Privacy Policy

Last updated: February 20, 2026

MikoAdviser ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you provide directly to us:

  • Account Information: Name, email address, password, organization name
  • Customer Data: Customer names, contact information, assessment answers
  • Payment Information: Billing address, payment method details (processed by our payment provider)
  • Communications: Support requests, feedback, correspondence with us

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

  • Usage Data: Pages visited, features used, time spent on the Service
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, referring URLs

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent or unauthorized activities
  • Personalize and improve your experience

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

  • Contract Performance: Processing necessary to provide the Service
  • Legitimate Interests: Improving and securing the Service
  • Consent: Where you have given explicit consent
  • Legal Obligation: Compliance with applicable laws

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third parties that perform services on our behalf (hosting, payment processing, email delivery)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you have given us permission

4.1 Sub-processors

We use the following sub-processors:

  • Vercel: Hosting and infrastructure (USA)
  • Supabase: Database hosting (EU)
  • Resend: Email delivery (USA)

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We will also retain and use your information as necessary to:

  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

You can request deletion of your data at any time by contacting us.

6. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@mikoadviser.com.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of data at rest
  • Regular security assessments
  • Access controls and authentication
  • Employee training on data protection

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission

9. Cookies and Tracking

We use cookies and similar tracking technologies to collect usage information. You can control cookies through your browser settings. Essential cookies are required for the Service to function properly.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Data Protection Officer

For questions about this Privacy Policy or our data practices, contact our Data Protection Officer:

Email: dpo@mikoadviser.com

13. Supervisory Authority

If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with a supervisory authority.

14. Contact Us

For any questions about this Privacy Policy, please contact us at:

privacy@mikoadviser.com