Privacy Policy

Who we are

Mise is run by HW Tech Ltd (company number 15834771), 86-90 Paul Street, London, England, EC2A 4NE (“we”, “us”). For personal data about our customers and website visitors, we are the controller.

For personal data inside the content our customers put into Mise (for example, people in photos, or names in product data), our customer is the controller and we process it on their behalf.

Contact us about privacy at [email protected].

What we collect

• Account details: your name (if you give it), email address, and your Google profile basics if you sign in with Google.
• Brand and team details: brand names, who is a member, invites and roles.
• Billing details: handled by Stripe. We see the billing name, address, VAT number and the last four digits of the card, not the full card number.
• Content: files and text you or your team add, and what Mise makes from them.
• Usage: what you do in Mise (for example, uploads, searches and designs), device and browser details, IP address and logs, used to run, secure and improve the service.
• Share and portal visits: when someone opens a link or portal, we record views and downloads for the brand that shared it, and, for portals that require sign-in, the visitor’s email.
• Messages: anything you send us, such as feedback or emails.

How we use it, and why

• To provide Mise and keep it secure (contract, and our legitimate interest in a secure service).
• To take payment and keep financial records (contract, and legal obligation).
• To send service emails such as sign-in links, invites and billing notices (contract).
• To understand and improve Mise, using usage data (legitimate interests).
• To tell you about new features, only where you have agreed or where the law allows it for existing customers. You can opt out at any time.

We do not sell personal data. We do not use your content to train AI models, and Mise does not use face recognition.

Who we share it with

We use these providers to run Mise. They act on our instructions under contracts that protect your data:

• Supabase: database, file storage and sign-in (EU).
• Railway: hosting the app (EU).
• Stripe: payments (UK, EU and US).
• Resend: sending email (EU).
• Anthropic: AI for organising files, brand kits and Studio designs (US).
• Voyage AI: AI search (US).
• Google, Dropbox and Box: only when you choose to import files from them, or sign in with Google.

We may also share data if the law requires it, to protect our rights or users, or as part of a sale or reorganisation of our business (with the same protections).

International transfers

Some providers are outside the UK. Where personal data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.

How long we keep it

• Account and content: while your account or brand is active. When deleted, content is removed from the live service within 30 days and from backups within a further 90 days.
• Billing records: 6 years, as UK tax law requires.
• Logs and usage data: up to 12 months.

Your rights

You can ask to see, correct, delete or receive a copy of your personal data, and to object to or restrict how we use it. Email us and we will respond within one month. If your data is in a customer’s content, we will pass your request to that customer.

If you are unhappy with how we handle your data, please tell us. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

The Mise app uses only essential cookies: to keep you signed in, and to remember when you have unlocked a passcode-protected link or portal. We do not use advertising cookies in the app.

Changes

We will update this policy when how we handle data changes, and tell customers by email about significant changes.