https://mnki.ai/assets/PrivacyPolicyPage-V96rJUkV.js

1import{j as e}from"./react-vendor-BW0W7nrM.js";import{at as s,au as t}from"./index-BYV1u4qx.js";import{_ as a,c as n}from"./ui-libs-Dmw_7-1f.js";import"./firebase-data-CGCl_keZ.js";import"./firebase-core-Btor9Q66.js";const r="text-[#26C5F3] hover:text-[#26C5F3]/80 underline underline-offset-2",i="text-zinc-200",o=e.jsx("a",{href:"mailto:[email protected]",className:r,children:"[email protected]"});function c({onBack:c}){return s(),t({title:"Privacy Policy — MNKI",description:"Read the MNKI privacy policy. Learn how we collect, use, and protect your data.",canonical:"https://mnki.ai/privacy"}),e.jsxs("div",{className:"min-h-screen bg-zinc-950 text-white",children:[e.jsx("div",{className:"border-b border-zinc-800 bg-zinc-900/50 sticky top-0 z-10 backdrop-blur-sm",children:e.jsxs("div",{className:"max-w-4xl mx-auto px-6 py-4 flex items-center gap-4",children:[e.jsxs("button",{onClick:()=>{c?c():window.location.href="/"},className:"flex items-center gap-2 text-zinc-400 hover:text-white transition-colors group min-h-[48px] min-w-[48px] px-3",children:[e.jsx(a,{className:"w-4 h-4 group-hover:-translate-x-1 transition-transform"}),e.jsx("span",{className:"text-xs font-bold uppercase tracking-widest",children:"Back"})]}),e.jsxs("div",{className:"flex items-center gap-2 ms-2",children:[e.jsx(n,{className:"w-5 h-5 text-[#26C5F3]"}),e.jsx("h1",{className:"text-sm font-bold uppercase tracking-widest text-zinc-300",children:"Privacy Policy"})]})]})}),e.jsxs("div",{className:"max-w-4xl mx-auto px-6 py-12 space-y-10",children:[e.jsxs("div",{children:[e.jsx("h1",{className:"text-4xl font-black mb-3",children:"Privacy Policy"}),e.jsxs("p",{className:"text-zinc-400 text-sm",children:["Last updated: ",e.jsx("strong",{className:"text-zinc-300",children:"September 29, 2026"})]}),e.jsx("p",{className:"text-zinc-500 text-xs mt-2",children:"This version takes effect on the date shown above, for new and existing users."})]}),e.jsxs(l,{title:"1. Who We Are and What This Policy Covers",children:[e.jsxs("p",{children:["MNKI (mnki.ai) is an AI-powered architectural visualisation and design platform operated by"," ",e.jsx("strong",{className:i,children:"Amkna Group For Engineering Services"}),', a company established in the Arab Republic of Egypt, with its registered office at Office M05, Golden Gate Tower, Autostrad Rd, Maadi, Cairo, Egypt ("',e.jsx("strong",{className:i,children:"MNKI"}),'", "',e.jsx("strong",{className:i,children:"we"}),'", "',e.jsx("strong",{className:i,children:"our"}),'", or "',e.jsx("strong",{className:i,children:"us"}),'"). MNKI is the controller of the personal data described in this Privacy Policy ("',e.jsx("strong",{className:i,children:"Policy"}),'").']}),e.jsxs("p",{className:"mt-3",children:["This Policy explains how we collect, use, share, store, and protect personal data when you use"," ",e.jsx("a",{href:"https://mnki.ai",className:r,children:"mnki.ai"}),', the MNKI web application and its workspaces, the MNKI Public API, the MNKI MCP connector, and our community channels (together, the "',e.jsx("strong",{className:i,children:"Service"}),'").']}),e.jsx("p",{className:"mt-3",children:"The Service is operated from Egypt and is intended mainly for users in Egypt and the MENA region. This Policy applies to all users. Sections 10 to 12 set out additional rights under specific laws. Those sections are provided as a courtesy to users who may access the Service from the places concerned, and they do not, in themselves, mean that those laws apply to MNKI."}),e.jsxs("p",{className:"mt-3",children:["Please read this Policy together with our ",e.jsx("a",{href:"/terms",className:r,children:"Terms & Conditions"}),". Where we rely on your consent for a specific kind of processing, we ask for it separately. Reading this Policy is not the same as giving consent."]})]}),e.jsx(l,{title:"2. Definitions",children:e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Personal Data"}),": any information relating to an identified or identifiable individual."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Processing"}),": any operation performed on Personal Data, such as collecting, storing, using, disclosing, or deleting it."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Controller"}),": the organisation that decides why and how Personal Data is processed. For this Policy, that is MNKI."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Processor"}),": an organisation that processes Personal Data on the controller's behalf, such as our cloud and AI providers."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"GDPR / UK GDPR"}),": EU Regulation 2016/679 and its UK equivalent."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"CCPA/CPRA"}),": the California Consumer Privacy Act, as amended by the California Privacy Rights Act."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Egyptian PDPL"}),": Egypt's Personal Data Protection Law No. 151 of 2020 and its Executive Regulations."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"SCCs"}),": the Standard Contractual Clauses adopted by the European Commission for international transfers of personal data."]