Privacy Policy — Minsas
Last updated: 29 September 2026
This policy explains how UAB „Minsas“ uses personal data in the Minsas app, the browser version (app.minsas.app), the company portal (portal.minsas.app) and the website minsas.app.
1. Who we are
UAB „Minsas“ ("Minsas", "we"), company code 307196088, Bajorų Sodų 4-oji g. 48-1, LT-08426 Vilnius, Lithuania, is the controller of your personal data. Privacy questions and requests: legal@minsas.com.
2. What we use, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Your account and sign-in | E-mail address, name, phone number; the details that the sign-in provider you choose shares with us | Contract (art. 6(1)(b)) |
| Your vehicles, policies and documents, including suggestions read automatically from the documents and photos you upload, which you check before they are used | Vehicle and insurance data; documents and photos, such as policies, registration certificates, driving licences and identity documents | Contract |
| Accident reports: completing, signing, sending and keeping them, with messages, translations and notes you dictate | The content of the report, such as date and place, vehicles, insurance, the people involved, circumstances, sketch, photos and notes; the accident location, if you choose to add it | Contract; for other people's data, legitimate interests (section 3) |
| Showing who signed a report and that it has not changed | Signatures and signing records | Legitimate interests (art. 6(1)(f)) |
| The question whether anyone was injured | The yes/no answer, which can be health data | Establishing, exercising or defending legal claims (art. 9(2)(f)) |
| Notifications and reminders | Contact details and a device notification token | Contract |
| Subscriptions and payments | Subscription status; for companies, billing and invoice data | Contract; legal obligation to keep accounting records (art. 6(1)(c)) |
| Keeping the service secure and working, and supporting users | Technical logs and service records, including copies of sent reports | Legitimate interests (art. 6(1)(f)) |
| App analytics: how the app is used and performs | Usage and device data with an app identifier, not linked to your name or to report content | Legitimate interest in a stable, well-working app (art. 6(1)(f)); you can object (section 7) |
| Keeping reports for possible legal claims | Reports and signing records | Legitimate interests (art. 6(1)(f)); for the injury answer, art. 9(2)(f) |
| Running and securing the website | The technical data your browser sends, such as IP address, browser, page and time | Legitimate interests (art. 6(1)(f)) |
| Website analytics | Page views and the use of buttons and links, with cookies (see the Cookie Policy) | Consent (art. 6(1)(a)) |
| Answering your messages and arranging meetings | Name, e-mail address and message; the meeting details you enter | Legitimate interest in answering you, or steps you ask for before a contract (art. 6(1)(f) or (b)) |
- What you must provide: an e-mail address to create an account. Everything else is up to you, but a report cannot be completed without the data it asks for.
- Automated decisions: we make no decisions about you based solely on automated processing that have legal or similarly significant effects. You check automatic suggestions before they are used.
3. If you are another person in a report
This section is for you if you are the other driver, a passenger, a witness or the owner of a vehicle in an accident reported with Minsas.
- Data: your name, address and contact details, driving-licence, insurance and vehicle data, your account of the circumstances, photos that show your vehicle or you, and your signature.
- Source: the driver who reports the accident, or you, if you join the report.
- Purpose and legal basis: to record the accident in a jointly signed statement and let the participants send it to insurers — the legitimate interests of the participants and of Minsas (art. 6(1)(f)). If you join with your own account, the contract with you (art. 6(1)(b)).
- The signed statement is sent to the e-mail address given in the report. Joining a report gives you no access to any company workspace. Sections 5 to 7 apply to you.
4. Company workspace
If you use Minsas through a company, the company decides how the data in its workspace is used: its vehicles, policies and documents, the driver records it creates, and the reports and messages in its workspace. For that data the company is the controller and its privacy notice applies; we process the data on its behalf. The company does not see your personal area. We remain the controller of your personal account and personal area, of other participants' access to a company report they joined, and of the data we need to run the service.
5. Who receives data
- The other participants of the same report.
- Your company, for the data in its workspace.
- Insurers, brokers or others you choose to send a report to.
- The sign-in provider you choose, and the app store when you buy a subscription. They act as separate controllers.
- Service providers that process data for us under contract: hosting and database providers; AI service providers that read documents and photos, convert speech to text and translate; e-mail and notification providers; document, link and map services; payment and subscription providers; analytics providers; and website, form and booking services. Our AI service providers do not use your content to improve their own products.
- Authorities and courts, when the law requires it.
Transfers outside the EU. Our main database is in the EU. Some providers process data outside the EU/EEA, for example in the United States. We then rely on the European Commission's standard contractual clauses or on an adequacy decision, such as the EU–US Data Privacy Framework. You can ask for a copy of these safeguards at legal@minsas.com.
6. How long we keep data
| Data | How long |
|---|---|
| Account and your own data (vehicles, policies, documents, and reports that no other participant keeps) | Until you delete them or your account; then deleted within 1 month, except what the rows below keep for longer |
| Reports shared with other participants | At least 6 months after the report is signed; after that, as long as any participant keeps it; then deleted within 1 month |
| Signing records | 5 years after the accident |
| Company-workspace data | As long as the company decides; deleted within 1 month after the company deletes it or closes its workspace. A company report that involves other participants follows the rule for shared reports |
| Security logs | 12 months |
| Service records, including copies of sent reports | Up to 1 month |
| Analytics data (app and website) | Up to 14 months |
| Voice recordings | Not kept after conversion to text |
| Messages to us and meeting bookings | 24 months after the last contact, unless it leads to a customer relationship |
| Accounting records | As long as accounting law requires |
While automatic deletion is being introduced: some of the periods above are not yet applied automatically. Until they are, reports, signing records, account data, company-workspace data, logs and service records may be kept with no fixed end date. You can ask us at any time to delete your data earlier at legal@minsas.com, as far as other participants' rights and the law allow.
Deleted data leaves our backups within 3 months. Cookie lifetimes are in the Cookie Policy.
7. Your rights
- You can ask for access to your data and a copy, correction, erasure, restriction of processing, and a copy in a portable format.
- You can withdraw consent at any time: for website analytics through "Cookie Settings", for location access in the app or in your device settings. This does not affect the lawfulness of processing before the withdrawal.
- To use your rights, write to legal@minsas.com or delete your account in the app. We answer within one month.
- You can complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, 10312 Vilnius; ada@ada.lt; vdai.lrv.lt) or to the data protection authority in the EU country where you live or work.
Right to object. You can object at any time to processing based on legitimate interests, including app analytics. Write to legal@minsas.com.
8. Age and changes
Minsas is intended for people aged 16 or older. We may update this policy; we will tell you in the app or on the website before the changes take effect.