01Who this policy covers

MintReply is a SaaS email marketing (EDM) platform operated by MIXUAN GROUP (HONGKONG) LIMITED. This policy explains our handling of website enquiries, platform account data and information processed for merchants. You can contact us at [email protected] or through the privacy request form linked on this page.

A merchant determines the purpose and audience of its own campaigns. Its privacy policy and consent notices also apply to its subscribers. Using MintReply does not permit one brand to use another brand’s subscribers.

02Information we process

Website enquiries include the name, email, company, website and information you choose to submit. Registration requests also record the requested service, consent-source description and accepted policy version. Security and web-server logs may include IP addresses, request times and browser information.

Platform accounts contain login credentials in hashed form, team roles and configuration. When a merchant connects its store or imports authorized data, the service may process contact details, subscription choices and their source, customer attributes, products, orders, browsing events and campaign records. The exact data depends on the merchant’s configuration.

03How information is used

We use information to review applications, provide and secure the service, respond to requests, maintain consent and suppression records, and provide campaign reporting for the relevant merchant. A request for platform access is not consent to receive marketing emails.

Where enabled by a merchant, email images and tracked links can record delivery, opens and clicks, including related technical information. Automated image loading can affect open metrics. Merchants must disclose their tracking practices and respect applicable privacy choices before enabling collection.

04Service providers and international processing

We use hosting and database infrastructure, Cloudflare for network security and content delivery, and Twilio SendGrid for email delivery and event notifications. Information needed for those services is processed by the relevant providers. Optional AI content review sends the selected content and review context to the configured AI provider when that feature is used.

Service providers may process information outside your country, including outside Hong Kong. Merchants must establish the required notices, permissions and contractual arrangements for their audiences and cross-border processing before importing or activating data. We do not sell subscriber lists or permit their use for unrelated brands. We may disclose information where required by applicable law or to address fraud, abuse or security incidents.

05Storage, security and retention

We use HTTPS, access controls, tenant-scoped permissions and protected credentials. No security measure eliminates every risk. Access to operational data is limited to providing, supporting and securing the service.

We retain account and campaign data while needed to provide the service, address disputes or meet applicable obligations. Unsubscribe and suppression records may need to remain to prevent unwanted re-contact. You may request review or deletion of application data through our contact form. Deletion is reviewed against these purposes; backups and required records may have different retention periods.

06Your choices and requests

Use the unsubscribe link in a marketing email to stop that brand’s marketing. For access, correction, deletion, objections or other privacy requests, contact the sending merchant or submit a privacy request to MintReply. Include the sender’s brand and only the details needed to locate the record. We may verify your identity and coordinate with the responsible merchant.

The website and application use browser storage for login sessions and preferences. Cloudflare may use security-related cookies. We do not enroll website visitors in marketing merely because they visit, register or contact us. The service is intended for business users, not for collecting information from children.

07Changes and contact

We update this policy when our practices change and display its effective date. Material changes will be communicated through the service where appropriate. Send privacy questions to [email protected] or through the form below.