})]})}),e.jsxs(l,{title:"3. Personal Data We Collect",children:[e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Account data"}),": your name, email address, and profile picture or avatar, provided when you register or through Google sign-in. We also keep a normalised form of your email address (for example, lower-cased), which we use to detect repeated sign-ups (see Section 9)."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Plan and eligibility data"}),": your plan, your credit balances and usage, your organisation membership and role, and, where it applies, your student status and the university email domain used to verify it."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Payment data"}),": order references, amounts, currency, subscription status, and invoices. To process payments, your name, email address, phone number (if you have given one), and country are sent to Noon Payments. You enter your card details directly on Noon's secure payment page. MNKI never receives or stores your full card number. For subscriptions, Noon keeps a card token so that renewals can be charged, and we store only the masked card number (for example, the last four digits) and the token reference."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Your content"}),': the images, sketches, drawings, DXF and model files, prompts, instructions, reference clips, and audio you submit, and the Outputs generated from them. This includes AChAt conversations and the per-conversation "design memory" AChAt uses to keep context, MNKI Video projects and generation jobs, MNKIpresent decks, and CAD jobs.']}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Collaboration data"}),": if you use MNKISpace, we collect workspace membership, invitations (including the email addresses of people you invite), tasks, comments, and activity. If you share to the MNKI Wall, we collect the image, your caption, the time of posting, and whether you posted under your first name or anonymously. Wall posts are public."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Usage and activity data"}),': the features and modules you use, your generation history and metadata, timestamps, when your account was created, and a "last active" time that is updated periodically while you use the Service.']}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Technical data"}),": IP address, browser and operating system, device identifiers, your device's time zone (which we use to work out your country for pricing and currency), referring URLs, and session tokens."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Connector and API data"}

1),": if you connect an external client (our MCP connector for Claude and compatible clients, or the Public API), we collect the authorisation data that secures the connection. OAuth codes are single-use and short-lived. Refresh tokens and API keys are stored only as hashes. We also process the prompts, images, and 3D Sandbox scenes you send through that client, and the results we return."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Communications"}),": in-app inbox messages, emails with our support team, and messages you send to our Discord community bot."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Referral and Partner Program data"}),": if you use a referral link or code, or refer others, we record who referred whom, the code used, when the referral was made, when a qualifying purchase happened, and the rewards or commissions that resulted. To detect self-referrals and abuse, we keep salted, one-way hashes (not the IP addresses themselves) of the IP address a referred account signs up from and of the last few IP addresses a referrer used to open Refer & Earn, and we compare the email domain and organisation of the two accounts. If you apply to the Partner Program, we also collect your application (website, audience, channels, and message), your country of residence, your confirmation that you are 21 or over, any advertising licence number (for example, a UAE Advertiser Permit or a Saudi Mawthooq licence), and a record of your acceptance of the Partner Program Agreement. Partners are currently paid in MNKI credits, so we do not collect bank or payment-account details for the Partner Program."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Records of your choices"}),": the version of the Terms you accepted and when you accepted it. Your cookie/analytics and referral-attribution consent choices are stored in your browser."]})]}),e.jsx("p",{className:"mt-4",children:"We collect this data directly from you, automatically as you use the Service, and from authentication providers (Google) and organisations that invite you. We do not intentionally collect special-category or sensitive Personal Data, such as health, biometric, or religious data. Please do not include it in your uploads or prompts."