Privacy Policy — Migrait

1. Introduction

Migrait Ltd (“Migrait”, “we”, “us”) operates the Migrait data migration platform at migrait.app. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the UK GDPR and the Data Protection Act 2018.

2. Information We Collect

We collect information you provide directly to us, including:

Account registration data: name, email address, company name
Profile information you add to your account
Data you upload or migrate through our platform
Communications you send to us
Technical data: IP address, browser type, pages visited, authentication tokens

3. How We Use Your Information

We use your information to:

Provide and operate the Migrait platform
Process your data migrations
Send transactional emails relating to your account and migrations
Respond to support requests
Improve our service
Comply with legal obligations

Our lawful basis for processing is performance of a contract (providing our service to you) and legitimate interests (improving our platform and preventing fraud).

4. Data Storage and Security

Your data is stored on Supabase infrastructure, hosted in the European Union. We use row-level security policies to ensure your organisation's data is isolated from other customers. All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Transactional emails are sent via Resend, which is SOC 2 compliant. When billing is added, payments are processed by Stripe and card details are never stored on our servers.

5. Data Retention

We retain your account data for the duration of your subscription and for up to 90 days after account closure, after which it is permanently deleted. Migration logs and quarantine records are retained for 12 months. You may request earlier deletion at any time.

6. Your Rights under UK GDPR

You have the right to:

Access your personal data
Rectify inaccurate personal data
Erasure (“right to be forgotten”)
Restrict processing of your data
Data portability
Object to processing
Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us at hello@migrait.app. We will respond within 30 days.

7. Cookies

We use essential cookies only for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

8. Third Party Services

We use the following sub-processors: Supabase (database and authentication), Resend (transactional email), Vercel (hosting and edge network), Stripe (billing, when enabled), OpenAI (AI-powered field mapping suggestions — data is not used to train models under our API agreement). We have data processing agreements in place with each sub-processor.

9. Contact Us

For any privacy queries, contact our data controller at: hello@migrait.app
Migrait Ltd, United Kingdom