Privacy & data protection

Privacy Policy

This Privacy Policy explains how Unlimitech Sp. z o.o. processes and protects personal information when you use mideo.io.

Last updated: August 20, 2026 · Document version: 1.0-en

This English document is intended for users in the United Kingdom, United States, Australia, Canada and other international markets. It is a product document, not legal advice. Please have qualified counsel review it before launch in any jurisdiction.

Section 1

Who controls your information

The controller is Unlimitech Sp. z o.o., ul. Armii Krajowej 7/308, 45-071 Opole, Poland, NIP 7543352764.

For privacy questions, requests or complaints, contact privacy@mideo.io. You may also write to iodo@unlimitech.pl.

Section 2

Information we collect

  • Account information such as name, email address, company, role, phone number and encrypted password.
  • Content you submit, including briefs, offers, client details, service catalogues, files and documents.
  • Technical information such as IP address, approximate location, browser, device, timestamps and security logs.
  • Usage and offer analytics such as viewed sections, time on a page, interactions, link clicks and purchasing decisions.
  • Communication and consent records, including document versions, consent timestamps and email delivery or open events.
  • Payment and billing information handled through Stripe. We do not store full payment-card numbers.

We collect information directly from you, from your use of the service, and from clients or visitors when you choose to invite them to a brief or offer.

Section 3

How and why we use information

  • Provide, secure and maintain the mideo platform, accounts and authentication.
  • Create briefs, offers, estimates, client records and other features you request.
  • Provide AI-assisted generation and analytics, with outputs subject to your review.
  • Process subscriptions, payments, taxes, invoices, support and service communications.
  • Prevent fraud, abuse and security incidents, and keep audit records.
  • Improve reliability and develop features, using aggregated or de-identified information where practical.
  • Meet legal, accounting and regulatory obligations.

Depending on the jurisdiction, our legal bases include contract performance, consent, legitimate interests, and compliance with legal obligations. You may withdraw consent at any time.

Section 4

AI-assisted features

mideo may send the limited business content needed for an AI feature to OpenAI. We do not intentionally send passwords, payment-card data, government identifiers, contact details or other direct identifiers to AI models. We do not use your content to train external providers’ general models.

AI-generated text, estimates, scoring and suggestions are assistance only. You control whether to use, edit or share them, and mideo does not make decisions with legal or similarly significant effects about you solely by automated means.

Section 5

Service providers and international transfers

We use the following processors and service providers. They receive only information needed for their service and must protect it under contract:

ProviderPurposeLocation / safeguards
Replit, Inc.Application hosting, runtime and infrastructureUnited States; contractual safeguards and applicable SCCs
Neon DatabaseManaged PostgreSQL database hostingUnited States / regional cloud locations; SCCs or equivalent safeguards
Google Cloud StorageSecure storage for uploaded files and documentsConfigured cloud region; SCCs, UK Addendum or adequacy decision where applicable
OpenAIAI-assisted brief, offer and service generationUnited States; data-processing terms and applicable SCCs
StripePayments, subscriptions, tax and invoicing supportInternational processing; Stripe contractual safeguards and applicable transfer mechanism

When information leaves the UK, EEA or another jurisdiction with transfer restrictions, we use an adequacy decision where available, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent contractual and technical safeguards. You can request further information about the relevant safeguard through our privacy contact.

Section 6

UK GDPR and European rights

For UK and EEA users, you may request access, correction, deletion, restriction, portability or objection to processing, and you may complain to the UK Information Commissioner’s Office or your local supervisory authority. Where processing relies on consent, withdrawal does not affect earlier lawful processing.

We retain records needed to demonstrate compliance and do not use solely automated decisions that produce legal or similarly significant effects. We respond to valid requests without undue delay and generally within one month, subject to lawful extensions.

Section 7

United States and California privacy rights

Depending on where you live, applicable US privacy laws may give you rights to know or access the categories and specific pieces of personal information we collect, correct inaccurate information, delete information, obtain a portable copy, limit certain sensitive-information uses, and opt out of sale or sharing for targeted advertising.

