Scope
This policy describes data processing for the minfra.ai web application, including the platform control plane and tenant CMS. It focuses on authenticated administrative usage rather than a public consumer website.
Data We Process
- Account data: username, email, role, tenant association, and account status.
- Operational metadata: timestamps, request identifiers, and records of actions performed in the UI (for auditing and troubleshooting).
- Content data: editorial content and configuration stored within tenant workspaces (e.g., domains, profiles, templates), as entered by authorized tenant users.
- Security events: authentication and authorization events, role changes, and administrative actions that support integrity and accountability.
- Theme preference: a local browser setting (theme-preference) stored in localStorage to keep the selected theme.
Why We Process It
- To authenticate users and enforce role-based access.
- To maintain strict tenant isolation and prevent cross-tenant access.
- To operate editorial workflows and store tenant configuration.
- To investigate incidents, prevent misuse, and provide an audit trail of administrative actions.
Cookies & Local Storage
When you sign in, the application uses a session cookie (e.g., JSESSIONID) to maintain an authenticated session. The theme selector uses localStorage to persist your preference on the current device/browser.
We do not require the theme setting for core functionality; removing localStorage will revert the theme to system default.
Access Controls
Access is restricted by role and tenant context. Administrative actions are designed to be auditable and to enforce boundaries between platform owners (Super Admin) and tenant users (Admin, Editor-in-Chief, Editor).
Retention
Retention of operational logs and audit records is determined by the deployment/operator policy and applicable legal requirements. If you need a specific retention or export policy for your tenant, contact support@minfra.ai.
Contact
Privacy and data handling questions: support@minfra.ai. Security issues: security@minfra.ai.