Miro Privacy Policy

This document is Miro's Privacy Policy, governing the collection, use, disclosure, and retention of personal data by Miro (RealtimeBoard, Inc. and its affiliates) in connection with the Miro collaborative workspace platform, with legal bases including consent, legitimate interests, and contractual necessity depending on jurisdiction. The policy states that Miro collects account identifiers, contact information, device and usage data, content users place on boards, and data from third-party integrations, and the terms authorize sharing this data with service providers, advertising partners, analytics vendors, and business partners. The policy addresses AI feature data handling through a separate AI Terms Addendum, and the scope of data shared with advertising and analytics partners warrants review given Miro's positioning as an enterprise collaboration tool where sensitive business content may be processed. The policy engages GDPR for EU/EEA users (with Miro identifying as data controller for account data and data processor for customer board content), CCPA/CPRA for California residents, and references data transfers under Standard Contractual Clauses; applicability of specific rights and obligations depends on user jurisdiction and account type. Enterprise customers are directed to a separate Customer Data Processing Addendum, which governs processor-level obligations and may supersede certain policy provisions for business accounts.