We do not sell personal information for money. We may share limited information with service providers to operate mideo. California residents may submit a request or opt out through our Do Not Sell or Share My Personal Information page. We will not discriminate against you for exercising applicable rights and may verify requests as permitted by law.

Section 8

Australia: Privacy Act and the 13 APPs

For Australian users, we handle personal information consistently with the Privacy Act 1988 and the Australian Privacy Principles (APPs), including transparent collection notices, lawful and fair collection, purpose limitation, use and disclosure controls, data quality, security, access and correction, and cross-border disclosure safeguards.

You may request access to or correction of your information and complain to us at privacy@mideo.io. If we do not resolve your complaint, you may contact the Office of the Australian Information Commissioner. Where we disclose information overseas, we take reasonable steps to ensure the recipient handles it consistently with applicable APP requirements.

Section 9

Canada: PIPEDA consent and access

For Canadian users, we process personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable substantially similar provincial laws. We identify purposes, obtain meaningful consent where required, limit collection and retention, use reasonable safeguards, and remain accountable for information handled by service providers.

You may withdraw consent subject to legal or contractual limits, request access or correction, and ask questions about our handling of your information by contacting privacy@mideo.io. We may need to verify your identity before responding.

Section 10

Retention and deletion

We keep account and user content while your account is active and for a reasonable period afterward to provide recovery, resolve disputes, enforce agreements and meet legal, tax and accounting obligations. Security, consent and billing records may be retained for the period required by law. Backups are deleted on a managed cycle.

You can request deletion at any time, but we may retain information where required or permitted by law, or where it is necessary to establish, exercise or defend legal claims.

Section 11

Cookies and similar technologies

Privacy settings are available on every page. Your choice is renewed after 180 days or a notice-version change. Decision evidence contains a random identifier, notice version, choices and recording time; server records are retained for up to 12 months. This register does not store IP addresses or cookie values.

This inventory covers mideo's own technologies, including localStorage, sessionStorage and cache. Refusing optional use does not limit access. Strictly necessary technologies operate without consent. External payment pages and customer-provided embeds require their providers' separate disclosures.

External services

GAESA - mideo.io

A cookie on mideo.io, stored for approximately 30 days. You can remove or block it in your browser settings.

Google Fonts

Fonts are provided by Google. When downloading them, your browser connects to fonts.googleapis.com and fonts.gstatic.com, sending your IP address and request data. Fonts load when you open the page, regardless of your choices.

