Legal
The controller of your personal data is Minerva Nova Ltd, registered in England and Wales (company no. 17082360), 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE. Contact for anything in this notice: privacy@minervanova.ai. We are a small service and are not required to appoint a Data Protection Officer.
| Data | When | Purpose | Legal basis (UK GDPR Art 6) |
|---|---|---|---|
| Your sign-in tokens (issued when you connect Minerva Nova to Claude or ChatGPT) and usage records: which tool was called, when, how many results, and the cost we attribute to the call. These records include the parameters of your request (e.g. the destination and dates searched). | Every use of the Service | Providing the Service; enforcing usage limits; debugging; abuse prevention | (b) contract — providing the Service and enforcing its limits; (f) legitimate interests — security, abuse prevention and service improvement |
| A name, if one was given when access was set up (older accounts only) | Not collected for new accounts | Labelling your account | (b) contract |
| IP address and browser user-agent | When you sign in, connect a client or accept the terms | Rate-limiting sign-in and connections; fraud and abuse prevention; keeping a record of terms acceptance | (f) legitimate interests — security and protecting the Service; establishing legal claims |
| Email address | When you sign in by email and create an account | Signing you in (one-time sign-in links and codes); account management; service notices (not marketing) | (b) contract — email is required to provide an account; without it the account features are unavailable |
| Terms-acceptance records: timestamp, terms version, method, IP, user-agent | When you accept the Terms | Evidence of the agreement between us | (f) legitimate interests — establishing and defending legal claims |
| Saved preferences: what you ask Minerva to remember, such as likes and dislikes, diet, places you want to keep, who usually comes along (including children's ages or a dog), budget, pace and a short note | Only when you ask Minerva to remember something | Personalising recommendations in this and later conversations; recommendations list the saved preferences they used | (b) contract — providing the feature you asked for. If a preference reveals sensitive information (for example a diet linked to health or religion), Art 9(2)(a) explicit consent, given by asking us to save it and withdrawn by deleting it |
| Updates you follow (event subscriptions): your account id, the place filter you chose, the callback URL and signing secret ChatGPT provides for delivery (the secret is encrypted at rest), and verification and delivery status with their timestamps | Only when you ask ChatGPT to follow Minerva updates | Delivering the update notifications you asked for | (b) contract — providing the feature you asked for |
Location. Minerva's tools never ask for your precise location: places are searched by what you name in the conversation. ChatGPT may send an approximate location hint (such as a city or region) with requests; Minerva does not store or use it.
We do not seek special-category data, and make no automated decisions with legal or similarly significant effects (a usage limit pausing live checks is a contractual limit, not profiling). Saved preferences are used only to order and filter recommendations for you, never for advertising or shared with anyone. You can see, change or delete them at any time by asking Minerva, or by writing to us. We do not sell personal data and do not send marketing.
We use a small number of service providers who process data on our instructions under written data-processing agreements. Categories of recipients:
A list naming our current providers is available on request from privacy@minervanova.ai.
We may also disclose data where required by law, or in connection with a business transfer (we would tell you).
Our application and database are hosted in the UK/EU. Some providers are US companies or process data in the USA (notably our email delivery and web-search providers, and support access by US-based staff of other providers). Where personal data is transferred outside the UK, we rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses with the UK Addendum (or the UK IDTA) included in the provider's data-processing agreement.
You have the right to request access to your personal data, correction, erasure, restriction of processing, portability, and to object to processing based on legitimate interests. Write to privacy@minervanova.ai — we respond within one calendar month, free of charge. We may need to verify that you control the relevant email address.
Your controls. Ask Minerva what it remembers, or to forget one item or everything. Stop following Minerva updates in ChatGPT at any time, or ask us at privacy@minervanova.ai or hello@minervanova.ai to cancel the subscription. Remove the Minerva Nova connector in your assistant to disconnect it.
Complaints. If you are unhappy with how we handle your data, you can complain to us at privacy@minervanova.ai — we acknowledge complaints within 30 days and respond without undue delay. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) at any time.
The minervanova.ai website sets one cookie, and only if you sign in: a strictly necessary session cookie (mn_session) that keeps you signed in for up to 90 days. Such cookies do not require consent under UK law (PECR). Visitors who do not sign in get no cookies. The website uses no analytics or advertising cookies and loads no third-party trackers. Separately, the Service records pseudonymous usage events on our servers and sends them to our analytics provider (see section 3); no cookies are involved. If that ever changes, this notice will be updated first.
Data is encrypted in transit (TLS) and at rest by our hosting providers. Sign-in tokens are unique per user and connection, expire and can be revoked. Access to production systems is limited to those who operate the Service. No internet service can promise absolute security — if a breach occurs that risks your rights, we will notify the ICO within 72 hours as required and tell you where the law requires it.
The Service is for people aged 13 and over. Users under 18 may use it only with the permission of a parent or guardian. It is not directed at children under 13, and we do not knowingly collect their personal data; if we learn that we have, we delete it.
We will post any changes on this page with a new version number and effective date, and for significant changes we will notify you (by email, or by a notice in the Service).