Privacy Policy

The short version

We only collect information that helps us run MicProtocol for you. We don't sell your data. You can delete your account and all your data at any time. If you have questions, email us at privacy@micprotocol.io.

1. What we collect and why

Account information

When you sign up, we collect your name and email address. We use these to create your account, send you important notifications (like login alerts), and let you log in.

Podcast and guest data

When you add guests, create podcasts, or run outreach campaigns, we store that information so the platform can work for you. This data belongs to you — we only process it on your behalf.

Files you upload

If you or your guests upload headshots, audio files, or documents, we store them securely so you can access them later. We scan uploads for security risks but don't look at their contents.

Usage data

We collect basic information about how you use the platform — such as which features you use most — so we can improve MicProtocol. We don't sell this to advertisers.

Billing information

If you subscribe, payments are handled by Stripe. We never see or store your full card number. We only store the last 4 digits and expiry date so you can recognise which card is on file.

2. How we use your information

• To run the platform and provide the features you signed up for
• To send emails you've asked for (booking confirmations, outreach sequences, etc.)
• To send important account notifications (security alerts, invoices)
• To fix bugs and improve performance
• To comply with the law

We will never sell your information to third parties or use it to show you ads.

3. Who we share your data with

We share your data only with services that help us run MicProtocol:

• Stripe — payments and subscriptions
• AWS / Cloudflare R2 — file storage
• Meilisearch — search (hosted by us)
• Sentry — error tracking (anonymised)
• Formbricks — in-app surveys (optional)

Every third-party service is contractually required to protect your data and use it only to provide their service to us.

4. Cookies

We use a small number of cookies. Your login session is stored in a secure, HTTP-only cookie (it can't be read by JavaScript, which protects against common attacks). We don't use advertising or tracking cookies. See our Cookie Policy for details.

5. Your rights

You can always:

• Download your data — export everything from your account settings
• Delete your account — removes all your data permanently within 30 days
• Correct your information — update it any time in settings
• Object to processing — email us and we'll stop within 30 days

6. How long we keep your data

We keep your data as long as your account is active. When you delete your account, we permanently delete your personal data within 30 days. Some data may be kept longer if required by law (e.g. invoice records for tax purposes — typically 7 years).

7. Security

We take security seriously. Your data is encrypted in transit (HTTPS/TLS) and at rest. Passwords are hashed using bcrypt — we can't see them even if we wanted to. Read more on our Security page.

8. Children

MicProtocol is not intended for anyone under the age of 16. We don't knowingly collect data from children. If you believe we have, please contact us immediately.

9. Changes to this policy

If we make significant changes, we'll notify you by email and show a banner in the app at least 30 days before the change takes effect. Minor updates (fixing typos, clarifying language) won't be announced separately.

10. Contact us

Questions, concerns, or requests? Email us at privacy@micprotocol.io. We aim to respond within 2 business days.