Privacy Policy
This Privacy Policy explains how Unlimitech Sp. z o.o. processes and protects personal information when you use mideo.io.
Last updated: August 20, 2026 · Document version: 1.0-en
This English document is intended for users in the United Kingdom, United States, Australia, Canada and other international markets. It is a product document, not legal advice. Please have qualified counsel review it before launch in any jurisdiction.
Section 1
Who controls your information
The controller is Unlimitech Sp. z o.o., ul. Armii Krajowej 7/308, 45-071 Opole, Poland, NIP 7543352764.
For privacy questions, requests or complaints, contact privacy@mideo.io. You may also write to iodo@unlimitech.pl.
Section 2
Information we collect
- Account information such as name, email address, company, role, phone number and encrypted password.
- Content you submit, including briefs, offers, client details, service catalogues, files and documents.
- Technical information such as IP address, approximate location, browser, device, timestamps and security logs.
- Usage and offer analytics such as viewed sections, time on a page, interactions, link clicks and purchasing decisions.
- Communication and consent records, including document versions, consent timestamps and email delivery or open events.
- Payment and billing information handled through Stripe. We do not store full payment-card numbers.
We collect information directly from you, from your use of the service, and from clients or visitors when you choose to invite them to a brief or offer.
Section 3
How and why we use information
- Provide, secure and maintain the mideo platform, accounts and authentication.
- Create briefs, offers, estimates, client records and other features you request.
- Provide AI-assisted generation and analytics, with outputs subject to your review.
- Process subscriptions, payments, taxes, invoices, support and service communications.
- Prevent fraud, abuse and security incidents, and keep audit records.
- Improve reliability and develop features, using aggregated or de-identified information where practical.
- Meet legal, accounting and regulatory obligations.
Depending on the jurisdiction, our legal bases include contract performance, consent, legitimate interests, and compliance with legal obligations. You may withdraw consent at any time.
Section 4
AI-assisted features
mideo may send the limited business content needed for an AI feature to OpenAI. We do not intentionally send passwords, payment-card data, government identifiers, contact details or other direct identifiers to AI models. We do not use your content to train external providers’ general models.
AI-generated text, estimates, scoring and suggestions are assistance only. You control whether to use, edit or share them, and mideo does not make decisions with legal or similarly significant effects about you solely by automated means.
Section 5
Service providers and international transfers
We use the following processors and service providers. They receive only information needed for their service and must protect it under contract:
| Provider | Purpose | Location / safeguards |
|---|---|---|
| Replit, Inc. | Application hosting, runtime and infrastructure | United States; contractual safeguards and applicable SCCs |
| Neon Database | Managed PostgreSQL database hosting | United States / regional cloud locations; SCCs or equivalent safeguards |
| Google Cloud Storage | Secure storage for uploaded files and documents | Configured cloud region; SCCs, UK Addendum or adequacy decision where applicable |
| OpenAI | AI-assisted brief, offer and service generation | United States; data-processing terms and applicable SCCs |
| Stripe | Payments, subscriptions, tax and invoicing support | International processing; Stripe contractual safeguards and applicable transfer mechanism |
When information leaves the UK, EEA or another jurisdiction with transfer restrictions, we use an adequacy decision where available, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent contractual and technical safeguards. You can request further information about the relevant safeguard through our privacy contact.
Section 6
UK GDPR and European rights
For UK and EEA users, you may request access, correction, deletion, restriction, portability or objection to processing, and you may complain to the UK Information Commissioner’s Office or your local supervisory authority. Where processing relies on consent, withdrawal does not affect earlier lawful processing.
We retain records needed to demonstrate compliance and do not use solely automated decisions that produce legal or similarly significant effects. We respond to valid requests without undue delay and generally within one month, subject to lawful extensions.
Section 7
United States and California privacy rights
Depending on where you live, applicable US privacy laws may give you rights to know or access the categories and specific pieces of personal information we collect, correct inaccurate information, delete information, obtain a portable copy, limit certain sensitive-information uses, and opt out of sale or sharing for targeted advertising.
We do not sell personal information for money. We may share limited information with service providers to operate mideo. California residents may submit a request or opt out through our Do Not Sell or Share My Personal Information page. We will not discriminate against you for exercising applicable rights and may verify requests as permitted by law.
Section 8
Australia: Privacy Act and the 13 APPs
For Australian users, we handle personal information consistently with the Privacy Act 1988 and the Australian Privacy Principles (APPs), including transparent collection notices, lawful and fair collection, purpose limitation, use and disclosure controls, data quality, security, access and correction, and cross-border disclosure safeguards.
You may request access to or correction of your information and complain to us at privacy@mideo.io. If we do not resolve your complaint, you may contact the Office of the Australian Information Commissioner. Where we disclose information overseas, we take reasonable steps to ensure the recipient handles it consistently with applicable APP requirements.
Section 9
Canada: PIPEDA consent and access
For Canadian users, we process personal information under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable substantially similar provincial laws. We identify purposes, obtain meaningful consent where required, limit collection and retention, use reasonable safeguards, and remain accountable for information handled by service providers.
You may withdraw consent subject to legal or contractual limits, request access or correction, and ask questions about our handling of your information by contacting privacy@mideo.io. We may need to verify your identity before responding.
Section 10
Retention and deletion
We keep account and user content while your account is active and for a reasonable period afterward to provide recovery, resolve disputes, enforce agreements and meet legal, tax and accounting obligations. Security, consent and billing records may be retained for the period required by law. Backups are deleted on a managed cycle.
You can request deletion at any time, but we may retain information where required or permitted by law, or where it is necessary to establish, exercise or defend legal claims.
Section 12
Email tracking
Transactional emails may include delivery, open and link-click measurement to help us operate the service. An email recipient may request anonymisation of their address in email statistics by contacting privacy@mideo.io.
Section 13
Security
We use access controls, encrypted transport, password hashing, audit logs, monitoring and provider security controls appropriate to the risk. No internet service is completely secure. Please protect your credentials and tell us promptly about suspected unauthorised access.
Section 14
Changes and contact
We may update this policy to reflect changes to the service, law or processing. We will publish the new version and, where required, ask for renewed consent. The version and date shown above identify the document currently presented to you.
Privacy requests: privacy@mideo.io
General support: support@mideo.io
Unlimitech Sp. z o.o., ul. Armii Krajowej 7/308, 45-071 Opole, Poland.