Privacy Policy

1. Introduction

GetCookieBanner ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cookie consent management platform and services.

This policy applies globally and complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), India's Information Technology Act, 2000, and other applicable data protection laws worldwide.

Company Information:
Operated by: Migids Technologies
Location: India
Website: https://migids.com

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, and billing information when you register
• Domain Information: Website domains you wish to add cookie banners to
• Communications: Messages, feedback, and support requests you send us
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on our platform
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies and Tracking: We use cookies to provide and improve our services (see our Cookie Policy)
• Analytics Data: Aggregated statistics about banner interactions and consent rates

2.3 Information from Your End Users

• Consent Records: Cookie preferences and consent choices made by visitors to your website
• Cookie Scan Data: Cookies detected on your domains
• Analytics: Banner interaction metrics (views, accepts, rejects)

3. How We Use Your Information

We use collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our cookie consent management platform
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Compliance: To help you comply with GDPR, CCPA, and other privacy regulations
• Analytics: To understand how our services are used and improve user experience
• Communication: To send service updates, security alerts, and marketing communications (with consent)
• Billing: To process payments and manage subscriptions
• Legal Compliance: To comply with legal obligations and protect our rights
• Security: To detect, prevent, and address fraud, security issues, and technical problems

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Improving our services, security, and fraud prevention
• Consent: Marketing communications and non-essential cookies
• Legal Obligation: Compliance with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Cloud hosting (Vercel), payment processing (Stripe), email services, and analytics providers
• Business Transfers: In connection with mergers, acquisitions, or sale of assets
• Legal Requirements: When required by law, court order, or government request
• Protection: To protect our rights, property, safety, or that of our users

We do NOT sell your personal information to third parties.

6. International Data Transfers

Our services are operated from India and may utilize service providers in various countries including the United States and European Union. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for certain countries
• Other legally approved transfer mechanisms

7. Your Rights

Depending on your location, you may have the following rights:

7.1 GDPR Rights (EEA/UK Users)

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

7.2 CCPA Rights (California Users)

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

7.3 India IT Act Rights

• Right to Review: Review and correct your personal information
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, please contact us at the details provided in Section 13.

8. Data Retention

We retain personal data for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active plus 30 days after deletion
• Consent Records: Retained for at least 3 years to demonstrate compliance
• Billing Records: Retained as required by tax and accounting laws (typically 7 years)
• Analytics Data: Aggregated data retained indefinitely for service improvement

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure cloud infrastructure with reputable providers
• Regular backups and disaster recovery procedures

However, no system is 100% secure. We cannot guarantee absolute security but continuously work to maintain the highest standards.

10. Children's Privacy

Our services are not intended for children under 16 (or under 13 in the US). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

11. Third-Party Services

Our platform integrates with third-party services:

• Stripe: Payment processing (see Stripe Privacy Policy)
• Vercel: Hosting and infrastructure
• Email Service Providers: For transactional and marketing emails

These services have their own privacy policies, and we encourage you to review them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, please contact us:

14. Supervisory Authority

If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

For users in India, you may contact the appropriate authority under the Information Technology Act, 2000.

15. Cookie Policy Reference

For detailed information about our use of cookies and similar technologies, please refer to our Cookie Policy.