Privacy Policy

Introduction

Welcome to MeasureMint ("we," "our," or "us"). MeasureMint is an architectural, engineering, and construction scale calibration and measurement application for Miro boards. We are committed to protecting your privacy and ensuring transparency about how we collect, process, and safeguard your information in accordance with global data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA).

Contact & Identification Details:

• Product: MeasureMint
• Website: https://measuremint.app
• Support & Privacy Inquiries: support@measuremint.app
• Merchant of Record & Billing Address: Paddle.com Market Limited, Judd House, 18-29 Mora Street, London, EC1V 8BT, United Kingdom

1. Information We Collect

1.1 Information You Provide

Miro Authentication:

• Miro user ID and team/organization ID (for authentication and authorization)
• Miro board permissions granted via OAuth consent
• OAuth access tokens (securely encrypted and stored)

Support & Feedback Requests:

• Name and email address (when you contact support or submit feedback)
• Support inquiry correspondence and technical details about reported issues

Newsletter & Updates:

• Email address and optional name/details when subscribing to the MeasureLetter newsletter

1.2 Information Automatically Collected

Usage & Tool Interactions:

• Measurement interactions (calibration events, tool selections, unit preference: Imperial vs Metric)
• Aggregated and pseudonymized product performance and error telemetry

Technical Data:

• Browser type and version, operating system, and device screen dimensions
• Truncated IP address (anonymized for geographic and performance diagnostics)
• Session duration and feature engagement metrics

1.3 Information We Do NOT Collect

• ❌ We do NOT read, copy, or store your Miro board content, blueprints, or diagrams on our servers. Calculations are computed client-side within your browser and markers are placed directly on your Miro board.
• ❌ We do NOT sell, rent, or trade your personal information to third parties.
• ❌ We do NOT collect credit card or payment card numbers directly; all billing is processed securely by our online Merchant of Record, Paddle.com.

2. How We Use Your Information

We process personal information under the following legal bases:

• Performance of Contract (GDPR Art. 6(1)(b)): To authenticate your Miro user identity, maintain scale calibration metadata, verify active subscription entitlements, and render measurements on your board.
• Legitimate Interests (GDPR Art. 6(1)(f)): To maintain application security, debug technical anomalies, prevent fraudulent use, and optimize application stability.
• Consent (GDPR Art. 6(1)(a)): For optional marketing emails (MeasureLetter), optional behavioral analytics (Microsoft Clarity, Google Analytics), and optional survey feedback. You may withdraw consent at any time.
• Legal Obligation (GDPR Art. 6(1)(c)): To maintain accounting and financial compliance through Paddle for commercial purchases.

3. Data Storage and Security

3.1 Where We Store Data

Application Database:

• Database infrastructure is hosted on secure enterprise cloud servers via Supabase / PostgreSQL on AWS (United States region).
• Sensitive credentials and tokens are encrypted at rest using industry-standard AES-256 encryption.
• Temporary rate limiting and security counters are maintained in high-performance distributed Redis (Upstash).

Measurement Data:

• Active measurement sessions are processed locally within your browser session memory.
• Calibration scale ratios are saved directly to your Miro board item metadata under your Miro organization's governance.
• No permanent server-side copies of your visual drawings or blueprint files are ever stored on MeasureMint servers.

3.2 Technical & Organizational Security Measures

• ✅ Encryption in Transit: All communications enforce HTTPS using TLS 1.3 encryption.
• ✅ Encryption at Rest: Database tables and backups are encrypted using AES-256.
• ✅ Strict Access Controls: Production environments require multi-factor authentication and least-privilege credentials.
• ✅ Zero Plaintext Secret Storage: OAuth client secrets, webhook signing keys, and payment tokens are stored in secure environment variables.

4. Third-Party Sub-processors & Services

To operate MeasureMint, we partner with reputable third-party service providers (sub-processors) who process data on our behalf under strict confidentiality and data protection agreements:

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• OAuth Session Tokens: Maintained while MeasureMint remains installed in your Miro workspace. Automatically invalidated when you uninstall the app or revoke access.
• Subscription Records: Retained for the duration of your active subscription and as required by tax laws (typically 7 years for financial records managed by Paddle).
• Support Correspondence: Retained for 24 months to assist with customer service continuity, after which inquiries are permanently deleted.
• Waitlist & Newsletter Subscriptions: Maintained until you unsubscribe via the 1-click link in any email or request removal.

6. Your Rights and Choices

Depending on your location, you have rights under the GDPR, UK GDPR, and CCPA/CPRA, including:

• Right to Access & Portability: Request confirmation of whether we process your data and receive an electronic copy.
• Right to Erasure ("Right to be Forgotten"): Request that we delete your personal data.
• Right to Rectification: Request correction of inaccurate information.
• Right to Withdraw Consent: Revoke consent for analytics or marketing at any time without penalty.
• Right to Non-Discrimination: We will never discriminate against you for exercising your privacy rights.

How to Exercise Your Rights:

You can submit an immediate self-serve data erasure or portability request using our online portal at https://measuremint.app/privacy/delete-request or email us at support@measuremint.app. We fulfill verified requests within 30 days.

7. Cookies and Tracking Technologies

We utilize cookies and LocalStorage to remember preferences, keep your session active, and, with your consent, gather diagnostic performance data. Full details on each cookie name, provider, category, and lifespan are documented in our dedicated Cookie Policy.

You can manage or revoke your cookie choices at any time by clicking "Cookie Settings" in our footer or visiting https://measuremint.app/cookies.

8. Children's Privacy

MeasureMint is designed strictly for business, architectural, engineering, and educational use by adults. We do not knowingly collect or solicit personal information from children under the age of 13 (or under 16 in the EEA/UK), in compliance with the Children's Online Privacy Protection Act (COPPA) and GDPR Article 8. If you believe a minor has submitted personal data to us, please notify us at support@measuremint.app and we will delete it promptly.

9. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy:

• Support & Compliance Email: support@measuremint.app
• Privacy Request Form: https://measuremint.app/privacy/delete-request
• Merchant of Record: Paddle.com Market Ltd, Judd House, 18-29 Mora Street, London, EC1V 8BT, United Kingdom