Privacy Policy

1. Information We Collect

Information you provide:

• Email address, full name, and password (hashed) during registration
• Name and email from Google if you use Google OAuth sign-in
• Images and media files you upload to build your website
• Emails and correspondence you send to our support team

Information collected automatically:

• JWT authentication token (httpOnly cookie, 7-day expiry) for secure sessions
• Theme preference cookie for UI customization
• Browser, device type, operating system, and IP address
• Error logs via Sentry for platform stability

Information we do not collect: We do not use advertising networks, collect biometric data, or deliberately collect location data.

2. How We Use Your Information

• Service delivery: Creating your account, enabling website building, storing media files, providing authentication
• Communication: Transactional emails (verification, password reset), support responses, important service updates
• Security: Detecting fraud and abuse, maintaining audit logs, enforcing our Terms of Service
• Improvement: Understanding usage patterns to improve functionality (in anonymized form)

3. Data Storage & Security

User data is stored in PostgreSQL; media files in local storage — both hosted in Vietnam.

Multi-tenant isolation: Your data is logically isolated from other users through tenant-specific access controls. No user can access another user's content.

Security measures:

• Passwords hashed with strong cryptographic algorithms
• Authentication cookies use httpOnly, Secure, and SameSite flags
• Data in transit encrypted via HTTPS/TLS
• Role-based access controls for employee access

No security system is 100% secure. You are responsible for keeping your password confidential.

4. Data Sharing & Third Parties

We do not sell or rent your personal data. We share data only with:

• Google — OAuth authentication only (name and email)
• SMTP Provider — Transactional emails (verification, password resets)
• Sentry — Error logging and diagnostics
• Legal compliance — If required by law, court order, or government request

5. Cookies & Tracking

We use the following cookies:

• payload-token — JWT auth cookie (httpOnly, 7-day expiry)
• Theme preference — Remembers light/dark mode (1 year)
• Next.js framework — Standard web framework cookies

You can disable cookies in your browser settings. Disabling auth cookies will log you out. We honor Do Not Track (DNT) browser signals where applicable.

6. Your Privacy Rights

You have the right to:

• Access — Request a copy of your personal data
• Correction — Update your information via account settings
• Deletion — Request account and data deletion (processed within 30 days)
• Portability — Request your data in a portable format (JSON/CSV)
• Withdraw consent — Opt out of optional data processing at any time

Contact [email protected] for any privacy requests. We respond within 30 days.

7. Data Retention

• Active accounts: Data retained while your account is active
• After deletion: Removed from primary storage within 30 days; backups retained up to 90 days
• Email logs: Retained for 1 year for compliance
• Error logs: Retained for 90 days
• Audit records: May be retained 3–5 years as required by law

8. Children's Privacy

MiKiSite.Com is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn such data has been collected, we will delete it promptly. Parents/guardians should contact [email protected] if they believe their child's data has been collected.

9. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or prominent notice. Continued use of MiKiSite.Com after changes means you accept the updated policy.

10. International Data Transfers

MiKiSite.Com stores data primarily in Vietnam. If you are located outside Vietnam, your data may be transferred to and processed in Vietnam. By using MiKiSite.Com, you consent to this transfer. We comply with applicable international data transfer regulations.

11. Contact Information

For questions about this Privacy Policy, contact:

MiKiSite.Com
Email: [email protected]

We respond to privacy inquiries within 30 days.