8 Total
1 High severity
5 Medium severity
2 Low severity
Summary

This is Miro's Privacy Policy, which explains how the company collects and uses your personal data when you use its online collaborative whiteboard platform. The most important thing to know is that Miro collects not just your account details and usage patterns but also the actual content you place on your boards, and this content may be processed for AI features under separate terms. If you are an EU or California resident, you have specific rights to access, correct, or delete your data, which you can exercise by contacting Miro's privacy team at privacy@miro.com.

Technical / Legal Breakdown

This document is Miro's Privacy Policy, governing the collection, use, and sharing of personal data by Miro (RealtimeBoard Inc. and its affiliates) in connection with the Miro collaborative workspace platform, operating under a consent and legitimate interests framework consistent with GDPR, CCPA, and other applicable data protection laws. The policy states that Miro collects account information, usage data, device and log data, content users place on boards, and information from third-party integrations, and asserts the right to use this data for service delivery, product improvement, marketing communications, and AI feature development. The policy references a separate Customer Data Processing Addendum (DPA) and a Subprocessors List, indicating a layered data governance structure where enterprise customers may have distinct contractual protections not automatically available to free or individual users. The policy engages GDPR (for EU and EEA users), UK GDPR, CCPA and CPRA (for California residents), and potentially other regional frameworks; enforcement authorities include the FTC for US users and relevant EU Data Protection Authorities for European users. Compliance teams should note that Miro's AI Features Addendum is listed as a separate legal instrument, suggesting that data processed through AI features may be governed by distinct terms requiring separate review.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

1 important change detected

2 versions captured · Last updated: May 2026

What changed Miro updated their privacy policy navigation on May 6, 2026 by changing the call-to-action button from 'Sign up free' to 'Get started free' in the header. This is a minor editorial update to button labeling with no material change to the privacy practices, data handling, user rights, or policy substance described in the document.
Why this matters This change is a minor revision to the website navigation button text on Miro's privacy policy page and does not affect the privacy policy's substantive content, your data rights, or how Miro collects, uses, or discloses your information. The policy terms, consent requirements, and privacy protections remain unchanged.
View full change record →
High — 1 provision
Medium — 5 provisions
Low — 2 provisions

Monitoring

Miro has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle AI Features Data Processing and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 6, 2026 16:18 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000556
Version ID CA-V-002296
SHA-256 99e0a96b16ab926ea96a221ce38053d5c47bd4f1424a510bd1ab70651eb177e9
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans