Minno Terms of Service
Version 2026-11-07 · Last updated 7 November 2026
These Terms of Service ("Terms") are a binding agreement between you and Rook Industries, Inc., a Wyoming corporation ("Rook", "we", "us"), which provides Minno. "You" means the business that creates a Minno account or uses a Minno API key, and the person accepting these Terms confirms they have authority to bind it.
You accept these Terms by creating an account, using an API key, or confirming acceptance in any other way. If you don't accept them, don't use Minno.
Section 14 contains a binding arbitration agreement and a class-action waiver. Section 5 contains your biometric-law obligations. Read both.
1. What Minno is
1.1 A processor for identity-verification builders. Minno is an API that runs a face liveness check (and, optionally, a face comparison against an ID portrait you supply) inside your own product. Your application captures the check using the open-source capture component in your own interface, under your brand. Minno creates the session, returns a result (live or not live, with a confidence score; match or no match, with a similarity score) and meters usage so you can bill your own customers.
1.2 What Minno is not. Minno does not decide who a person is, does not approve or deny anyone, and is not an identity-verification service to the public. It is one input to your process. You decide what to do with a result.
1.3 Built on a cloud provider. Liveness and comparison are performed by Amazon Web Services (Amazon Rekognition). Rook does not claim any certification (including iBeta or ISO 30107) for Minno. Any statements about the underlying technology's testing or accuracy are AWS's own and apply to AWS's service, not to Minno.
1.4 Business use only. Minno is offered to businesses that build or operate identity-verification, onboarding or fraud-prevention products. It is not offered to consumers. You must be at least 18 and acting for a business.
2. Your account and keys
2.1 Give accurate account information and keep it current.
2.2 Keys. Keep your API keys secret. You are responsible for all activity under your keys, including by your employees, contractors, software and AI agents. A key can only see sessions it created. Tell us at once at security@tryminno.com if a key is compromised, and revoke it.
2.3 Test keys return simulated results, never call the cloud provider, and are never billed. Don't use a test key for any real person's check.
3. Your data and our role
3.1 Session Data means the capture streamed from an end user's device during a check, the reference frame, any ID portrait you submit for comparison, the results, your reference tags, and metadata (timestamps, scores, status).
3.2 You are the controller. As between you and Rook, you own Session Data and decide why it is processed. For privacy and biometric laws you are the "controller", "business" or "private entity" collecting the data, and Rook is your "processor", "service provider" or vendor. Rook processes Session Data only to provide Minno to you, under the Data Processing Agreement at tryminno.com/legal/dpa (the "DPA"), including its Biometric Addendum. The DPA is part of these Terms.
3.3 What Rook keeps and doesn't keep. Rook does not store face images, video, or biometric templates. The capture is streamed by the end user's device directly to the cloud provider's liveness service; Rook receives the decision. The reference frame is returned to you once if you request it and is not stored by Rook. ID portraits are passed through for comparison and are not stored by Rook. Rook keeps session metadata (status, scores, timestamps, your tags) for the periods in the Privacy Policy and the Biometric Data Policy at tryminno.com/legal/biometric-policy.
3.4 Each account is separate. Rook doesn't use one customer's Session Data for another customer, combine it, build any face database or gallery, or use it for Rook's own purposes beyond running, securing and billing the service. Rook may keep aggregated, non-identifying statistics (pass rates, latency, error rates).
4. Your responsibilities
You will:
- (a) use Minno only inside a product you operate, for the purpose you tell your end users;
- (b) give each end user clear notice, before capture, that a face liveness check will be performed, who is performing it (you, with a vendor), why, and for how long any data is kept;
- (c) obtain every consent the law requires (Section 5);
- (d) not use Minno to identify, track or surveil people, to build a face database, or on anyone without their knowledge;
- (e) set
pass_thresholdand your match threshold with regard to your own risk assessment; Rook's defaults are not advice; - (f) handle the reference frame and any ID portrait under your own privacy obligations once they are in your systems;
- (g) comply with all laws that apply to your use, including biometric privacy, consumer protection, anti-discrimination and export laws; and
- (h) not resell Minno as a standalone liveness service without a written agreement with Rook.
5. Biometric laws
5.1 Your obligations. Face liveness and face comparison involve biometric identifiers or information under several laws, including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act, Washington's biometric and My Health My Data laws, several US state comprehensive privacy laws (which treat biometric data as sensitive), the GDPR and UK GDPR (special-category data), and Quebec's Law 25. You are the party collecting the data from your end users. Before any capture you must, where the law requires:
- inform the person in writing that a biometric identifier or biometric information is being collected or stored, by whom and through which vendor;
- inform them of the specific purpose and the length of time for which it will be collected, stored and used;
- obtain a written release or other express consent; and
- publish a retention and destruction policy.
5.2 Rook's commitments. Rook will not sell, lease, trade or otherwise profit from any biometric identifier or information; will not disclose it except to the cloud provider needed to perform the check, as you instruct, or as the law requires; will protect it using the reasonable standard of care in our industry and at least as protective as the way we treat other confidential information; and will keep the public retention and destruction policy at tryminno.com/legal/biometric-policy.