})]}),e.jsxs(l,{title:"4. Why We Process Your Data, and Our Legal Bases",children:[e.jsx("div",{className:"mt-4 overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm text-zinc-400 border-collapse",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-zinc-700",children:[e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold w-1/2",children:"Purpose"}),e.jsx("th",{className:"text-start py-2 text-zinc-300 font-semibold",children:"Legal basis"})]})}),e.jsxs("tbody",{className:"divide-y divide-zinc-800",children:[e.jsx(d,{a:"Creating and running your account; providing renders, chat, video, CAD, workspaces, and other features",b:"Performance of our contract with you (GDPR Art. 6(1)(b); Egyptian PDPL Art. 6(2))"}),e.jsx(d,{a:"Payments, invoicing, subscription renewals, and student pricing",b:"Contract; legal obligation for tax and accounting records (GDPR Art. 6(1)(c))"}),e.jsx(d,{a:"Service messages (receipts, credit alerts, renewal reminders, retention warnings)",b:"Contract"}),e.jsx(d,{a:"Security, fraud and abuse prevention, content-safety screening, and enforcing our Terms (including detecting repeated sign-ups)",b:"Legitimate interests in protecting MNKI and its users (GDPR Art. 6(1)(f); Egyptian PDPL Art. 6(4))"}),e.jsx(d,{a:"Google Analytics measurement and Google Ads conversion tracking using cookies",b:"Consent, given through the cookie banner (GDPR Art. 6(1)(a); Egyptian PDPL Art. 6(1))"}),e.jsx(d,{a:"Remembering a referral link on your device for up to 60 days",b:"Consent, given through the cookie banner (GDPR Art. 6(1)(a) and ePrivacy rules; Egyptian PDPL Art. 6(1)). A code you type in yourself at sign-up does not use device storage"}),e.jsx(d,{a:"Running the referral and Partner Programs: attributing referrals, calculating and granting rewards and commissions, reviewing partner applications, and showing partners their results",b:"Performance of our contract with you under Section 25 of the Terms or the Partner Program Agreement (GDPR Art. 6(1)(b); Egyptian PDPL Art. 6(2); UAE PDPL Art. 4)"}),e.jsx(d,{a:"Checking referrals for self-referral and abuse (hashed IP address, email domain, organisation), with human review of any flag",b:"Legitimate interests in preventing fraud (GDPR Art. 6(1)(f) and Recital 47; Egyptian PDPL Art. 6(4); Saudi PDPL Art. 6(4)). For users in the UAE, these checks are part of the program contract (UAE PDPL Art. 4)"}),e.jsx(d,{a:"Training AI models on your content",b:"We do not do this unless you give separate, explicit, opt-in consent"}),e.jsx(d,{a:"Complying with the law and responding to lawful requests",b:"Legal obligation"}),e.jsx(d,{a:"Establishing, exercising, or defending legal claims",b:"Legitimate interests"})]})]})}),e.jsx("p",{className:"mt-4",children:"Where we rely on legitimate interests, we have weighed our interests against your rights. You can object at any time (see Sections 10 to 12). Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it."}),e.jsxs("p",{className:"mt-3",children:[e.jsx("strong",{className:i,children:"We do not sell your Personal Data."})," We do not use it for profiling or personalised advertising. We do not use your uploads or Outputs to train AI models without your opt-in consent."]}),e.jsxs("p",{className:"mt-3",children:[e.jsx("strong",{className:i,children:"Automated processing:"})," AI models generate your Outputs, and automated safety systems may block requests that appear to breach our Acceptable Use Policy or a provider's policies. These systems do not make decisions about you that have legal or similarly significant effects. If you think a request was blocked in error, contact ",o," and a person will review it. In the referral and Partner Programs, automated checks can only place a reward or commission on hold. A member of our team with authority to change the outcome reviews every hold, and you can ask for a review at ",o,"."]})]}),e.jsxs(l,{title:"5. Cookies, Local Storage, and Analytics",children:[e.jsx("p",{children:"We use your browser's local storage and IndexedDB for things the Service needs to work, such as keeping you signed in, remembering your preferences, and saving 3D Sandbox and MNKI Video editor projects on your device. With your consent, Google Analytics and Google Ads also set cookies, and we remember a referral code you arrived with."}),e.jsx("div",{className:"mt-4 overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm text-zinc-400 border-collapse",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-zinc-700",children:[e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold",children:"Item"}),e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold",children:"Purpose"}),e.jsx("th",{className:"text-start py-2 text-zinc-300 font-semibold",children:"Category"})]})}),e.jsxs("tbody",{className:"divide-y divide-zinc-800",children:[e.jsx(h,{a:e.jsx("code",{className:"text-[#26C5F3] text-xs bg-zinc-800 px-1 py-0.5 rounded",children:"mnki_consent"}),b:"Stores your cookie/analytics choice",c:"Strictly necessary"}),e.jsx(h,{a:"Firebase Authentication storage",b:"Keeps you signed in",c:"Strictly necessary"}),e.jsx(h,{a:"Editor storage (IndexedDB)",b:"Saves 3D Sandbox scenes, your uploaded 3D models, and MNKI Video editor media on your device",c:"Strictly necessary (for features you use)"}),e.jsx(h,{a:"UI preferences",b:"Theme, language, view, and layout",c:"Functional"}),e.jsx(h,{a:e.jsx("code",{className:"text-[#26C5F3] text-xs bg-zinc-800 px-1 py-0.5 rounded",children:"mnki:ref"}),b:"Remembers the referral or partner code you arrived with, for up to 60 days, so the person who invited you can be credited",c:"Referral attribution (consent required)"}),e.jsx(h,{a:"Google Analytics (G-H3NBKPQZDQ) and Google Ads (AW-18227254929) cookies",b:"Traffic measurement and advertising conversion tracking",c:"Analytics and marketing (consent required)"})]})]})}),e.jsxs("p",{className:"mt-4",children:[e.jsx("strong",{className:i,children:"Google Consent Mode."