Privacy and data notice

This notice covers the Minion Fleet app and its waitlist. It explains what we collect, why, who processes it for us, and how long it stays.

Effective November 2, 2026

What we collect

When you use the app, we store:

  • your account: name, email address, profile picture, Google account number, and the sign-in tokens Google gives us;
  • your agreement: when you agreed to the Terms and this notice by continuing at sign-in, and which version you agreed to;
  • your fleet: minions, their settings and skills, and their memory, including facts you keep or forget;
  • your chats with Mochi, the files you add, and the files minions make for you;
  • your voice, only while you talk instead of typing: each clip goes to ElevenLabs to become text and is never stored by us, and the text is kept only once you send it as a message;
  • your tasks and Scheduled tasks: what you asked, results, receipts with costs, and when each step happened;
  • your goals, badges and streaks, and how far you’ve got through setup;
  • your approvals: what was requested, what you decided, when, and whether in the app or on Telegram;
  • what you let routines do on their own: which action, for which routine and account, its limits, when you paused or changed it, and each action it took on its own;
  • your connected apps: which apps you connected, the account name each one shows, and what you let minions do in each;
  • your Telegram bot’s key, encrypted with AES-256-GCM, and your Telegram chat and user numbers, if you connect a bot;
  • billing: your Stripe customer number and plan status;
  • feedback you send us: your message, and the page you were on, the app version, your browser and your screen size when you sent it, including what a result should have done if you add that after a thumbs down;
  • how the app is used: a short list of steps, each with your account and workspace numbers and the time: signing up, signing in from an invite, each setup step and finishing setup, your first job starting, each job finishing (with its minion’s template and a cost range, not the amount), a minion getting a job from Mochi, a routine turning on, a plan picked, seeing that you’re out of usage, pressing Send it again, and sending feedback (not its words). Never your email address, name, messages, files, results or anything you type, and no screen recordings;
  • security records: sign-ins, setting changes and request limits.

How we use it

We use your information to run your chats and tasks, show you receipts and costs, send the emails and notifications you’d expect, enforce your plan’s usage and your spending limit, keep the service secure, make setup better, and answer you when you contact us.

We don’t sell your information, we don’t share it for advertising, and we don’t use your chats, tasks or results to train any system.

How chats and tasks are processed

Mochi and your minions run on Anthropic’s Claude models, in Anthropic’s cloud. To answer a chat or do a task, Anthropic receives what you asked, the files you added, the facts kept in memory, what minions read while they work, and the results. It keeps a record of each work session. Under Anthropic’s Commercial Terms, Anthropic may not train its models on the content we send it.

When a minion searches the web, Brave receives the words of the search. Pages minions open are fetched by our own servers. When a minion makes a data look-up, such as reading a page or a video’s transcript for you, Treg receives what it asks for.

What minions read from web pages, your apps or data look-ups is treated as untrusted. It can’t change what minions are allowed to do.

Who processes it for us

These companies process information on our behalf, only to provide the service:

