Privacy policy

1. Data controller

• Owner: John Guerrero
• Trade name: Miselup
• Address: Madrid, Spain
• Email: info@miselup.pro
• Phone: +34 744 717 942

2. Data we collect

We may process the following categories of data:

• Contact data: what you provide through the website forms (name, email, business name and the message or enquiry you send us).
• Trial request data: the email you enter to start the free trial, whose sign-up continues at app.miselup.pro.
• Technical browsing data: IP address, browser and device type, and pages visited.
• Cookie and analytics data: only when you give your consent, in accordance with the Cookie policy.

3. Purpose of processing

We process your data for the following purposes:

• To handle your enquiries and requests for information or a demo.
• To manage sign-up and the free trial of the service, as well as the commercial relationship.
• To improve the website, its contents and the user experience.
• To send you communications about the service when you have consented to receive them.

4. Legal basis for processing

• Your consent: when submitting a form, requesting the trial or accepting cookies.
• Performance of a contract or pre-contractual measures, when the data is necessary to provide the service.
• Legitimate interest of the controller in improving the website and ensuring its security.

5. Retention period

We keep your data for as long as necessary to fulfil the purpose for which it was collected and to address any legal liabilities arising from such processing.

Data collected through the forms is kept for a maximum of 24 months from the last communication, unless you request its deletion sooner or there is a legal obligation to keep it longer.

6. Recipients and data processors

We do not sell or trade your personal data. To provide the miselup.pro website and the app.miselup.pro application, we use the following providers. Depending on the service, they act as processors or subprocessors, or as controllers for their own processing, for example for payments, sign-in or external services you choose to use.

AI features may communicate the messages, texts, images and documents you provide, as well as the account context and query results needed to respond, to their providers. If you authorise an external assistant through the MCP connector, that assistant receives data accessible under your permissions and processes it under its own privacy policy.

If you add links, images or videos hosted by third parties, their providers may receive the requested URL and technical connection data when metadata is retrieved or the content is displayed.

The providers listed may process data outside the European Economic Area (EEA). The safeguards for these transfers are explained in section 7.

• Netlify, Inc. — hosting and execution of the website and application; processes requests, IP addresses and technical logs, and data needed to run application functions. US provider, with possible processing outside the EEA.
• InsForge, Inc. — database, authentication, file storage and backend services; processes account, business and team data, documents and conversations. The project uses a European region; this does not exclude other processing outside the EEA by the US provider or its subprocessors.
• Fly.io, Inc. — hosting of the MCP connector through InsForge Compute; processes authentication, requests and business data queried by authorised assistants. Deployment is configured in Frankfurt; ancillary processing may take place outside the EEA.
• Google Ireland Limited and Google LLC — image generation and enhancement, and translation of record and Mise Studio texts using Gemini; also document import, text optimisation and attachment analysis through OpenRouter. Receives the content needed for those features. Google is also involved if you choose to sign in with Google or view YouTube thumbnails and videos. Entities in Ireland and the United States, with possible processing outside the EEA.
• OpenRouter, Inc. — routing of AI requests from the importer, text editor, Mise Agent and customer assistance service; receives messages, history, attachments and necessary context and forwards them to the provider serving the request. US provider; processing location depends on routing and may be outside the EEA.
• Anthropic, PBC / Anthropic Ireland, Limited — advanced response models for Mise Agent used through OpenRouter, depending on the feature and routing; request content is communicated to the provider serving it. Entities in the United States and Ireland, with possible processing outside the EEA.
• Hangzhou DeepSeek Artificial Intelligence Co., Ltd. (DeepSeek) — response models for Mise Agent and customer assistance used through OpenRouter. DeepSeek develops these models; the provider processing each request depends on routing. The entity is in China; using a DeepSeek model does not by itself determine the country of processing.
• Stripe Payments Europe, Limited and Stripe Technology Europe, Limited — payments, subscriptions, billing and tax calculation; processes contact and billing details, account identifiers, transactions and payment method data, and may receive visit attribution identifiers. Entities in Ireland, with possible processing outside the EEA by the Stripe group and its providers.
• Plus Five Five, Inc. (Resend) — delivery of transactional emails, invitations and notifications, and management of contacts and communications; processes email addresses, names, segmentation data and message content. Processing in the United States.
• Hostinger International Limited — hosting of the info@miselup.pro support mailbox; processes senders, recipients, messages and attachments sent to that mailbox. Entity in Cyprus; processing location depends on the email service and its subprocessors.
• JustShipIt Pte. Ltd. (DataFast) — visit analytics and revenue attribution; processes IP addresses, browser and device information, visited pages, visitor and session identifiers, and conversion events associated with payments. Entity in Singapore, with infrastructure outside the EEA, including the United States.
• Google Ireland Limited and Google LLC (Google Analytics 4) — measurement of browsing and sign-up clicks, when the service is configured and you have accepted analytics cookies. Entities in Ireland and the United States, with possible processing outside the EEA.
• Microsoft Corporation (Clarity) — analysis of interactions and browsing sessions, when the service is configured and you have accepted analytics cookies. US provider, with possible processing outside the EEA.
• Vimeo.com, Inc. (Vimeo) and Atlassian Pty Ltd / Atlassian US, Inc. (Loom) — metadata retrieval and playback of external videos added to records; receives the video URL and, during playback, technical connection data. Entities in the United States and, for Atlassian, also Australia; possible processing outside the EEA.
• WhatsApp Ireland Limited — when you use a contact link or choose to share through WhatsApp, receives the phone number, text or link you decide to send and data arising from use of its service. Entity in Ireland, with possible processing outside the EEA; its own privacy policy applies.

7. International transfers

Some of our providers may process data outside the European Economic Area, including the United States and other countries depending on the service and routing of AI requests. These transfers must have the safeguards required by the GDPR, such as the Standard Contractual Clauses approved by the European Commission or an applicable adequacy decision. The EU–US Data Privacy Framework can only be used when the receiving entity and processing are covered by it; its application to all providers is not presumed. You can request information about the safeguards applicable to your data by writing to info@miselup.pro.

8. Security measures

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse or unauthorised access, including encryption of communications via the SSL/TLS protocol.

9. Your rights

You can exercise the following rights over your personal data at any time:

• Access: to know what data of yours we process.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request that we delete your data.
• Objection: to object to a particular processing.
• Restriction: to ask us to restrict the processing.
• Portability: to receive your data in a structured format.

10. How to exercise your rights and complain

To exercise any of these rights, write to us at info@miselup.pro stating the right you wish to exercise.

If you believe that the processing of your data does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

11. Cookies

The website uses storage technologies on your device. You can find the details in our Cookie policy.

12. Contact

For any question about this privacy policy, you can contact us at info@miselup.pro or by phone at +34 744 717 942.