}),' The Google tag loads on our pages with analytics and advertising storage set to "denied" until you accept. While consent is denied, Google does not set or read analytics or advertising cookies. It may still receive limited, cookieless signals (such as the fact that a page was loaded, together with your IP address and browser information), which Google uses in aggregated form to model measurement. If you accept, cookies are enabled.']}),e.jsxs("p",{className:"mt-3",children:['You can change your choice at any time under Account → Privacy & Data → "Reset cookie preferences", or by clearing your browser storage, which makes the banner appear again. You can also use the'," ",e.jsx("a",{href:"https://tools.google.com/dlpage/gaoptout",target:"_blank",rel:"noopener noreferrer",className:r,children:"Google Analytics opt-out add-on"})," ","and your"," ",e.jsx("a",{href:"https://myadcenter.google.com/",target:"_blank",rel:"noopener noreferrer",className:r,children:"Google Ad Settings"}),". For more on how Google uses this data, see"," ",e.jsx("a",{href:"https://policies.google.com/technologies/partner-sites",target:"_blank",rel:"noopener noreferrer",className:r,children:"How Google uses information from sites that use its services"}),"."]}),e.jsx("p",{className:"mt-3",children:"Our pages also load fonts from Google Fonts and a small badge image from a third-party site. Loading these sends your IP address and browser information to those providers."})]}),e.jsxs(l,{title:"6. Who We Share Data With",children:[e.jsxs("p",{children:[e.jsx("strong",{className:i,children:"6.1 Service providers (processors)."})," We share Personal Data only with the providers below, and only as far as needed for the stated purpose. They act on our instructions under data-processing terms that require confidentiality and security."]}),e.jsx("div",{className:"mt-4 overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm text-zinc-400 border-collapse",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-zinc-700",children:[e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold w-1/4",children:"Provider"}),e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold w-1/4",children:"Purpose"}),e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold w-1/4",children:"Data"}),e.jsx("th",{className:"text-start py-2 text-zinc-300 font-semibold",children:"Location"})]})}),e.jsxs("tbody",{className:"divide-y divide-zinc-800",children:[e.jsx(u,{a:"Google Cloud / Firebase",b:"Authentication, database, file storage, server functions, MCP server hosting",c:"All account data and content",d:"United States"}),e.jsx(u,{a:"Google (Gemini API)",b:"Image generation (MNG), AChAt understanding and text answers, video (Gemini Omni), music (Lyria), and still images",c:"Prompts, uploaded images, reference media, conversation context",d:"United States / global"}),e.jsx(u,{a:"Black Forest Labs",b:"Image generation (MNF / Flux engine)",c:"Prompts and uploaded images",d:"EU / United States"}),e.jsx(u,{a:"OpenAI",b:"Image generation for certain Pro render modes (GPT Image), where enabled",c:"Prompts and uploaded images",d:"United States"}),e.jsx(u,{a:"BytePlus (ModelArk)",b:"Video generation (Seedance engine)",c:"Prompts and reference images, video, or audio",d:"Singapore"}),e.jsx(u,{a:"Anthropic",b:"Processing for the MNKICADdesign tool",c:"The DXF boundary file and design brief you submit",d:"United States"}),e.jsx(u,{a:"Noon Payments, with Banque Misr as the acquiring bank",b:"Payment processing and card tokenisation",c:"Name, email, phone (if given), country, order amount, and reference; card data entered by you",d:"UAE / Egypt"}),e.jsx(u,{a:"SendGrid (Twilio)",b:"Transactional email (verification, receipts, reminders, invitations)",c:"Email address, name, and message content",d:"United States"}),e.jsx(u,{a:"Netlify",b:"Web hosting, CDN, and edge and server functions (including the Flux and Seedance proxies)",c:"IP address, request metadata, and content passing through the proxies",d:"United States / global"}),e.jsx(u,{a:"Google Analytics / Google Ads",b:"Measurement and conversion tracking (cookie

1s only with consent)",c:"IP address, device and interaction data",d:"United States / global"}),e.jsx(u,{a:"Discord",b:"MNKI community server and bot, if you use them",c:"Your Discord messages to the bot (answered using Gemini)",d:"United States"}),e.jsx(u,{a:"Pascal project content servers (Supabase CDN)",b:"Delivering the 3D Sandbox furniture catalogue",c:"IP address and request metadata",d:"Global"})]})]})}),e.jsx("p",{className:"mt-4",children:"Under their commercial API terms, our AI providers do not use your content to train their models. They may keep inputs and outputs for a limited period (typically up to about 30 to 55 days, depending on the provider) to detect abuse and meet legal obligations."}),e.jsx("p",{className:"mt-4",children:e.jsx("strong",{className:i,children:"6.2 People you choose to share with."})}),e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-2 text-zinc-400",children:[e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"MNKI Wall"}),": anything you post is public and can be indexed by search engines."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"MNKISpace"}),": workspace members can see the projects and renders you link, your tasks, comments, and activity, and your name and email address."