  • Anthropic: Runs Mochi and your minions on its Claude models, in its own cloud, and keeps a record of each work session. Your chats and tasks, the files you add, the facts kept in memory, your minions’ skills, what minions read while they work (web pages, searches, your apps and data look-ups), and their results.
  • Composio: Connects the apps you choose, such as Gmail or Instagram, and carries out what minions do in them. Your sign-in to each app you connect (Composio holds it, we don’t), what each app action asks for and what the app answers, and a random number that stands for your workspace instead of your name or email.
  • Treg: Runs the data look-ups minions make, such as search rankings, public social profiles or a company’s email pattern, through its own data providers. What each look-up asks for (for example a search term, a website, a public username, or a name and company to find a work email), and reference numbers for the workspace, minion, task, goal or chat it was for. We’ve turned off Treg’s archive of answers.
  • Brave: Runs the web searches minions make. The words of each search.
  • ElevenLabs: Turns your voice recordings into text, when you talk instead of typing in a chat. Each voice clip you record. We don’t keep it: it passes through our servers to ElevenLabs, and only the text comes back. We ask ElevenLabs to delete each transcript as soon as we have it, and it keeps anything else under its own terms.
  • Resend: Sends the app’s emails, such as your welcome email and sign-in links. Your email address and the email itself. Our emails never quote your chats or tasks.
  • Supabase: Stores the app’s database, files included, and runs sign-in by email link where we offer it. Everything listed in “What we collect”.
  • Railway: Hosts the app, runs its scheduled jobs, and fetches the web pages minions open. Account, fleet and task records while they are processed, and the network address of each visit. Pages minions open are fetched from our servers, so websites see our address, not yours.
  • Google: Signs you in. Your name, email address, profile picture and Google account number.
  • Stripe: Takes payments for your plan and keeps the billing record that gives you access. Your email address, your plan status and, if you pay, your payment details (held by Stripe, never by us) and invoices.
  • PostHog: Counts how people find and use the site and the app, so we can see what works. On the public pages: the pages you view, the buttons and links you click, the campaign labels in the link you came from, and your browser, device type and screen size. In the app: only the steps listed in “What we collect”, with your account and workspace numbers. Never your email address, name, messages, files or results, and no screen recordings. Your browser sends these through our own servers, so PostHog sees our network address, not yours.
  • Telegram: Delivers messages from your own bot, if you connect one. Your Telegram chat and user numbers, what you send your bot, and what it sends you: task titles, results, stuck and usage notices, schedules, streak reminders and approval requests. It also delivers our own team alerts: the first 200 characters of feedback you send, the page it came from and your workspace number, never your email.

Apps you connect

You connect apps, such as Gmail, Google Calendar or Instagram, through Composio. Composio keeps your sign-in to each app. We never see your password for it, and minions never hold your sign-in.

A connected app is open to all your minions unless you keep one out. By default they may read from it, and they ask you first before they create, send or change anything. On each app’s page you choose, action by action, what minions may do without asking, what asks first, and what’s off. Spending money, messaging other people, deleting, posting publicly, sharing outside your workspace, and any action we haven’t reviewed ask you first, unless you let one of your routines do one of them on its own.

When you let a routine do an action on its own, such as sending payment reminders, the minion doing it reads only the one record each action is about, such as one invoice, and none of your memory or files. Before anything is sent, we check who it reaches against your own data in that app, such as the customer on that invoice. Each action it takes on its own is recorded, with what it did and for which record. You can pause or remove it at any time.

What minions read from an app goes to Anthropic so they can work with it. The apps keep their own copies under their own policies. When you disconnect an app, we remove the connection at Composio too.

Data look-ups are built in, so there’s nothing to connect. They count toward your usage, shown in Settings, and you can turn any of them off on the Research data page.

Memory and files

Memory holds the facts kept about you and your work, so minions don’t have to ask again. We store it, and keep a read-only copy at Anthropic for your minions. You can forget any fact on the Memory page.

Files you add and files minions make are stored in our database. Files you add to a chat or task are also copied to Anthropic so minions can read them. You can delete a file on the Files page at any time. Deleting a file you added also deletes its copy at Anthropic.

Deleting a chat deletes its messages, its files, and its record at Anthropic.

When you set up your brain, Mochi reads only what you tick: the links you give him, your Files, and each connected app you say yes to, one at a time, within the limits shown beside each. Nothing private, such as your health or money, is read from a source: he asks you, and only if you say yes. What he reads goes to Anthropic so he can draft your brain’s files from it. Those files are kept in Files, in the Brain folder, where you can change or delete any of them, and Delete your brain deletes them all at once. What he read is deleted from our database and at Anthropic 7 days after the setup ends.

How long we keep it

We keep your account, fleet, chats and task history until you delete them.

When you forget a memory, its content is removed from our database straight away and from your minions’ memory at Anthropic within minutes, and backups no longer hold it within 35 days. Records of past work that mentioned it are kept as described below. A file you start to add but never send is removed after about a day.