5.3 No capture without consent. If you cannot obtain the required consent from a person, do not start a session for that person. Rook may suspend keys that we reasonably believe are used without consent.
5.4 Children. Don't use Minno on anyone under 18 unless the law where they live allows it and you have the required parental consent. Rook doesn't knowingly process children's biometric data.
6. Acceptable use
Don't: use Minno for surveillance, law-enforcement identification, or any use the cloud provider's terms prohibit; attempt to extract templates or model behavior; probe, attack or overload the service; circumvent per-key limits; use another customer's data; or use Minno for any unlawful purpose or in a way that discriminates unlawfully.
7. Plans, fees and renewal
7.1 Fees are as published at tryminno.com/pricing or in your order. Only completed checks are billed ($0.05 each after the first 100, which are free); abandoned and expired sessions are free. After the first 100 checks a live key needs a card in good standing; without one, new checks are refused.
7.2 Pay-as-you-go accounts are billed monthly in arrears for the previous month's metered usage. Monthly plans renew each month until cancelled; cancel any time and the plan ends at the period end. Included volume does not carry over.
7.3 Prices may change on 30 days' notice by email. Taxes are extra where they apply. Invoices are due on receipt; we may suspend keys 10 days after a written overdue notice.
7.4 Usage shown at /v1/usage is the billing record. Dispute an invoice within 30 days in writing.
8. Suspension and termination
Either party may end these Terms at any time; you by closing the account, we on 30 days' notice. We may suspend or terminate immediately for breach of Sections 4, 5 or 6, for non-payment, for a security risk, or if the cloud provider requires it. On termination we delete your Session Data as the DPA and Biometric Data Policy describe. Sections 3, 5.2, 9 to 16 survive.
9. Intellectual property
Rook owns Minno and everything in it, except your Session Data and your own applications. The capture component is open-source software licensed by its publisher under its own terms. You may use our API documentation and client code to integrate Minno. We may use your name and logo in a customer list only with your written consent.
10. Disclaimers
Minno is provided "as is" and "as available". Liveness and comparison are probabilistic. A result is a score, not a guarantee that a person is present, real, or who they claim to be. Rook does not warrant accuracy, completeness, uninterrupted availability, or that Minno will meet any regulatory, certification or "know your customer" requirement that applies to you. Except as expressly stated, Rook disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement.
11. Limitation of liability
Neither party is liable for indirect, incidental, special, consequential or punitive damages, or lost profits, revenue or data, even if advised of the possibility. Rook's total liability for all claims under or relating to these Terms is limited to the greater of the fees you paid Rook in the 3 months before the event or US$100. These limits don't apply to your payment obligations, your indemnity, or either party's fraud or wilful misconduct. Some laws don't allow some limits; they apply only to the extent permitted.
12. Your indemnity
You will defend and indemnify Rook, its officers, directors and contractors against any third-party claim, fine, penalty or cost (including reasonable attorneys' fees) arising from: your failure to give the notices or obtain the consents in Section 5; your use of results; your end-user relationships; your breach of these Terms; or your violation of law. This includes any claim under a biometric privacy law brought by or for one of your end users. Rook will give you prompt notice and reasonable cooperation and may participate with its own counsel at its own cost. You may not settle a claim in a way that admits fault for Rook without Rook's written consent.
13. Legal requests
If Rook receives a legal request about your Session Data, we will direct the requester to you where lawful and notify you unless prohibited. Serve legal process on Rook Industries, Inc., 30 N Gould St Ste R, Sheridan, WY 82801, with a copy to legal@tryminno.com.
14. Disputes: arbitration and class-action waiver
14.1 The parties will first try to resolve any dispute informally for 30 days after written notice.
14.2 Any dispute not resolved will be decided by confidential, binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, before one arbitrator, by video conference unless the arbitrator decides otherwise, with its seat in Cheyenne, Wyoming. Judgment may be entered in any court with jurisdiction.
14.3 Class-action waiver. Claims may be brought only in a party's individual capacity, not as a plaintiff or class member in any purported class, collective or representative proceeding. The arbitrator may not consolidate claims of different customers.
14.4 Either party may seek injunctive relief in court to protect its intellectual property or confidential information, and Rook may bring a claim for unpaid fees in small-claims court.
15. Changes
We may update these Terms. We will post the new version with its date and, for material changes, email account holders at least 30 days before they take effect. Continued use after that date is acceptance.
16. General
Wyoming law governs, without regard to conflict-of-laws rules. Notices are effective when emailed to the addresses on file (ours: legal@tryminno.com). Neither party is liable for delay caused by events beyond its reasonable control. You may not assign these Terms without our consent; we may assign them to an affiliate or successor. If a provision is unenforceable the rest stands. These Terms, the DPA, the Biometric Data Policy, the Privacy Policy and your order are the entire agreement.
Contact
Rook Industries, Inc. · 30 N Gould St Ste R, Sheridan, WY 82801 · hello@tryminno.com · security@tryminno.com · privacy@tryminno.com · legal@tryminno.com