Privacy Policy

Last Updated: March 10, 2025

Your privacy is important to us. This Privacy Policy explains what information we collect from users of our AI-backed business model canvas web application and our Tool Review Bot (the “Service”), how we use and share that information, and your rights regarding your data. By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.

1. Information We Collect

We collect personal data and usage information to provide and improve the Service. This includes:

  • Information You Provide Directly: When creating an account or using the Service, you may provide your name, email address, login credentials, payment info, and any business or project data input for generating canvases.
  • Usage Data: We automatically collect data like IP addresses, browser type, device info, pages visited, and timestamps.
  • Analytics Data: Third-party analytics (e.g., Google Analytics) track usage patterns such as pages viewed and interactions with features.
  • Payment Information: If you pay for any feature, the third-party payment processor collects your payment details. We only store transaction records as needed.
  • Communications: If you contact us, we receive your message plus any contact info you provide.

Please do not submit sensitive personal data (e.g., social security numbers, health information) through the Service.

2. How We Use Your Information

  • Providing and Improving the Service: We use your data to generate canvases, debug issues, and enhance functionality.
  • Account Management: Your account info (email, etc.) helps us authenticate you, provide support, and send important notifications.
  • Payments and Transactions: We manage subscription fees or purchases with trusted payment processors and retain necessary financial records.
  • Communication: With your consent or as allowed by law, we may send newsletters, marketing emails, or respond to inquiries.
  • Analytics and Personalization: Usage patterns help us personalize content and refine user experience.
  • Ensure Security: Logs and IP addresses may be used to detect fraud, prevent misuse, and protect our systems.
  • Legal Compliance: We retain data as needed to comply with legal obligations (e.g., tax records or responding to lawful requests).

3. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance the Service and gather usage data. Types include:

  • Essential Cookies: Required for core Service functions.
  • Analytics Cookies: Track user interactions to help us improve features.
  • Preference Cookies: Remember user settings (e.g., language preferences).
  • Advertising Cookies: Not currently used, but if we add them, we will update this policy.

Third-party services (like Google Analytics) may also set cookies. You can block or delete cookies in your browser settings, though doing so may affect your experience. We honor legal requirements for Do Not Track signals if applicable, but note there is no universal standard for DNT.

4. Third-Party Services and Data Sharing

  • No Data Sales: We do not sell your personal information to third parties.
  • Service Providers: Trusted third parties help us host (Azure), process payments, and provide analytics or email services. They only access data as needed to perform their tasks.
  • Business Transfers: In a merger or sale, your data may transfer to the new entity with notice to you.
  • Legal Requirements: We may disclose info if required by law or to protect our rights.
  • With Your Consent: If you explicitly authorize data sharing, we will comply with your instructions.

5. Data Storage and Security

We host our data on Microsoft Azure servers with encryption at rest and in transit (HTTPS/SSL). Access controls limit who can see personal data. While no method is 100% secure, we continuously improve our security measures to minimize risks. We will notify you and authorities as needed in case of a data breach.

6. Data Retention

  • Account Information: Retained as long as your account is active. We delete or anonymize data upon account closure unless laws require retention.
  • Generated Content: Stored until deleted by you or you close your account.
  • Transactional Records: Kept for legal and financial audits, typically for at least 7 years.
  • Analytics Data: Often stored in aggregated or anonymized form for improvement and historical analysis.
  • Backups: Residual data may remain in secure backups for a limited time before being overwritten.

7. Your Rights and Choices

  • Access and Portability: Request a copy of your personal data in a common format.
  • Correction: Update inaccurate or incomplete information.
  • Deletion: Ask us to remove your data. We’ll comply unless legal obligations require retention.
  • Objection and Restriction: You can object to certain data uses or request limited processing.
  • Withdraw Consent: If processing is based on consent, you can revoke that consent at any time.
  • Non-Discrimination (CCPA): We will not discriminate if you exercise your rights.

Contact us at contact@mi5.dev to exercise these rights. We may request additional info to verify your identity and will respond within legal timeframes.

8. Children’s Privacy

The Service is not for children under 18, and we do not knowingly collect data from minors. If you discover a child has provided personal info, notify us so we can delete it promptly.

9. International Users and Data Transfers

Our Company is based in Brazil, and data may be processed on Azure servers in the USA or other locations. We handle data under this Privacy Policy regardless of where it is processed, and we take lawful measures for international transfers as required (e.g., standard contractual clauses).

10. Changes to this Privacy Policy

We may update this policy as needed to reflect changes in technology, law, or our practices. We will revise the “Last Updated” date and may provide additional notice for significant changes. Continuing to use the Service after updates means you accept the revised policy.

11. Contact Us

For questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: contact@mi5.dev
Mi5 Desenv. Licenc. Softwares Ltda
Rua Rio de Janeiro, 243/802
Belo Horizonte - MG - Brasil

We value your trust and strive to protect your personal data.