Privacy Policy

Effective: January 1, 2026|Last updated: March 1, 2026

1. Information We Collect

We collect information you provide directly, such as account details (name, email, company), billing information, and support communications. We also collect usage data automatically, including IP addresses, browser type, device information, and interaction logs to improve our services.

2. How We Use Your Information

We use collected information to provide and maintain our services, process transactions, send service notifications, improve user experience, ensure platform security, and comply with legal obligations. We do not sell your personal data to third parties.

3. Data Storage & Security

Your data is encrypted at rest (AES-256) and in transit (TLS 1.3). We store data in SOC 2 Type II certified data centers with geographic redundancy. Access to personal data is restricted to authorized personnel on a need-to-know basis.

4. Data Sharing & Third Parties

We share data only with service providers necessary to operate our platform (payment processors, cloud infrastructure, analytics). All third-party processors are contractually bound to protect your data. We do not share data with advertisers.

5. Your Rights

You have the right to access, correct, export, or delete your personal data at any time through your account settings or by contacting our privacy team. For EU residents, we comply with GDPR requirements including the right to data portability and the right to be forgotten.

6. Cookies & Tracking

We use essential cookies for authentication and preferences. Analytics cookies are optional and can be disabled. We do not use advertising trackers. You can manage cookie preferences from the banner displayed on your first visit.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, personal data is purged within 30 days, with the exception of data required for legal compliance (up to 7 years for financial records).

8. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@mitossoft.com. We respond to all privacy requests within 30 days.