Privacy policy

Last updated: 24 October 2026. Mind Map I/O for Miro is operated by Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye (“we”). Contact: support@atesensoftware.com.

Your files and boards

The app runs as a page inside Miro, in your browser. Files you import are read in that page and written to your board through Miro’s Web SDK. Exports are built in the same page. Your files, outlines and board content are never sent to us or to anyone else except Miro, and we do not store them. The app asks Miro for permission to read and write boards (scopes boards:read and boards:write) and uses it only when you press Create, Undo or Read selection.

Your browser’s local storage keeps your Pro key and the date of the last key check, so the app can verify your key without asking again. You can remove the key in the app’s Pro tab or by clearing site data for mindmap.atesensoftware.com.

Purchases

Payments are processed by Paddle.com Market Limited, our reseller and Merchant of Record. Paddle collects your name, e-mail address, billing address and payment details under its own privacy policy. To deliver your Pro key we read the e-mail address on your Paddle payment record when a purchase completes and send you one e-mail with Resend, our e-mail provider: your key, a short thank-you and getting-started steps. We do not store that address.

For each key we store: the key itself, its plan and dates, the Paddle subscription and transaction ids, and a keyed hash of your e-mail address (not the address itself), so the key can be re-sent on request. A key contains the first 16 characters of a hash of your e-mail address so support can match it to a purchase.

Key renewal, resend form and logs

While your subscription runs, the app sends your key (and nothing else) to our server when it is close to expiry, and receives the renewed key. When you use the “resend my key” form we look up the keyed hash of the address you enter and e-mail any matching keys to that address. To prevent abuse we keep keyed hashes of IP addresses and e-mail addresses in rate-limit counters for up to three days. Our service logs contain event types, ids and counts only — no e-mail addresses. The site is hosted on Cloudflare, which processes IP addresses to deliver and protect the service.

Waitlist

Before the Miro install link and Pro checkout open, you can leave your e-mail address on our website to hear when they do. We store that address, the option you were looking at and the date in our database on Cloudflare, and use it only to write to you when it opens. It is not shared or used for anything else. We delete it on request (e-mail us) and automatically 12 months after you joined. Our logs record only whether an entry was added, never the address.

Cookies and tracking

The site and the app set no cookies and use no analytics or advertising trackers. Paddle’s checkout window sets its own cookies when you open it.

Uninstalling

We hold no board data, so there is nothing to delete when you remove the app from your Miro team. Key records are kept for as long as needed for accounting and refunds; ask us to delete them at any time (after deletion we can no longer re-send your key).

Your rights

You can ask for a copy of the data we hold about you, or for its deletion, by e-mail. We answer within 30 days. You may also contact your data protection authority.

Changes

We will update the date above when this policy changes.