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Organisations"}),": if you are a member of an organisation or university account, its administrators can see your name, email address, credit quota, and credit usage broken down by feature, engine, and resolution. Other members cannot see your membership record. Administrators cannot see your prompts, images, or projects unless you share them."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Referral and Partner Programs"}),": the person or partner who referred you sees only aggregated numbers (clicks, sign-ups, and paying customers) and masked entries such as plan, country, and date. They never see your name, email address, content, or activity."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Connected clients"}),": if you connect MNKI to Claude or another MCP client, the content you send and the results we return pass through that client. The client's operator (for Claude, Anthropic) handles them under its own terms and privacy policy, as an independent party that MNKI does not control. We share data with a connected client only within the permissions (scopes) you approve and only while the connection is active."]})]}),e.jsxs("p",{className:"mt-4",children:[e.jsx("strong",{className:i,children:"6.3 Other disclosures."})," We may also disclose Personal Data: (a) where required by law, regulation, court order, or a lawful request from an authority; (b) to enforce our Terms or to establish, exercise, or defend legal claims; (c) to report child sexual abuse material or imminent threats to life; and (d) to a successor in a merger, acquisition, or sale of our business. In case (d), we will notify you, and the successor must honour this Policy."]})]}),e.jsxs(l,{title:"7. International Data Transfers",children:[e.jsx("p",{children:"MNKI is based in Egypt, but our main infrastructure is in the United States (Google Cloud; our database is in a US multi-region), and some providers operate elsewhere, as shown in Section 6. Your Personal Data will therefore be transferred outside your country, including to countries whose data protection laws may differ from yours. You give your explicit consent to these transfers when you accept our Terms (Section 1.7), which applies to all users worldwide. In addition, we rely on the safeguards below where the law of your country provides them."}),e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsx("li",{children:"For data of users in Egypt, we make transfers in line with Articles 14 to 16 of the Egyptian PDPL and Article 16 of its Executive Regulations. We are applying to the Personal Data Protection Center for the licences and permits these provisions require, within the compliance period set by the law. Your consent to these transfers is given when you accept the Terms (Section 1.7)."}),e.jsx("li",{children:"For data originating in the EEA or the UK, we do not rely on consent alone. We rely on adequacy decisions (including the EU-US Data Privacy Framework, where a provider is certified) or on the SCCs and the UK Addendum included in our providers' data-processing terms."}),e.jsx("li",{children:"For data of users in the UAE and Saudi Arabia, we rely on the contractual safeguards required by the UAE and Saudi data protection laws."})]}),e.jsxs("p",{className:"mt-4",children:["You can ask for more information about these safeguards at ",o,"."]})]}),e.jsxs(l,{title:"8. How Long We Keep Data",children:[e.jsx("div",{className:"mt-4 overflow-x-auto",children:e.jsxs("table",{className:"w-full text-sm text-zinc-400 border-collapse",children:[e.jsx("thead",{children:e.jsxs("tr",{className:"border-b border-zinc-700",children:[e.jsx("th",{className:"text-start py-2 pe-4 text-zinc-300 font-semibold",children:"Data"}),e.jsx("th",{className:"text-start py-2 text-zinc-300 font-semibold",children:"Retention"})]})}),e.jsxs("tbody",{className:"divide-y divide-zinc-800",children:[e.jsx(d,{a:"Account, profile, usage, and generation history",b:"For the life of your account. Removed from active systems within 30 days after you delete your account."}),e.jsx(d,{a:"Projects, chat sessions, presentations, video jobs, and API/MCP 3D Sandbox scenes (including the images inside them)",b:"Depends on your plan, counted from when each item was created: Free, 90 days; Basic, 365 days;

1 Pro, VIP, and Enterprise, indefinitely while the plan is active. Also deleted when you delete the item or your account."}),e.jsx(d,{a:"Source images uploaded outside a project (for example, style references and temporary rendering files)",b:"Deleted within 30 days of upload."}),e.jsx(d,{a:"MNKI Video generated clips",b:"Plan-based retention of the video job (row above), or until you delete them or your account."}),e.jsx(d,{a:"MNKI Video reference media you upload (reference images, clips, and audio)",b:"Until you delete your account."}),e.jsx(d,{a:"MNKI Wall posts",b:"Until you delete the post or your account, or until moderators remove it. On deletion, the image is erased and the post is removed from public view."}),e.jsx(d,{a:"MNKISpace content (tasks, comments, activity)",b:"Until it is deleted by you or the workspace owner, or the workspace is deleted. Workspaces you own are deleted with your account."}),e.jsx(d,{a:"Payment records and invoices",b:"7 years from the transaction, to meet tax and accounting laws."