Terms for Companies – MINSAS
Provider: UAB „Minsas“ ("Minsas", "we"), company code 307196088, Bajorų Sodų 4-oji g. 48-1, LT-08426 Vilnius, Lithuania • Email: legal@minsas.com
1. Scope and acceptance
1.1. These Terms apply when a company or other organisation ("the Company") uses a company workspace in Minsas: the company portal at portal.minsas.app and the reports its drivers start in that workspace ("the Company Service").
1.2. An administrator accepts these Terms for the Company when the workspace is created, before the first plan purchase and before every plan change, and confirms that they may bind the Company. The Company Service is not for consumers.
1.3. Drivers' personal accounts are governed by the Minsas Terms of Use. The Data Processing Agreement in the Annex is part of these Terms. A signed custom agreement prevails over these Terms where they differ.
2. The service
2.1. Minsas does not represent the Company, is not a party to its insurance contracts or claims, and does not assess claims. The Company decides what is sent, to whom and when.
2.2. A driver's account belongs to the driver; the Company has access only to the data in its workspace.
2.3. We may change the service's features.
3. Free period
A new workspace may start with a free period, as offered when it is created. After it, the Company needs a plan.
4. Plans, prices and billing
4.1. Plans differ in how many accident reports a month they include. The plans and prices are shown before purchase. Prices are in euros, excluding VAT; VAT is added where it applies.
4.2. Plans are billed monthly in advance and renew each month until cancelled. A billing month starts on the purchase date; in the free period, and while no plan is active, it runs monthly from the day that period began.
4.3. A report in the workspace counts in the billing month in which the portal first shows it as signed. Drafts and reports not yet signed do not count.
4.4. The Company can move to a larger plan at any time; the new plan and a new billing month start that day, and the amount due is shown before payment. A smaller plan applies from the next billing month. The Company can cancel at any time; the plan then ends at the end of the billing month. Payments made are not refunded, unless the law requires it.
5. Changes
5.1. We may change a plan's price or included reports with at least 30 days' notice by e-mail. The change applies from the first billing date at least 30 days after the notice. The Company may cancel before it applies.
5.2. We may change these Terms with at least 30 days' notice by e-mail. Changes to the sub-processor list follow clause 4 of the Annex. The next plan purchase or change requires the new version. The Company may cancel before the new version applies.
6. Restricting access
We may restrict or suspend the Company's access to the Company Service, in whole or in part, until the reason is resolved, if the Company uses more than its plan includes, has no active plan after the free period, has not paid an amount due, misuses the service, creates a security risk or breaches these Terms.
7. The Company's responsibilities
The Company keeps its users' access secure, is responsible for what they do in the workspace, uses the service lawfully and only for its own business, and informs its drivers about its use of their data.
8. Liability
8.1. The Company Service is provided as it is and as available. We do not guarantee that it is free of errors or interruptions, or any outcome of a claim. The Company decides whether the Company Service suits its needs and uses it at its own risk.
8.2. As far as the law allows, we are not liable for any loss or damage connected with the Company Service, including indirect loss, lost profit, lost data, data entered by the Company's users, and decisions of insurers and other recipients.
9. Data, switching and ending
9.1. We process the workspace data for the Company under the Annex.
9.2. The Company can close its workspace or switch to another provider at any time. After its notice, we provide, within 30 days and free of charge, its workspace data and metadata (vehicles, drivers, policies, documents, reports with photos and signatures, messages and internal notes) in a structured, commonly used, machine-readable format, with reasonable help for the switch. Security logs and billing records, which Minsas keeps as controller (Annex, clause 8), are not included. Until the switch is complete, the Company Service continues under these Terms and stays secure, and we tell the Company of any known risk to its continuity.
9.3. The Company can retrieve its data for 30 days after that. Then the workspace closes and the data is deleted as the Annex describes.
9.4. These Terms end when the workspace closes; sections 8 to 10 and the Annex continue as long as needed.
10. Law and disputes
These Terms are governed by the laws of the Republic of Lithuania. Disputes go to the courts of Vilnius, Lithuania. If the English and Lithuanian versions differ, the English text prevails.
Annex — Data Processing Agreement
This agreement forms part of the Terms for Companies and applies from the date the Company accepts them, including the free period. The Company is the controller; Minsas is the processor.
1. Subject, duration and purpose.
- Minsas processes personal data in the Company's workspace in the Minsas portal and app, for as long as the Company uses the Company Service and until deletion under clause 7.
