Privacy Policy

This Privacy Policy explains how Midna collects, uses, stores and protects personal data when you visit our website, create an account, use our SaaS application, publish quizzes or interact with lead qualification flows.

Midna is designed for professional use. We process personal data only when it is necessary to provide the service, secure accounts, operate customer workspaces, improve reliability, comply with legal obligations or respond to user requests.

The data controller for the Midna service is Methylene Consulting, France, operating the Midna product. For any privacy question or request, you can contact us at contact@midna.fr.

When a customer uses Midna to collect leads, quiz answers or qualification data from its own visitors, that customer may act as the data controller for those end-user submissions, and Midna acts as a service provider or processor according to the customer's instructions.

We may collect account information such as email address, first name, last name, password authentication status, OAuth identifiers and profile avatar when provided by an authentication provider.

We collect workspace and product data created in Midna, including quiz configuration, flow structure, questions, answers, themes, integrations, contacts, leads, responses, events, webhooks and billing-related records.

We also collect technical information needed to operate the service, such as device, browser, IP address, logs, security events, timestamps, referral information and cookie identifiers where applicable.

We use personal data to create and secure accounts, authenticate users, create workspaces, provide the quiz and flow builder, publish public quiz experiences, process lead submissions and deliver product features requested by the user.

We may also use information to prevent abuse, monitor service reliability, debug errors, send transactional emails, process billing events, enforce our terms and improve the usability and performance of Midna.

We do not sell personal data. We do not use customer lead data to create advertising profiles.

Midna supports authentication through email and password, Google OAuth and Microsoft OAuth. When you sign in with Google or Microsoft, the provider may share basic profile information such as your email address, name, avatar and provider-specific user identifier.

We use this information to create or update your Midna profile, connect you to your workspace and avoid asking for information that is already available from the authentication provider.

Midna uses cookies and similar technologies that are necessary for authentication, session management, security, user preferences and service operation.

We may use analytics or diagnostic tools to understand product usage, detect performance issues and improve the service. Where analytics are used, we aim to limit collection to what is necessary and avoid unnecessary tracking.

The public website and application may include cookies set by service providers such as Supabase, Vercel, Google or Microsoft when their services are used for authentication, hosting or security.

We retain account, workspace and product data for as long as your account or workspace remains active, unless a longer retention period is required by law, security, accounting or legitimate business needs.

Leads, quiz responses and flow events are retained according to the customer's workspace settings, contractual requirements and operational needs. You may request deletion of personal data by contacting contact@midna.fr.

Some records, such as audit logs, billing events and security logs, may be retained for a limited period to protect the service, investigate incidents or comply with legal obligations.

We apply technical and organizational measures intended to protect personal data, including encrypted transport, workspace-based access controls, row level security where appropriate, restricted service access and secure authentication through Supabase Auth.

No online service can be guaranteed to be completely secure. Users are responsible for keeping their login credentials confidential and for configuring access to their workspaces appropriately.

Midna relies on trusted third-party infrastructure and service providers to operate the product. These include Supabase for authentication, database and backend services, Vercel for hosting and deployment, Resend for transactional email delivery, Google OAuth for Google sign-in and Microsoft OAuth for Microsoft sign-in.

These providers may process personal data only as necessary to provide their services to Midna or to you. Their own privacy terms may apply when you interact directly with them, especially during OAuth authentication.

Depending on your location and applicable law, you may have the right to access, correct, delete, restrict or object to the processing of your personal data. You may also have the right to data portability and to withdraw consent where processing is based on consent.

To exercise your rights, contact us at contact@midna.fr. We may need to verify your identity before responding to a request.

Midna and its service providers may process data in countries outside your country of residence, including countries outside the European Economic Area. When required, we rely on appropriate safeguards such as contractual commitments and standard contractual clauses.

By using Midna, you understand that your data may be processed by infrastructure providers that operate internationally, including Supabase, Vercel, Resend, Google and Microsoft.

For privacy questions, user rights requests or security concerns, contact Midna at contact@midna.fr.

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised date.