}),e.jsx(d,{a:"Anti-abuse record after account deletion (normalised email address, account dates, number of deletions, and remaining credit balance)",b:"2 years after deletion. We use it to prevent trial-credit farming and to restore your balance if you sign up again."}),e.jsx(d,{a:"Referral code remembered on your device",b:"Up to 60 days, or until you withdraw consent or clear your browser storage."}),e.jsx(d,{a:"Referral records (who referred whom, code, dates), hashed IP address used for fraud checks, and partner applications",b:"For the life of the referred or referring account. Removed from active systems within 30 days after that account is deleted."}),e.jsx(d,{a:"Records of rewards, commissions, and credit payouts",b:"7 years, like payment records, because they relate to payments and may be needed for tax and accounting purposes."}),e.jsx(d,{a:"Security and server logs",b:"Up to 90 days."}),e.jsx(d,{a:"Connector and API credentials",b:"OAuth codes: minutes (single-use). Refresh tokens: up to 30 days, or until they rotate or you disconnect. Access tokens: about 1 hour, and not stored. API keys: until you revoke them. All are stored only as hashes."}),e.jsx(d,{a:"Support communications",b:"3 years from last contact."}),e.jsx(d,{a:"Records of Terms acceptance",b:"For the life of your account, and afterwards for as long as needed to establish or defend legal claims."})]})]})}),e.jsxs("p",{className:"mt-4",children:[e.jsx("strong",{className:i,children:"Plan-based deletion."})," When a project, chat session, presentation, or video job reaches the end of its retention period, the entire item is permanently deleted, including all renders, iterations, and images inside it, regardless of when those were created. Before any deletion, we send warnings by in-app inbox message seven days and again 24 hours in advance, and by email too unless you turn deletion reminder emails off under Account → Notifications. If your paid plan is downgraded or ends, a seven-day grace period applies first. Deleted content cannot be recovered."]}),e.jsxs("p",{className:"mt-3",children:[e.jsx("strong",{className:i,children:"Account deletion."})," You can delete your account under Account → Security. Within 30 days, we delete from our active systems your profile, projects, renders, chats, presentations, video and CAD jobs, API scenes, Wall posts, uploaded and generated files, inbox, organisation memberships, and connector credentials. We then keep only the records listed above for payments, anti-abuse, support, and legal claims. Deleted data may remain in encrypted backups for up to 90 days, after which it is overwritten. We may keep anonymised statistics that cannot identify you."]})]}),e.jsxs(l,{title:"9. Your Self-Service Tools",children:[e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Correct"}),": update your name and avatar under Account → Profile."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Export"}),": download a JSON-formatted copy of your account data (your profile, plan and credits, inbox, generation metadata, and payment history) under Account → Privacy & Data. Your images and Outputs can be downloaded from the workspaces where they are stored. For anything else, contact us."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Delete"}),": delete individual items, Wall posts, or your whole account (Account → Security)."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Cookies"}),": change your analytics choice under Account → Privacy & Data."]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"Connectors"}),": revoke API keys or disconnect the MCP connector at any time."]})]}),e.jsx("p",{className:"mt-4",children:"The re-signup check (a normalised copy of your email address) runs for all accounts. We use it only to prevent people from repeatedly creating accounts to obtain free credits."})]}),e.jsxs(l,{title:"10. Your Rights: EU and UK Users (GDPR / UK GDPR)",children:[e.jsx("p",{children:"If you are in the EEA or the UK, you have the right to:"}),e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"access"})," your Personal Data (Art. 15);"]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"rectify"})," it if it is inaccurate (Art. 16);"]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"erase"}),' it, the "right to be forgotten" (Art. 17), subject to the retention in Section 8;']}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"restrict"})," processing (Art. 18);"]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"data portability"}),", meaning a copy in a machine-readable format (Art. 20);"]}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"object"})," to processing based on legitimate interests (Art. 21);"]}),e.jsx("li",{children:"not be subject to solely automated decisions with legal or similarly significant effects (Art. 22), which we do not make; and"}),e.jsxs("li",{children:[e.jsx("strong",{className:i,children:"withdraw consent"})," at any time."]})]}),e.jsxs("p",{className:"mt-4",children:["To exercise these rights, use the tools in Section 9 or email ",o,". We will respond within one month. For complex requests, we may extend this by up to two further months, and we will tell you if we do. We may need to verify your identity first. Requests are free of charge unless they are manifestly unfounded or excessive."]