Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your name and email address. If you sign up with an email and password, we store a securely hashed version of your password (never the password itself). If you sign in with Google, we receive your name, email address, and profile image from Google based on the permissions you grant.

Content you upload and create

We store the files you upload (such as CSV and Excel spreadsheets) and the data they contain, along with the dashboards, charts, table relationships, filters, and settings you build from them. This content may contain personal or business information — you decide what to upload. See Section 3 for how this is handled.

Collaboration information

When you invite someone to view a dashboard, we store the email address you invite and the status of that invitation so we can deliver the invite and manage access.

Billing information

If you subscribe to a paid plan, we store your plan, its status, its renewal date, and an identifier issued by our payment processor that links your Mizantiq account to your subscription with them. We never receive or store your card number, expiry date, or security code — those are handled entirely by our payment processor. See Section 5.

Connected applications

If you connect a third-party application to your account, we store the authorization you granted, the permissions attached to it, and the access tokens needed to keep the connection working, so that you can review and revoke it later. See Section 4.

Technical and usage information

To keep your account secure and the Service working, we record limited technical information tied to your sessions, including your IP address, browser user-agent, session timestamps, and the total amount of storage your uploads use. We also collect limited product analytics — such as which pages are visited and key account events — to understand how the Service is used. Analytics never includes the contents of your files or dashboards, and we do not use advertising or cross-site tracking. See Section 11.

2. How we use your information

We use the information described above to:

• Provide, operate, and maintain the Service;
• Authenticate you, keep you signed in, and protect your account against unauthorized access;
• Process the data in your files to compute the aggregations and visualizations shown in your charts;
• Deliver dashboard invitations and manage who can access your dashboards;
• Take payment for a paid plan, manage renewals and cancellations, and handle refunds and billing questions;
• Enforce plan limits (such as file size, number of dashboards, and storage) and operate account features;
• Send you essential service messages (for example, invitation emails, billing notices, or account-related notices);
• Diagnose problems, prevent abuse, and improve the reliability and security of the Service;
• Understand how people find and use Mizantiq, so we can fix where they get stuck and improve the product (see Section 11); and
• Comply with legal obligations that may apply to us.

Where data-protection law applies to you, we rely on the following legal bases: performing our contract with you (providing the Service and taking payment for it), our legitimate interests (securing and improving the Service and preventing abuse), your consent (where we ask for it), and compliance with legal obligations. For product analytics, we rely on your consent where the law requires it (browser analytics for visitors in the EU/EEA, the UK and Switzerland) and otherwise on our legitimate interest in understanding and improving the Service.

3. Your files and dashboards

Your content is yours.We access and process the data in your files only to provide the Service to you — for example, to store the file, render your charts, reconcile columns when you upload a new version, and show dashboards to the people you invite. We do not sell your files or the data in them, and we do not use your uploaded data to advertise to you or to train machine-learning models.

You are responsible for the data you choose to upload, including having the right to upload it and to share it with anyone you invite. If your files contain personal information about other people, you are responsible for that data under any laws that apply to you, and Mizantiq acts as a processor of that data on your behalf.

4. Sharing and disclosure

Your dashboards are private by default. A dashboard you create is visible only to you and to the specific people you invite by email. Mizantiq does not publish your dashboards, make them discoverable, or index them. A forwarded invitation link does not grant access to anyone you did not invite.

There are two ways your dashboard data can reach someone else, and both require an action by you:

• Invitations. People you invite by email can view the dashboard you invited them to. You can revoke an invitation at any time.
• Embed links. On plans where the feature is available, you can generate an embed link for one of your dashboards. An embed link is public by design: anyone holding it can view a read-only copy of that dashboard without signing in, and it may be indexed by search engines if you publish it somewhere public. Only create an embed link for a dashboard you are willing to make public. Revoking the link from within the app stops it working immediately.

Connected applications.You can authorize a third-party application — for example an AI assistant that supports the Model Context Protocol — to access your account. If you do, information about your dashboards, including their configuration and the aggregated data needed to answer your requests, is sent to that application’s provider, where it is handled under that provider’s own privacy policy rather than this one. This only happens for connections you set up yourself, and you can revoke a connection at any time.

The example dashboards published on our public Explore pages are our own. They are built by the operator of Mizantiq from our own or public sample data. No user’s dashboard or uploaded data is ever published there.

We do not sell your personal information. Beyond the above, we disclose information only:

• To the service providers who help us operate the Service, described in Section 6;
• If required by law, legal process, or a valid government request, or to protect the rights, safety, and security of our users or the Service; and
• In connection with a business transfer (such as a merger or acquisition), in which case we will notify you of any material change to how your data is handled.

5. Payments

Payments for paid plans are processed by Kashier, a licensed Egyptian payment service provider. When you subscribe, you enter your card details directly with Kashier. Mizantiq never receives, sees, or stores your card number, expiry date, or security code.

Kashier processes your payment information as an independent controller under its own privacy policy, and may hold a secure token representing your card so that renewals can be charged. From Kashier we receive only what we need to run your subscription: a customer and subscription identifier, the status of each payment, the amount and currency, and the last four digits and card brand for your records.

If you cancel your subscription, we stop initiating charges. To ask Kashier to delete the card token it holds, contact us at support@mizantiq.com and we will pass the request on.

