Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your name and email address. If you sign up with an email and password, we store a securely hashed version of your password (never the password itself). If you sign in with Google, we receive your name, email address, and profile image from Google based on the permissions you grant.

Content you upload and create

We store the files you upload (such as CSV and Excel spreadsheets) and the data they contain, along with the dashboards, charts, table relationships, filters, and settings you build from them. This content may contain personal or business information — you decide what to upload. See Section 3 for how this is handled.

Collaboration information

When you invite someone to view a dashboard, we store the email address you invite and the status of that invitation so we can deliver the invite and manage access.

Billing information

If you subscribe to a paid plan, we store your plan, its status, its renewal date, and an identifier issued by our payment processor that links your Mizantiq account to your subscription with them. We never receive or store your card number, expiry date, or security code — those are handled entirely by our payment processor. See Section 5.

Connected applications

If you connect a third-party application to your account, we store the authorization you granted, the permissions attached to it, and the access tokens needed to keep the connection working, so that you can review and revoke it later. See Section 4.

Technical and usage information

To keep your account secure and the Service working, we record limited technical information tied to your sessions, including your IP address, browser user-agent, session timestamps, and the total amount of storage your uploads use. We do not use advertising or third-party tracking technologies (see Section 11).

2. How we use your information

We use the information described above to:

• Provide, operate, and maintain the Service;
• Authenticate you, keep you signed in, and protect your account against unauthorized access;
• Process the data in your files to compute the aggregations and visualizations shown in your charts;
• Deliver dashboard invitations and manage who can access your dashboards;
• Take payment for a paid plan, manage renewals and cancellations, and handle refunds and billing questions;
• Enforce plan limits (such as file size, number of dashboards, and storage) and operate account features;
• Send you essential service messages (for example, invitation emails, billing notices, or account-related notices);
• Diagnose problems, prevent abuse, and improve the reliability and security of the Service; and
• Comply with legal obligations that may apply to us.

Where data-protection law applies to you, we rely on the following legal bases: performing our contract with you (providing the Service and taking payment for it), our legitimate interests (securing and improving the Service and preventing abuse), your consent (where we ask for it), and compliance with legal obligations.

3. Your files and dashboards

Your content is yours.We access and process the data in your files only to provide the Service to you — for example, to store the file, render your charts, reconcile columns when you upload a new version, and show dashboards to the people you invite. We do not sell your files or the data in them, and we do not use your uploaded data to advertise to you or to train machine-learning models.

You are responsible for the data you choose to upload, including having the right to upload it and to share it with anyone you invite. If your files contain personal information about other people, you are responsible for that data under any laws that apply to you, and Mizantiq acts as a processor of that data on your behalf.

4. Sharing and disclosure

Your dashboards are private by default. A dashboard you create is visible only to you and to the specific people you invite by email. Mizantiq does not publish your dashboards, make them discoverable, or index them. A forwarded invitation link does not grant access to anyone you did not invite.

There are two ways your dashboard data can reach someone else, and both require an action by you:

• Invitations. People you invite by email can view the dashboard you invited them to. You can revoke an invitation at any time.
• Embed links. On plans where the feature is available, you can generate an embed link for one of your dashboards. An embed link is public by design: anyone holding it can view a read-only copy of that dashboard without signing in, and it may be indexed by search engines if you publish it somewhere public. Only create an embed link for a dashboard you are willing to make public. Revoking the link from within the app stops it working immediately.

Connected applications.You can authorize a third-party application — for example an AI assistant that supports the Model Context Protocol — to access your account. If you do, information about your dashboards, including their configuration and the aggregated data needed to answer your requests, is sent to that application’s provider, where it is handled under that provider’s own privacy policy rather than this one. This only happens for connections you set up yourself, and you can revoke a connection at any time.

The example dashboards published on our public Explore pages are our own. They are built by the operator of Mizantiq from our own or public sample data. No user’s dashboard or uploaded data is ever published there.

We do not sell your personal information. Beyond the above, we disclose information only:

• To the service providers who help us operate the Service, described in Section 6;
• If required by law, legal process, or a valid government request, or to protect the rights, safety, and security of our users or the Service; and
• In connection with a business transfer (such as a merger or acquisition), in which case we will notify you of any material change to how your data is handled.