}),e.jsxs("p",{className:"mt-3",children:["You may complain to the supervisory authority where you live or work. In the UK, that is the Information Commissioner's Office (",e.jsx("a",{href:"https://ico.org.uk",className:r,target:"_blank",rel:"noopener noreferrer",children:"ico.org.uk"}),"). We encourage you to contact us first so that we can try to resolve your concern."]})]}),e.jsxs(l,{title:"11. Your Rights: California Users (CCPA / CPRA)",children:[e.jsx("p",{children:"If you are a California resident and the CCPA applies to us, you have the right to know what Personal Data we collect, use, and disclose (the categories are in Sections 3 and 6), and the right to delete it and to correct it. You also have the right not to be discriminated against for exercising these rights."}),e.jsxs("p",{className:"mt-3",children:[e.jsx("strong",{className:i,children:"We do not sell Personal Data."}),' Google Ads conversion tracking may count as "sharing" for cross-context behavioural advertising under the CCPA. It runs only if you accept cookies in our banner. You can opt out at any time by resetting your cookie preferences and choosing "Essential only". We do not collect sensitive personal information as defined by the CPRA.']}),e.jsxs("p",{className:"mt-3",children:["To make a request, email ",o,' with the subject "CCPA Request". We will confirm receipt within 10 business days and respond within 45 days, which we may extend by a further 45 days with 

1notice. You may use an authorised agent. We may ask for proof of the agent\'s authority and verify your identity.']})]}),e.jsxs(l,{title:"12. Your Rights: Egypt and MENA Users",children:[e.jsx("p",{className:"font-semibold text-zinc-200",children:"Egypt: Personal Data Protection Law No. 151 of 2020"}),e.jsx("p",{className:"mt-2",children:"Under the Egyptian PDPL, you have the right to:"}),e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-2 text-zinc-400",children:[e.jsx("li",{children:"know what Personal Data we hold about you, and access it;"}),e.jsx("li",{children:"withdraw any consent you have given;"}),e.jsx("li",{children:"have inaccurate data corrected, amended, or completed;"}),e.jsx("li",{children:"have processing limited to a specific scope;"}),e.jsx("li",{children:"have your data erased when it is no longer needed or is processed unlawfully;"}),e.jsx("li",{children:"object to processing that conflicts with your fundamental rights and freedoms;"}),e.jsx("li",{children:"be informed of any personal data breach affecting you; and"}),e.jsx("li",{children:"complain to the Personal Data Protection Center (PDPC)."})]}),e.jsx("p",{className:"mt-3",children:"We process your data on the legal bases in Section 4, which include your consent, the performance of our contract with you, our legal obligations, and our legitimate interests. We respond to requests within the time limits set by the PDPL and its Executive Regulations."}),e.jsx("p",{className:"mt-5 font-semibold text-zinc-200",children:"United Arab Emirates: Federal Decree-Law No. 45 of 2021"}),e.jsx("p",{className:"mt-2",children:"UAE residents have the right to information, access, correction, erasure, restriction, and objection, and to data portability, within the limits set by the UAE PDPL, including the right to object to decisions based solely on automated processing. You can complain to the UAE Data Office."}),e.jsx("p",{className:"mt-5 font-semibold text-zinc-200",children:"Saudi Arabia: Personal Data Protection Law (Royal Decree M/19)"}),e.jsx("p",{className:"mt-2",children:"Saudi residents have the right to be informed, to access and obtain a copy of their data, to correction, to destruction of data that is no longer needed, and to withdraw consent. You can complain to the Saudi Data & AI Authority (SDAIA)."}),e.jsxs("p",{className:"mt-5",children:["To exercise any of these rights, contact our Data Protection Officer at ",o,". We may need to verify your identity."]})]}),e.jsxs(l,{title:"13. Security",children:[e.jsx("p",{children:"We use technical and organisational measures appropriate to the risk, including:"}),e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsx("li",{children:"TLS encryption for all data in transit;"}),e.jsx("li",{children:"encryption at rest for our database and file storage, applied by Google Cloud;"}),e.jsx("li",{children:"access rules that limit private data to its owner and to the people you choose to share with;"}),e.jsx("li",{children:"authenticated server-side functions for sensitive operations, and a web application firewall;"}),e.jsx("li",{children:"hashing of API keys and refresh tokens; and"}),e.jsx("li",{children:"regular review of our security configuration and staff access."})]}),e.jsx("p",{className:"mt-4",children:"Some files are delivered through links that include an access token. Anyone who has such a link can open the file, so please share download links with care. Public Wall images are accessible to everyone."}),e.jsxs("p",{className:"mt-3",children:[e.jsx("strong",{className:i,children:"Breaches."})," If a personal data breach occurs, we will notify the competent authorities and affected users within the time limits required by law. For example, the Egyptian PDPL requires notification to the Personal Data Protection Center within 72 hours, and GDPR requires notification to the supervisory authority within 72 hours where it applies. Our notice will describe the breach, its likely consequences, and the steps we are taking."]