session_id
Purpose and provider
Maintain a signed-in session. - mideo
Storage and retention
HTTP cookie; HttpOnly. Usually 30 days; depends on the sign-in flow.
Consent
Strictly necessary - always active.
admin_original_session
Purpose and provider
Return an administrator from impersonation. - mideo
Storage and retention
HTTP cookie; HttpOnly. Up to 4 hours.
Consent
Strictly necessary - always active.
mideo_cookie_consent
Purpose and provider
Remember the version and scope of your choice. - mideo
Storage and retention
localStorage; in-memory for this tab if storage is blocked. Up to 180 days; choice is requested again after expiry.
Consent
Strictly necessary - always active.
offer_unlocked_*
Purpose and provider
Keep an unlocked proposal accessible in this tab. - mideo
Storage and retention
sessionStorage. Until the tab is closed.
Consent
Strictly necessary - always active.
brief_unlocked_*
Purpose and provider
Keep an unlocked brief accessible in this tab. - mideo
Storage and retention
sessionStorage. Until the tab is closed.
Consent
Strictly necessary - always active.
mideo_locale
Purpose and provider
Remember the preferred interface language. - mideo
Storage and retention
localStorage. Until removed by the user or browser.
Consent
Optional - off by default, individually selectable.
mideo_region
Purpose and provider
Remember regional formatting preferences. - mideo
Storage and retention
localStorage. Until removed by the user or browser.
Consent
Optional - off by default, individually selectable.
sidebar_state
Purpose and provider
Remember the sidebar state. - mideo
Storage and retention
First-party cookie. 7 days.
Consent
Optional - off by default, individually selectable.
onboarding-collapsed-session
Purpose and provider
Remember whether the checklist is collapsed in this tab. - mideo
Storage and retention
sessionStorage. Until the tab is closed.
Consent
Optional - off by default, individually selectable.
onboarding-tab-tour-progress
Purpose and provider
Remember offer tour progress. - mideo
Storage and retention
localStorage. Until removed by the user or browser.
Consent
Optional - off by default, individually selectable.
pwa-install-dismissed-session
Purpose and provider
Dismiss the app-install prompt for this tab session. - mideo
Storage and retention
sessionStorage. Until the tab is closed.
Consent
Optional - off by default, individually selectable.
offer_email_captured_*
Purpose and provider
Remember an email-gate step for a proposal; this is not authentication. - mideo
Storage and retention
localStorage. No automatic TTL; removed when consent is withdrawn.
Consent
Optional - off by default, individually selectable.
blog_visitor_fingerprint
Purpose and provider
Recognize a reader's own article reactions. - mideo
Storage and retention
Pseudonymous identifier in localStorage. No automatic TTL; removed when consent is withdrawn.
Consent
Optional - off by default, individually selectable.
mideo-v2
Purpose and provider
Cache static assets and the start page for offline use. - mideo
Storage and retention
Cache Storage `mideo-v2`; service worker. Until version replacement, browser clearing, or consent withdrawal.
Consent
Optional - off by default, individually selectable.
offer_visitor_id
Purpose and provider
Associate proposal visits with engagement. - mideo
Storage and retention
Pseudonymous identifier in localStorage. No automatic TTL; removed when consent is withdrawn.
Consent
Optional - off by default, individually selectable.
offer_visits_*
Purpose and provider
Count repeat visits to a specific proposal. - mideo
Storage and retention
A localStorage value for each proposal. No automatic TTL; removed when consent is withdrawn.
Consent
Optional - off by default, individually selectable.
blog_view_*
Purpose and provider
Limit article view counting to once per tab. - mideo
Storage and retention
sessionStorage; view is reported to mideo. Until the tab is closed.
Consent
Optional - off by default, individually selectable.
mideo proposal analytics (API)
Purpose and provider
Record proposal engagement; also required by session recording. - mideo
Storage and retention
First-party identifier and counters; API requests. Browser data has no automatic TTL; server data follows mideo settings.
Consent
Optional - off by default, individually selectable.
mideo session recording (API)
Purpose and provider
Record proposal interactions for playback. - mideo
Storage and retention
In-tab event buffer; mideo API requests. Local buffer until sent; server retention follows mideo settings.
Consent
Optional - off by default, individually selectable.

mideo uses strictly necessary technologies for sessions, authentication, security and remembering your cookie choice. With your consent where required, we use analytics to understand offer engagement, performance and errors. You can accept or reject analytics in the cookie banner and control cookies through your browser.

Client offer pages may record engagement events only after analytics consent. Rejecting analytics does not prevent you from viewing an offer or using essential features.

Section 12

Email tracking

Transactional emails may include delivery, open and link-click measurement to help us operate the service. An email recipient may request anonymisation of their address in email statistics by contacting privacy@mideo.io.

Section 13

Security

We use access controls, encrypted transport, password hashing, audit logs, monitoring and provider security controls appropriate to the risk. No internet service is completely secure. Please protect your credentials and tell us promptly about suspected unauthorised access.

Section 14

Changes and contact

We may update this policy to reflect changes to the service, law or processing. We will publish the new version and, where required, ask for renewed consent. The version and date shown above identify the document currently presented to you.

Privacy requests: privacy@mideo.io
General support: support@mideo.io
Unlimitech Sp. z o.o., ul. Armii Krajowej 7/308, 45-071 Opole, Poland.