5. Payments

Payments for paid plans are processed by Kashier, a licensed Egyptian payment service provider. When you subscribe, you enter your card details directly with Kashier. Mizantiq never receives, sees, or stores your card number, expiry date, or security code.

Kashier processes your payment information as an independent controller under its own privacy policy, and may hold a secure token representing your card so that renewals can be charged. From Kashier we receive only what we need to run your subscription: a customer and subscription identifier, the status of each payment, the amount and currency, and the last four digits and card brand for your records.

If you cancel your subscription, we stop initiating charges. To ask Kashier to delete the card token it holds, contact us at support@mizantiq.com and we will pass the request on.

6. Service providers we use

We rely on a small number of trusted providers to run the Service. They process data only to provide their service to us and are not permitted to use it for their own purposes:

• Hostinger— database hosting. Stores your account details, dashboard configurations, and related metadata.
• Cloudflare R2— file storage. Stores the spreadsheet files you upload.
• Google— sign-in. If you choose Google sign-in, Google authenticates you and provides your basic profile information. Your use of Google sign-in is also subject to Google’s privacy policy.
• Brevo— email delivery. Sends transactional emails such as account verification, dashboard invitations, and billing notices.
• Railway— hosting for our data-processing service, which computes chart aggregations from your files.
• Kashier— payment processing for paid plans, as described in Section 5.

Providers of applications you connect yourself (see Section 4) are not in this list, because you choose them rather than us.

As Mizantiq grows we may add or change providers; we will keep this section up to date so it always reflects who processes your data.

7. International data transfers

Mizantiq and the providers listed above operate infrastructure that may be located in countries other than the one you live in. When your information is transferred to and processed in other countries, we take reasonable steps to ensure it remains protected consistent with this policy.

8. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the Service. You are in control of your data:

• You can delete individual files, dataset versions, and dashboards at any time from within the app.
• You can delete your entire account from the settings page. When you do, we remove your account together with your dashboards, datasets, uploaded files, pending invitations, embed links, and connected application authorizations, and we sign out and revoke your active sessions.
• Ending a paid subscription does not delete anything. Your content stays in your account under the terms described in our Terms of Service.

After deletion, some information may persist briefly in backups or logs before being overwritten in the ordinary course. We may also retain limited records where we are required to do so by law — in particular, records of payments and refunds, which we keep for as long as tax and accounting rules require even after an account is deleted.

9. Security

We take reasonable measures to protect your information, including encrypting data in transit (HTTPS), storing passwords only in hashed form, restricting access to stored files through time-limited signed links, and limiting who can access production systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your login credentials confidential. We recommend keeping your own copies of important files.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, update, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. You can exercise many of these directly in the app:

• Access & correction: view and update your account details in settings.
• Export: export your dashboard configurations from within the editor, and your chart data as CSV or PNG.
• Deletion: delete files, dashboards, or your whole account at any time.
• Revoking access: revoke invitations, embed links, and connected applications at any time.

To make any other request, email us at privacy@mizantiq.com. We will respond within a reasonable time. If you believe we have not addressed your concern, you may have the right to complain to your local data-protection authority.

11. Cookies

Mizantiq uses a single essential cookie to keep you signed in after you log in. This cookie is required for the Service to function and cannot be turned off while you are using your account. We do not use advertising cookies, third-party tracking, or cross-site profiling, and Mizantiq is ad-free.

When you go through checkout, our payment processor may set its own cookies on its checkout page for security and fraud prevention. Those are governed by its privacy policy, not this one. If we introduce optional analytics in the future, we will update this section and, where required, ask for your consent first.

12. Children

Mizantiq is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at privacy@mizantiq.com and we will delete it. Paid plans may only be purchased by someone aged 18 or over, as set out in our Terms of Service.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you within the Service. Your continued use of Mizantiq after an update means you accept the revised policy.

14. Contact us

For any privacy question or request, email privacy@mizantiq.com. For account, billing, or support questions, email support@mizantiq.com.