}),e.jsxs("p",{className:"mt-3",children:["No system is completely secure. Please use a strong, unique password, and report any vulnerability to ",o,"."]})]}),e.jsxs(l,{title:"14. AI Processing of Your Content",children:[e.jsx("p",{children:"To generate Outputs, we send your Inputs to the AI providers listed in Section 6: Google Gemini (including Gemini Omni, Lyria, and Imagen-class image models), Black Forest Labs, OpenAI, BytePlus ModelArk, and Anthropic (for CAD design). These providers process your Inputs on our behalf."}),e.jsxs("ul",{className:"list-disc list-inside space-y-2 mt-3 text-zinc-400",children:[e.jsx("li",{children:"You keep your rights in your Inputs. Ownership of Outputs is covered in Section 4 of our Terms."}),e.jsx("li",{children:"Neither MNKI nor its providers use your content to train AI models without your explicit opt-in consent (see Section 6.1 on providers' temporary abuse-monitoring retention)."}),e.jsx("li",{children:"Some providers add invisible provenance watermarks to Outputs (for example, Google SynthID in some videos)."}),e.jsx("li",{children:"Please do not upload images of identifiable people, or other people's personal data, unless you have a lawful basis to do so."})]})]}),e.jsx(l,{title:"15. Children",children:e.jsxs("p",{children:["The Service is intended for adults aged 18 or older and is not directed at children. We do not knowingly collect Personal Data from anyone under 18. If you believe that a child has given us Personal Data, contact ",o," and we will delete it promptly."]})}),e.jsx(l,{title:"16. Third-Party Sites and Services",children:e.jsx("p",{children:"The Service links to, and integrates with, third-party services such as Google sign-in, Noon's payment page, Discord, and MCP clients. Their own privacy policies apply to data you give them directly. We encourage you to read them."})}),e.jsx(l,{title:"17. Governing Law and Complaints",children:e.jsxs("p",{children:["This Policy is governed by the laws of Egypt. Disputes about it are resolved as set out in Section 21 of our ",e.jsx("a",{href:"/terms",className:r,children:"Terms"}),". This Policy is issued in English only; any translation is for convenience and has no legal effect, and to the fullest extent permitted by applicable law the English version governs. Nothing in this Policy limits any right you have under mandatory data protection law, including your right to complain to a supervisory authority, or any right to compensation that the law gives you and that cannot be limited by contract."]})}),e.jsx(l,{title:"18. Changes to This Policy",children:e.jsx("p",{children:'We may update this Policy. Changes take effect on the date we publish them, which is shown as the "Last updated" date. When we make a material change, we will tell existing users with a notice in the app at the time of the change, before we process personal data in any new way that the change describes. Where the law requires it, for example when a change relies on new consent, we will ask for your consent rather than relying on your continued use. Earlier versions are available on request.'})}),e.jsxs(l,{title:"19. Contact Us and Data Protection Officer",children:[e.jsx("p",{children:"In line with the Egyptian PDPL, MNKI has appointed a Data Protection Officer. The DPO handles all privacy questions and rights requests."}),e.jsxs("div",{className:"mt-4 bg-zinc-900/60 border border-zinc-800 rounded-2xl p-5 space-y-2",children:[e.jsx("p",{className:"font-bold text-white text-lg",children:"Amkna Group For Engineering Services (MNKI): Data Controller"}),e.jsx("p",{className:"text-zinc-400 text-sm",children:"Office M05, Golden Gate Tower, Autostrad Rd, Maadi, Cairo, Egypt"}),e.jsxs("p",{className:"text-zinc-400 text-sm",children:[e.jsx("strong",{className:"text-zinc-300",children:"Data Protection Officer and privacy requests:"})," ",o," ",'(subject line "Privacy")']}),e.jsxs("p",{className:"text-zinc-400 text-sm",children:[e.jsx("strong",{className:"text-zinc-300",children:"Telephone:"})," ",e.jsx("a",{href:"tel:+20225177576",className:r,children:"+20 2 2517 7576"})]}),e.jsxs("p",{className:"text-zinc-400 text-sm",children:[e.jsx("strong",{className:"text-zinc-300",children:"Response times:"})," we aim to acknowledge privacy requests within 72 hours and to respond within the time limits required by applicable law."]})]})]})]})]})}function l({title:s,children:t}){return e.jsxs("section",{className:"space-y-3",children:[e.jsx("h2",{className:"text-xl font-bold text-white border-b border-zinc-800 pb-2",children:s}),e.jsx("div",{className:"text-zinc-400 leading-relaxed space-y-3",children:t})]})}function d({a:s,b:t}){return e.jsxs("tr",{children:[e.jsx("td",{className:"py-2 pe-4 align-top",children:s}),e.jsx("td",{className:"py-2 align-top",children:t})]})}function h({a:s,b:t,c:a}){return e.jsxs("tr",{children:[e.jsx("td",{className:"py-2 pe-4 align-top",children:s}),e.jsx("td",{className:"py-2 pe-4 align-top",children:t}),e.jsx("td",{className:"py-2 align-top",children:a})]})}function u({a:s,b:t,c:a,d:n}){return e.jsxs("tr",{children:[e.jsx("td",{className:"py-2 pe-4 align-top",children:e.jsx("strong",{className:i,children:s})}),e.jsx("td",{className:"py-2 pe-4 align-top",children:t}),e.jsx("td",{className:"py-2 pe-4 align-top",children:a}),e.jsx("td",{className:"py-2 align-top",children:n})]})}export{c as PrivacyPolicyPage};