, and up to 5 years after closure (applicable statute of limitations for contractual claims).
• Transaction records and invoices: 7 years (US accounting and tax law requirements).
• Business billing, banking, tax, and KYB records: 7 years, together with the related transaction records (§ 3.8).
• Identity documents and biometric verification data: see § 3.2.
• Social-media credentials: deleted when the related Campaign ends or upon your request (§ 3.4).
• Support tickets and communications: 3 years after the ticket is closed.
• Cookies: see § 5 (session cookies expire when you close your browser; persistent cookies expire per their individual settings).

You may request deletion of your account at any time through the Platform dashboard or by emailing support@minionix.com. Certain records (e.g., transaction history) may need to be retained for legal reasons even after account deletion.

9. Security & Breach Notification

We implement industry-standard technical and organizational measures to protect your data, including:

• encryption of data in transit (TLS 1.2 or higher) and encryption at rest for stored personal data, including social-media credentials and banking details;
• passwords stored as salted hashes using an industry-standard algorithm — never in plaintext;
• least-privilege access controls for our staff, with multi-factor authentication for administrative access to production systems;
• regular security reviews and penetration testing;
• incident-response procedures.

No online service is 100% secure. In the event of a breach of security affecting your personal data, we will notify affected individuals in the most expedient time possible and without unreasonable delay, consistent with applicable law (including Wyo. Stat. § 40-12-501 et seq. for Wyoming residents), the legitimate needs of law enforcement, and any measures necessary to determine the scope of the breach and restore the integrity of our systems. As an internal standard, we aim to provide such notice no later than 30 days after discovery. Where required by applicable law, we will also notify regulators and consumer reporting agencies and, for individuals in the EEA or UK, the competent supervisory authority within 72 hours as required by the GDPR.

10. Children's Privacy

The Minionix Platform is intended solely for users aged 18 and over, and our Terms of Use prohibit anyone under 18 from creating an account or using the Platform. We do not knowingly collect personal data from anyone under 18 — and in no event from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected information from a minor, please contact us immediately at support@minionix.com and we will promptly delete such information.

11. Your Rights

11.1 U.S. State Privacy Rights

If you reside in a U.S. state with a comprehensive consumer privacy law (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana), you may have the following rights with respect to your personal data:

• Access / to know: confirm whether we process your personal data and obtain a copy of it.
• Correction: correct inaccurate personal data we hold about you.
• Deletion: request deletion of personal data you have provided to us or that we have collected about you (subject to legal exceptions).
• Portability: obtain a copy of your data in a portable and readily usable format.
• Opt-out: opt out of the sale of personal data, targeted advertising, and certain profiling. (We do not sell personal data or process it for targeted advertising.)
• Appeal: if we decline your request, you may appeal our decision by emailing support@minionix.com with the subject line "Privacy Rights Appeal". If your appeal is unsuccessful, you may contact your state Attorney General.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

As a matter of company policy — and not because any Wyoming statute requires it — we voluntarily extend these rights to all users in the United States, including Wyoming residents.

11.2 California Residents — CCPA / CPRA

In addition to the rights in § 11.1, the California Consumer Privacy Act (as amended by the CPRA) requires the following notice at collection. In the preceding 12 months we have collected the categories of personal information below. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted by the CPRA.

California's "Shine the Light" law (Cal. Civ. Code § 1798.83): we do not disclose personal information to third parties for their own direct-marketing purposes. You (or your authorized agent) may submit a CCPA request by contacting us at support@minionix.com.

11.3 EU / EEA Residents — GDPR

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) or equivalent local law:

• Access: obtain a copy of your personal data and information about how we use it.
• Rectification: correct inaccurate or incomplete personal data.
• Erasure ("right to be forgotten"): request deletion of your personal data where there is no longer a lawful basis for processing.
• Restriction: request that we limit how we use your data in certain circumstances.
• Data portability: receive your data in a structured, commonly used, machine-readable format.
• Object: object to processing based on legitimate interests or for direct-marketing purposes.
• Withdraw consent: withdraw consent at any time where processing is based on consent (this does not affect the lawfulness of prior processing).
• Lodge a complaint: file a complaint with your local supervisory authority (e.g., the ICO in the UK, the CNIL in France).

Transfers of your data to the United States are protected by the safeguards described in § 7.

11.4 How to Exercise Your Rights

To exercise any of the rights above, please contact us at support@minionix.com. We will verify your request and respond within 45 days of receiving a verifiable request (extendable by an additional 45 days with prior notice where reasonably necessary; GDPR requests are answered within one month, extendable as permitted).

12. Contact Us

For questions, requests, or concerns about this Privacy Policy or our data practices, please contact us:

No Limit Apps LLC — Privacy
30 N Gould St Ste R
Sheridan, WY 82801, United States
Email: support@minionix.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. We will post the revised version on the Platform with an updated "Last Updated" date. For significant changes, we will provide additional notice via email or a prominent Platform notice at least 30 days before the change takes effect where practicable. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Policy.