Privacy Policy

When you use Mivo, we may process:

• Account data (name, email, password, company details)
• Booking data (courses, training sessions, time slots, participants)
• Payment data (via payment providers such as Stripe/PayPal)
• Calendar data (if Google Calendar is connected)
• Communication data (support requests, emails)
• Technical data (IP address, browser, device info, logfiles)

We process your data for:

• Providing and operating our SaaS platform (Art. 6(1)(b) GDPR)
• Processing payments via third-party providers (Art. 6(1)(b) GDPR)
• Customer communication and support (Art. 6(1)(b) and (f) GDPR)
• Security, fraud prevention (Art. 6(1)(f) GDPR)
• Marketing and analytics (only with consent, Art. 6(1)(a) GDPR)

We work with the following providers (some located in the USA):

• Stripe Payments Europe Ltd. (payment processing)
• Supabase Inc. (hosting, database)
• Vercel Inc. (hosting, deployment)
• Upstash Inc. (Redis database)
• Google LLC (Google Calendar sync)
• Sanity.io (content management for blog)

Data transfers to the USA are based on EU Standard Contractual Clauses (SCCs).

We retain personal data only as long as necessary for the stated purposes:

• Contract and booking data: as long as the account is active + statutory retention periods (6–10 years for invoices).
• Support data: max. 2 years after last contact.
• Calendar and booking data: until the purpose has been fulfilled, then deleted.

Under GDPR you have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact:info@franke-winter.de

You also have the right to lodge a complaint with a data protection authority.

Mivo uses cookies and similar technologies for:

• Login and session management
• Security
• Optional analytics & marketing (only with consent)