- Purpose: to provide the company workspace. That covers:
- storing and showing company vehicles, policies, documents and driver records;
- creating, signing and exporting accident reports;
- sending reports as the Company instructs, with an internal copy of each sent report kept to monitor the service and deleted within 30 days;
- messages and internal notes;
- AI-assisted reading of documents and photos;
- transcription and translation where the Company's users use these features;
- receiving data from the Company's own systems where the Company connects them;
- anonymised statistics on how the service is used.
2. Data and data subjects.
- Data:
- driver records (name, sign-in name, contact details, driving-licence data);
- vehicle and insurance data;
- accident reports: data about the other parties, whether anyone was injured (yes/no), photos and videos, transcripts of voice notes (recordings are not stored), the accident location, signatures and signature evidence;
- messages and internal notes;
- the Company's users' account data.
- Data subjects: the Company's drivers and users; other drivers, passengers and witnesses named in the Company's reports.
3. Minsas's obligations (GDPR art. 28(3)). Minsas:
- (a) processes the data only on the Company's documented instructions — these Terms and the Company's use of the workspace settings — and tells the Company if it believes an instruction infringes data protection law;
- (b) ensures that the people it authorises to process the data are bound to confidentiality;
- (c) takes appropriate security measures (art. 32), including access control, encryption in transit, backups, and locking of each signed statement's fingerprint;
- (d) uses sub-processors only under clause 4;
- (e) helps the Company answer data subjects' requests;
- (f) helps the Company meet its obligations under arts 32–36 (security, breach notification, impact assessments, prior consultation), taking into account the nature of the processing and the information available to Minsas;
- (g) deletes or returns the data under clause 7;
- (h) provides the information needed to show compliance and allows audits (on reasonable notice, normally once a year, at the Company's cost; documents first).
4. Sub-processors.
- The Company authorises the sub-processors listed below.
- Minsas informs the Company in advance of new or replaced sub-processors. The Company may object on reasonable data-protection grounds; if no solution is found, it may stop using the Company Service.
- Minsas imposes the same data-protection obligations on each sub-processor and remains responsible for them.
5. Breaches. Minsas notifies the Company without undue delay after becoming aware of a personal-data breach affecting the Company's data, with the information the Company needs for its own notifications.
6. Transfers. Minsas transfers the data outside the EEA only on a basis that GDPR Chapter V allows, such as an adequacy decision (including the EU–US Data Privacy Framework) or the Commission's standard contractual clauses.
7. End of processing.
- Within 30 days after the workspace closes (section 9.3 of the Terms), Minsas deletes the Company's data. Backups are cleared within 3 months, unless the law requires Minsas to keep the data.
- Exception: a report that involves other participants (for example the other driver) stays available to them. It follows the rule for shared reports in Minsas's privacy policy: it is kept at least 6 months after it is signed, and after that as long as any participant keeps it.
8. What this agreement does not cover.
- Minsas is the controller, under its own privacy policy, for:
- drivers' personal accounts and personal areas;
- reports that drivers create outside the company workspace;
- other participants' access to a report they joined (clause 7);
- security logs;
- billing.
- Linking a driver to the Company does not give the Company access to the driver's personal data outside the workspace.
9. Liability and law.
- Liability follows the Terms for Companies.
- This agreement is governed by Lithuanian law.
- For data protection, it prevails over the rest of the Terms.
Sub-processors:
| Sub-processor | What for | Where |
|---|---|---|
| Supabase | Database, storage, sign-in, server functions | EU (Frankfurt, Germany) |
| Google (Gemini) | AI reading of documents and photos; translations | Worldwide — basis under clause 6 |
| OpenAI | Speech-to-text for voice notes | USA — basis under clause 6 |
| Google (Maps) | Address and map image from the accident location | Outside the EU possible — basis under clause 6 |
| Google (Firebase Cloud Messaging) | Push notifications (device token only) | Outside the EU possible — basis under clause 6 |
| Resend | E-mails, including sending reports | EU (Ireland), sending region |
| Google (Workspace) | Internal copies of sent reports, deleted within 30 days | Outside the EU possible — basis under clause 6 |
| PDFShift | PDF creation | Outside the EU possible — basis under clause 6 |
| Branch | Invitation links | Outside the EU possible — basis under clause 6 |
| Vercel | Portal hosting | Outside the EU possible — basis under clause 6 |
Version v1.0 · Last updated: 18 October 2026