Privacy Policy

Last updated: 27 July 2026

This policy explains what personal data Minuto collects, why we collect it, who we share it with, how long we keep it, and what rights you have. It is written to align with India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Information Technology Act, 2000 and rules made under it.

Minuto (the "Platform", "we", "us") is operated by RioCloud Solutions, registered at Chandigarh, India. In DPDP Act terms we are the Data Fiduciary for the data described below, and you are the Data Principal.

1. Who this policy covers

• Clients — people who call an expert through a Minuto link.
• Experts — professionals who list on Minuto and take calls.
• Visitors — anyone who browses the site without signing in.

2. What we collect

Account data (clients and experts)

• Name
• Email address
• Phone number
• If you sign in with Google: your Google account ID, email, name and profile picture URL. We do not receive your Google password.
• One-time login codes we email you, and the time they were used

Expert profile data (experts only)

• Professional title, category, languages, biography and profile photo
• Professional credential type and registration or membership number (for example a bar enrolment number, ICAI membership number, medical council registration number or veterinary council number), where the category calls for one
• Your rate per minute and free-minute setting
• Your UPI ID (VPA) and other payout details you give us so we can pay you

Call data

• Who called whom, and when the call started and ended
• Duration, free minutes used, paid minutes purchased and used
• The optional short question a client types before calling
• The rating and review a client leaves after a paid call
• Technical call events needed to keep the call running and the timer honest

We do not record calls. Minuto does not record, store or transcribe the audio of your conversation. Nobody at Minuto listens to your calls. If we ever introduce optional recording, we will ask for clear consent from both people first and show it plainly on the call screen before it starts.

Payment data

• Amount paid, currency, payment status, payment method type (for example UPI or card), and the order and payment reference numbers issued by Razorpay
• Refunds, wallet credits, commission deducted and payout records

We never see or store your full card number, CVV, UPI PIN, bank password or OTP. Those are entered directly into Razorpay's payment interface and stay with Razorpay and your bank.

Technical data

• IP address and browser user-agent, recorded at sign-in and for certain sensitive actions
• Server logs and error logs
• Session and security cookies (see section 8)

3. Why we use your data, and our lawful basis

We do not sell your personal data. We do not use your data to build advertising profiles, and we do not share it with advertising networks.

4. Who we share your data with

We share only what each of these providers needs to do its job. They act as our data processors and are bound by their own agreements and privacy policies.

• Daily.co — powers the live audio call (WebRTC). It receives a temporary room name and call token so it can connect you. Daily.co processes data on servers outside India.
• Razorpay — processes all payments. It receives the amount, your payment details entered directly into its interface, and a reference to the call being paid for. Razorpay is an Indian payment provider regulated by the Reserve Bank of India.
• Google — only if you choose "Sign in with Google". Google tells us your Google ID, name, email and profile picture URL.
• Our email / SMTP provider — delivers login codes and notification emails. It receives your email address and the content of that email.
• Our hosting provider — stores the database and application. See Hostinger.
• Professional advisers, auditors, and law enforcement or courts — where we are legally required to disclose, or need to establish or defend a legal claim.

The expert you call sees your name, the optional question you typed, and the call details. The client sees the expert's public profile. Neither party sees the other's payment details.

If Minuto is ever sold, merged or reorganised, your data may transfer to the new owner. We will tell you before that happens and the new owner will be bound by this policy or one at least as protective.

5. Transfers outside India

Some of our providers — including Daily.co, Google and possibly our email provider — process data on servers outside India. We only use providers that offer appropriate contractual safeguards, and we transfer only what is needed to deliver the service. We do not transfer personal data to any country the Government of India has restricted under the DPDP Act.

6. How long we keep your data

• Account data — for as long as your account is open, and then removed or anonymised after you ask us to delete it, subject to the exceptions below.
• Payment, commission and payout records — retained for as long as Indian tax, accounting and payment regulations require. This is typically up to eight years from the end of the relevant financial year. We cannot delete these earlier, even on request.
• Call metadata (who, when, how long, how much) — retained alongside the payment record it supports, for the same period.
• Login codes and sign-in logs — a short period for security purposes, then deleted.
• Reviews — kept on the expert's public profile until the review or the account is removed.

Under the DPDP Act, we erase personal data when you withdraw consent or when it is no longer needed for the purpose we collected it — unless retention is required by law.

7. Your rights

As a Data Principal under the DPDP Act you have the right to:

• Access — get a summary of the personal data we hold about you and who we have shared it with.
• Correction and completion — have inaccurate or incomplete data corrected or updated.
• Erasure — have your data deleted where we are not legally required to keep it.
• Withdraw consent — as easily as you gave it. Withdrawing consent stops future processing; it does not undo processing already done, and it may mean you can no longer use Minuto.
• Grievance redressal — complain to us first, using the details below.
• Nominate — name another person to exercise these rights for you if you die or become incapacitated.

To exercise any of these, email info@riocloudsolutions.com from the email address on your Minuto account. We will acknowledge your request and respond within 30 days. We may ask you to verify your identity first. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. Cookies and session storage

Minuto uses only the cookies it needs to work:

• A session cookie that keeps you signed in as you move between pages.
• A CSRF token cookie that stops other websites submitting forms on your behalf.

These are strictly necessary — the site cannot work without them. We do not use advertising cookies, cross-site tracking pixels or third-party marketing trackers. You can clear cookies in your browser at any time; you will be signed out.

9. Security

We serve the site over HTTPS, calls run over encrypted WebRTC connections, payment credentials go directly to Razorpay, and access to the production database is restricted. No system is perfectly secure. If a personal data breach happens, we will notify the Data Protection Board of India and affected users as required by law.

10. Children

Minuto is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, tell us and we will delete it.

11. A note on advice given on calls

Minuto is a technology and payments platform. We do not provide professional advice, and we do not review, verify or vouch for the correctness of anything an expert tells you. Where a category is regulated, experts self-certify their registration. Anything you share with an expert during a call is between you and that expert. See our Terms of Service.

12. Changes to this policy

If we change this policy we will update the "Last updated" date above. For significant changes we will also email registered users. Continuing to use Minuto after a change means you accept the updated policy.

13. Contact and Grievance Officer

Full details are on our Contact page.