6. Service providers we use

We rely on a small number of trusted providers to run the Service. They process data only to provide their service to us and are not permitted to use it for their own purposes:

• Hostinger— database hosting. Stores your account details, dashboard configurations, and related metadata.
• Cloudflare R2— file storage. Stores the spreadsheet files you upload.
• Google— sign-in. If you choose Google sign-in, Google authenticates you and provides your basic profile information. Your use of Google sign-in is also subject to Google’s privacy policy.
• Brevo— email delivery. Sends transactional emails such as account verification, dashboard invitations, and billing notices.
• Railway— hosting for our data-processing service, which computes chart aggregations from your files.
• Kashier— payment processing for paid plans, as described in Section 5.
• PostHog— product analytics, hosted in its EU region (Frankfurt, Germany), under a data processing agreement. See Section 11 for exactly what it receives.

Providers of applications you connect yourself (see Section 4) are not in this list, because you choose them rather than us.

As Mizantiq grows we may add or change providers; we will keep this section up to date so it always reflects who processes your data.

7. International data transfers

Mizantiq and the providers listed above operate infrastructure that may be located in countries other than the one you live in. When your information is transferred to and processed in other countries, we take reasonable steps to ensure it remains protected consistent with this policy. Product analytics is stored in the EU; requests travel there through Cloudflare’s network, which may handle them in data centres outside the EU without storing their content.

8. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the Service. You are in control of your data:

• You can delete individual files, dataset versions, and dashboards at any time from within the app.
• You can delete your entire account from the settings page. When you do, we remove your account together with your dashboards, datasets, uploaded files, pending invitations, embed links, and connected application authorizations, and we sign out and revoke your active sessions. Product analytics linked to your account is deleted too.
• Ending a paid subscription does not delete anything. Your content stays in your account under the terms described in our Terms of Service.

After deletion, some information may persist briefly in backups or logs before being overwritten in the ordinary course. We may also retain limited records where we are required to do so by law — in particular, records of payments and refunds, which we keep for as long as tax and accounting rules require even after an account is deleted.

9. Security

We take reasonable measures to protect your information, including encrypting data in transit (HTTPS), storing passwords only in hashed form, restricting access to stored files through time-limited signed links, and limiting who can access production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential. We recommend keeping your own copies of important files.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, update, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can exercise many of these directly in the app:

• Access & correction: view and update your account details in settings.
• Export: export your dashboard configurations from within the editor, and your chart data as CSV or PNG.
• Deletion: delete files, dashboards, or your whole account at any time.
• Revoking access: revoke invitations, embed links, and connected applications at any time.
• Analytics:turn browser analytics on or off at any time via “Cookie settings” in the site footer and in your account settings, or object to account-level analytics by emailing us (see Section 11).

To make any other request, email us at privacy@mizantiq.com. We will respond within a reasonable time. If you believe we have not addressed your concern, you may have the right to complain to your local data-protection authority.

11. Cookies and analytics

Essential cookie

Mizantiq uses a single essential cookie to keep you signed in after you log in. This cookie is required for the Service to function and cannot be turned off while you are using your account.

Product analytics

We use PostHog, a product analytics service, to understand how people find and use Mizantiq — for example which pages are visited, where visitors come from, and where people get stuck between signing up and building their first chart. PostHog processes this data on our behalf under a data processing agreement and stores it in its EU region (Frankfurt, Germany). Requests reach PostHog through our analytics address, e.mizantiq.com, which runs on Cloudflare’s network; Cloudflare may handle these requests in data centres outside the EU but does not store their content.

What is collected:

• In your browser: the pages you visit (the web address without its query parameters, except campaign tags on our public pages), the site or campaign that referred you, your approximate country, your browser, device and screen type, language and time zone, and a few interactions: clicks on pricing, Explore and sign-up buttons, and when an upgrade prompt is shown.
• From our servers, linked to your account’s internal ID: when you sign up, start a checkout, complete a payment, or reach a plan limit, and when a connected AI assistant uses one of Mizantiq’s tools (which tool, whether it succeeded, and how long it took).
• With these records: your plan and the date you signed up.

What is never collected: the contents of your files, column names, cell values, file names, dashboard or chart titles, what an AI assistant asked for or received, or your name and email address. We do not record sessions, automatically capture everything you click, build heatmaps, use analytics for advertising, sell this data, or track you across other websites. Your IP address is used only to work out your approximate country and is then discarded.

In your browser, PostHog stores a random identifier in a first-party cookie or local storage so that visits can be counted. When you sign in, that identifier is linked to your account’s internal ID.

Your choices

• EU/EEA, UK and Switzerland: we ask before turning on browser analytics. Nothing is sent from your browser unless you choose Accept.
• Everywhere else: browser analytics is on by default. You can turn it off at any time.
• In every region you can change your choice via “Cookie settings” in the site footer and in your account settings.
• The account events recorded by our servers use no cookies. You can object to them by emailing privacy@mizantiq.com; we will delete the analytics linked to your account and stop recording these events for it.
• Dashboards embedded on other websites never load analytics, so people viewing your embeds are not tracked.

Payment pages

When you go through checkout, our payment processor may set its own cookies on its checkout page for security and fraud prevention. Those are governed by its privacy policy, not this one.

12. Children

Mizantiq is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at privacy@mizantiq.com and we will delete it. Paid plans may only be purchased by someone aged 18 or over, as set out in our Terms of Service.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you within the Service. Your continued use of Mizantiq after an update means you accept the revised policy.

14. Contact us

For any privacy question or request, email privacy@mizantiq.com. For account, billing, or support questions, email support@mizantiq.com.