Privacy Policy

This Privacy Policy explains how MIA ("MIA", "we", "us", or "our") collects, uses, and protects personal information when you visit our website, use the optional Google connections described below, or get in touch with us (the "Services").

1. Information we collect

Information you provide

When you complete a form or contact us, we collect the details you choose to share — typically your name, email address, your message or the scenario you describe, and your language preference.

Information we collect automatically

When you use the Services, we may automatically collect limited technical information such as your IP address, browser and device type, pages viewed, and the date and time of your visit. We use cookies and similar technologies for this purpose (see "Cookies" below).

Information from Google Sign-In

If you choose Google Sign-In, Google shares your name, email address, and profile picture with MIA. Sign-in requests only the basic identity scopes (openid, profile, email). Signing in does not grant MIA access to Gmail, Google Drive, Calendar, or other Google Workspace content; connecting those services is a separate choice.

We use this Google account information solely to authenticate you and to create and identify your account. We do not use it for advertising, profiling, or training AI models, and we do not sell it. MIA’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke MIA’s access to your Google account at any time at myaccount.google.com/permissions.

Connecting Google Calendar and Tasks

Connecting Google Calendar and Tasks is optional and separate from signing in. You can allow MIA to view events or tasks, or also to create, edit and delete them at your request. This connection does not grant access to Gmail or Google Drive.

If you ask the AI assistant to work with an event or task, relevant details may be sent to AI service providers and saved in conversations, results and execution records. We are checking how these providers use and retain the information they receive. Deleting a conversation removes it from your chat history. Execution records may remain after deletion. You can revoke access in your Google Account. To request deletion of previously saved data, contact [email protected].

Google supplies the email address and account identifier for the connection you select. Depending on your request, event data can include titles, times, descriptions and attendees. Task data can include list and task identifiers, titles, notes, due dates and completion status. When you ask to make an edit, MIA sends the requested changes to Google.

2. How we use information

• to respond to your enquiries and communicate with you;
• to evaluate and discuss potential collaboration, pilots, or scenario mapping;
• to operate, maintain, secure, and improve the Services;
• to understand how the Services are used and to measure and improve performance;
• to comply with legal obligations and protect our rights and the rights of others.

3. Legal bases for processing

Where data-protection law requires a legal basis, we rely on: your consent (which you may withdraw at any time); our legitimate interests in operating and improving the Services and responding to you; steps taken at your request before any agreement; and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We may share it with:

• service providers who process information on our behalf (for example hosting, email delivery, and Google Analytics if you accept), under appropriate confidentiality and data-protection obligations;
• authorities or other parties where required by law, or to protect rights, safety, and security;
• a successor entity in connection with a merger, acquisition, or reorganisation, subject to this Policy.

We do not sell, rent, or share information obtained through Google Sign-In with third parties for their own purposes, and we do not transfer it for advertising. It is shared only with the service providers described above, and only to operate the sign-in and account features.

5. Cookies and analytics

We use cookies and similar technologies to keep the Services working and to remember preferences such as language. Google Analytics cookies load only if you accept; they measure how the site is used, under measurement ID G-RF2BT7DFL5 (this site, not you). You can refuse Google Analytics. Browser settings can also block cookies.

Change analytics cookies

6. Data retention

We keep personal information only for as long as needed for the purposes described in this Policy — for example, to respond to and follow up on your enquiry — and then delete or anonymise it, unless a longer period is required by law.

Disconnect Google to stop future access through that connection. To remove a saved MIA Agent conversation, archive it, then open Archived in Settings and choose Delete. Files saved separately in your Library remain there until you delete them. You can also request deletion of saved results and execution records under section 9. Backup copies may remain after a conversation is deleted.

7. Data security

We use reasonable technical and organisational measures designed to protect personal information against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Accessa stores the Google credentials for your MIA connection using authenticated encryption. The normal MIA Agent connection calls Google through Accessa. The model receives the event or task information needed for your request, without receiving the OAuth token.

8. International data transfers

Because we serve a global audience, your information may be processed and stored in countries other than your own, where data-protection laws may differ. Where required, we take steps to ensure your information receives an appropriate level of protection.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent.

To request deletion of previously processed Google data, identify the MIA account and the conversation, result or execution record in your request. We may need to confirm your identity and your authority over shared data. The Platform Privacy Policy lists the user-rights contact and explains how requests are handled.

10. Children’s privacy

The Services are intended for a business audience and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Material changes will be made clear on this page.