Mianea

1. Introduction and Data Controller

Mianea is a personal reading assistant that helps you manage your newsletter subscriptions. This Privacy Policy outlines how your personal data is collected, used, and protected. For the purposes of the General Data Protection Regulation (GDPR), the data controller is the private individual operating Mianea ("Operator"). The Service is provided on a hobby basis by the author.

2. Legal Basis for Processing

We process your personal data based on your explicit consent and the necessity of fulfilling our contractual obligations to you. By creating an account, you consent to this policy and enter into a contract for the provision of our Service.

3. Data Collected and Processed

Mianea processes the following data:

• Email address: Your primary login identifier, used to authenticate your access, manage your account, and send your personalized newsletter digests.
• User Configuration: Your selections of newsletters, digest frequency, language preference, and custom AI instructions. This data is used solely to generate your personalized digest according to your choices.
• Connected Account Information: When you connect a third-party account (e.g., Google or Microsoft), we securely store an encrypted access token and refresh token. These tokens are used to access your email inbox on your behalf. We do not store your account password.
• Subscription Information: For Pro users, we store your Stripe Customer ID and your subscription status to manage your plan. We do not store your payment details (e.g., credit card numbers).
• Session Data: A technical cookie is used to maintain your login session. No tracking cookies or third-party analytics are used without your explicit consent.

4. Compliance with Third-Party Platform Policies

Mianea is committed to complying with the developer policies and user data requirements of all third-party platforms you choose to connect to our service. Our handling of data from these services is governed by their respective policies.

For Google Users

Mianea's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We are committed to protecting your data and using it solely to provide the core functionality of our service.

Our Commitment to Data Protection and AI Model Training:

• We explicitly affirm that information received from Google APIs is not used by Mianea to develop, improve, or train any Artificial Intelligence and/or Machine Learning models.
• To generate your digests, we transfer the content of your selected newsletters to third-party AI service providers, such as Google Gemini API.
• As part of our commitment to you, we conduct due diligence on our partners. This includes reviewing their Terms of Service and Privacy Policies to ensure they are consistent with our data protection requirements. We actively monitor these policies for any changes that would conflict with our promise to safeguard your data.

For Microsoft Users

Similarly, our use of data accessed via Microsoft APIs adheres to the Microsoft APIs Terms of Use and the Microsoft Privacy Statement. We process data from your Outlook account with the same commitment to privacy and limited, purpose-driven use as described in this policy.

5. How We Handle Your Email Content

When you use Mianea, you grant us read-only permission to your connected email inbox. This permission is strictly limited and used only to provide the service you have requested. This process operates as follows:

• Limited and Purpose-Driven Access: Our application accesses only the emails from newsletter senders you have explicitly selected in your Mianea dashboard. We do not process, any other emails in your inbox.
• Real-Time, Ephemeral Processing: Email content from your selected newsletters is fetched in real-time, sent for summarization, and then immediately discarded from our systems. We do not store copies of your newsletters or their full content on our servers.
• No Modification Rights: Our access is strictly read-only (e.g., via scopes like Google's `gmail.readonly`). We do not have permission to send, delete, or modify any emails or data in your account.

In this process, you remain the data controller of your email content, and Mianea acts as a data processor on your behalf, processing the data strictly according to your instructions.

6. Use of Third-Party Services

To provide the Service, we utilize several third-party services. These services act as data processors and are bound by their own privacy policies:

• Google Gemini API: For AI summarization. As outlined in Section 4, the newsletter content is transferred for the sole purpose of generating your digest and not for training generalized models.
• MailerSend API: For sending system emails and your personalized digests. We share only your email address and the digest content with this service.
• Stripe: For processing subscriptions. We share your email address and manage your billing status via a customer ID. Your full payment details are handled by Stripe directly and never touch our servers.
• PostHog: For product analytics and user experience improvement, if you provide consent. We use PostHog to understand how you interact with the Mianea application. We do not send the content of your newsletters or AI digests to PostHog.
• Tawk.to: For providing live chat and customer support, if you provide consent. Tawk.to may collect information to facilitate real-time communication.

7. Data Security and Retention

We implement robust technical and organizational measures to protect your data. Your account tokens are encrypted at rest using a strong, industry-standard encryption algorithm (AES-256-CBC). Access to your personal data is restricted to authorized personnel on a need-to-know basis. We retain your data only for as long as your account is active. Upon account deletion, all associated data, including encrypted tokens and configuration, is permanently and irreversibly removed from our systems.

8. Your Rights Under GDPR

As a user in the European Economic Area (EEA), you have the following rights regarding your data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that any inaccurate or incomplete data be corrected.
• Right to Erasure ("Right to be Forgotten"): You can delete your account and all associated data at any time from your dashboard.
• Right to Object: You can object to us processing your data by deleting your account.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Withdraw Consent: You can withdraw your consent for account access at any time by disconnecting the Mianea app from your respective account settings (e.g., in your Google or Microsoft account).

9. Cookies Policy

Our Service uses cookies and similar technologies to function correctly, improve your experience, and understand how you use our application. A cookie is a small text file stored on your device. This policy provides detailed information about the cookies we use and your choices regarding them.

Your Consent Choices

When you first visit our website, we will ask for your consent to place cookies on your device. Cookies that are "Strictly Necessary" for the operation of our site will be placed without your consent. For all other cookies (Functional and Analytics), we will not place them unless you provide explicit, opt-in consent via our cookie consent banner. You have the right to withdraw or change your consent at any time.

Detailed Cookie Information

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via the email address associated with your account.