Security, Privacy & Compliance

1. Governance & Corporate Identity

• Corporate Structure: UserMint Inc. is a Wyoming C-Corporation.
• Transparent Data Handling: We are committed to clear, accountable handling of personal and operational data consistent with applicable law and contractual obligations.
• User Rights Readiness: Our privacy and compliance processes are designed to support user rights workflows, including access, correction, portability, and opt-out handling where applicable.
• Incident Response Discipline: We maintain internal procedures for incident review, escalation, documentation, and notification assessment.

2. Hardened Infrastructure

• Google Cloud Foundation: UserMint operates its backend on Google Cloud infrastructure and relies on Google Cloud’s enterprise security, privacy, and compliance framework as a core part of its operating environment.
• Deterministic Processing Model: Our platform is built around deterministic processing principles intended to reduce ambiguity, improve repeatability, and support high-integrity outcomes.
• Restricted Data Use: Customer data is not used for advertising purposes, and UserMint does not use customer data to train third-party AI models unless explicitly disclosed and authorized.
• HIPAA Contractual Support: UserMint has accepted Google’s HIPAA Business Associate Amendment for supported Google services and is structured to support healthcare-sensitive workloads where contractually required and operationally appropriate.
• Cloud Privacy Terms: UserMint has accepted the Google Cloud Data Processing Addendum (CDPA), providing a formal contractual privacy framework for covered cloud processing relationships.

3. Global Data Protection

• EU Data Protection Applicability: UserMint has certified within its cloud compliance configuration that EU data protection law applies to relevant covered processing activities.
• Cross-Border Data Handling: UserMint is designed to support lawful cross-border data practices through documented privacy, security, and contractual controls where applicable.
• Transfer Safeguards: For international data relationships that require formal transfer mechanisms, UserMint may rely on approved contractual safeguards, including Standard Contractual Clauses, where appropriate.
• Supervisory Authority Reference: Within its cloud compliance administration, UserMint has identified the Netherlands Autoriteit Persoonsgegevens as the relevant supervisory authority reference for applicable SCC-related workflows.
• Processing Documentation: We maintain internal records and operational documentation relating to systems, data handling responsibilities, and categories of processing.
• Breach Response Readiness: Our incident-response process is structured to support notification analysis and regulatory response timelines where applicable.

4. Technical Safeguards

Security controls vary by environment, service boundary, and contractual scope. Additional documentation may be available during commercial review or enterprise onboarding.

5. Contact Our Privacy Office

For security, privacy, or data rights inquiries, including questions regarding processing terms or compliance documentation, contact:

Privacy Office
UserMint Inc.
30 N Gould St Ste R
Sheridan, WY 82801
USA
privacy@usermintnetwork.com