A task’s record at Anthropic is archived a week after the task ends. Anthropic keeps archived records under its own retention terms.

Delete everything, in Settings, deletes your minions, chats, tasks, receipts, Scheduled tasks, memory, files and connections, and disconnects Telegram and your apps. At Anthropic, we delete your chats, the records of your minions’ past work, your memory, your skills, and the files you added or minions made. Anthropic can’t delete two things, so we archive them there: your minions’ setup (their names, roles and instructions) and your Scheduled tasks (what each one asks and when it runs). Archived, they never run again, and Anthropic keeps archived records under its own retention terms. Backups no longer hold your data within 35 days. Your sign-in and billing record stay, so you can start over; email us to remove them too.

We keep financial records, such as invoices and payments, for as long as tax law requires.

Security

Keys are encrypted at rest and are never shown back to you or logged. Your sign-ins to connected apps stay with Composio, and the key that reaches Composio stays on our servers: minions never receive it. All traffic uses HTTPS. Only the people who run Minion Fleet can reach the database, through private tools. They can see your chats, tasks and work records, there and in Anthropic’s console, and look at them only to run the service, fix a problem, or answer you.

Cookies in the app

When you’re signed in, one cookie keeps you signed in. Three more remember your choices: mf_rail whether you collapsed the sidebar, mf_theme light or dark, and mf_motion your motion setting. Signing in also sets cookies that protect it from forgery and remember which page to return you to. All of them are sent only to this site.

Counting how the site and app are used sets no cookies and stores nothing in your browser: it forgets you when you leave the page. If your browser sends Do Not Track or Global Privacy Control, it sends us no counts at all. The steps our servers record, such as signing up or a job finishing, are still counted with your account number.

Your choices and rights

You can see, delete, export or correct your information by emailing hello@minionfleet.com; deleting your data is also available in the app, with Delete everything. California residents have these rights under the CCPA, and we don’t sell or share personal information as that law defines it. We won’t treat you differently for using them.

Age

Minion Fleet is only for people 18 or older. We don’t knowingly collect information from anyone younger.

Changes to this notice

We’ll tell you by email or in the app before a material change takes effect, and we update this notice before we add a company to the list above.

Contact

Questions about this notice or your data: email hello@minionfleet.com.

What we save

When you join, we save your email address and signup time. If you answer the optional question about the first task you’d hand off, we save your answer too. Please don’t include personal details in your answer. We also save campaign labels from the page link, the landing page path, and the referring site’s origin when available. We don’t copy other query parameters or the full referring page address.

Why we save it

Your email is used to manage the waitlist and communicate about availability. Joining doesn’t create an account, start a subscription, or grant product access. Signing up with the same email again doesn’t add another entry. Survey answers help us decide which minions to build first.

Visitor measurement

While the waitlist form is available, a first-party cookie identifies a browser for 30 minutes so we can count visiting sessions and see how many join. It also lets you add your answer to the optional question after you join. The first campaign details in that session are retained. Your browser also keeps those first details in the tab’s session storage until you close the tab, so they still count if you join from another page or after the cookie expires. This is a limited measure of interest: blocked cookies, different devices, and automated traffic can affect the counts.

We also count page views, clicks and campaign labels on the public pages with PostHog, without cookies or anything stored in your browser, as described under “Who processes it for us”.

Storage and access

Information is stored in the site’s database. The site operator can export the waitlist and view overall conversion counts through private tools. Waitlist records aren’t publicly accessible.

How long records remain

The cookie expires after 30 minutes. Visit records are deleted after 90 days. Your signup, including any answer and the campaign details saved when you joined, stays until you ask us to delete it.

Abuse prevention

The server limits repeated requests and uses an invisible form field to reduce automated submissions. It may use a temporary one-way identifier for request limiting; raw network addresses aren’t stored with your waitlist record.

Questions and deletion

Email hello@minionfleet.com to ask about or delete your information.