Miro · Miro Privacy Policy · View original document ↗

AI Features Data Handling

Medium severity Low confidence Inferredfromcontext Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Miro recorded 10 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Miro Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

The policy references a separate AI Terms Addendum that governs the collection and use of data in connection with Miro's AI features, indicating that AI-related processing is subject to additional terms beyond the base privacy policy.

This analysis describes what Miro's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The existence of a separate AI Terms Addendum means that users of Miro's AI features are subject to additional data processing terms that must be reviewed in conjunction with the privacy policy to assess the full scope of AI-related data handling.

Interpretive note: The specific AI data handling provisions are contained in a separate Addendum not fully available in this document; the scope and terms of AI data processing cannot be confirmed from the privacy policy text alone.

Change history

modified May 21, 2026

AI Features severity decreased from high to medium, and provision was renamed from 'AI Features Data Processing' to 'AI Features Data Handling' with potential scope clarification.

View full change record →

Consumer impact (what this means for users)

Under this structure, users who enable or use AI features within Miro are subject to both the privacy policy and the AI Terms Addendum, and should review both documents to understand how their data and board content may be used for AI model training or improvement purposes.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

See all platforms with this clause type →

Monitoring

Miro has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

1) REGULATORY LANDSCAPE: AI-related data processing in the EU engages the EU AI Act (phased enforcement beginning 2024-2026), GDPR requirements for automated decision-making (Article 22), and emerging guidance from EU data protection authorities on AI training data. The FTC has also issued guidance on AI and consumer data practices applicable to US users. 2) GOVERNANCE EXPOSURE: Medium to High. The use of a separate addendum for AI features creates a fragmented compliance structure where the full scope of AI-related data processing is not contained in a single document. Enterprise customers using AI features should review the AI Terms Addendum specifically to assess whether board content is used for model training. 3) JURISDICTION FLAGS: EU/EEA organizations should assess AI feature data handling against EU AI Act requirements and GDPR Article 22. Organizations in regulated industries (healthcare, financial services) should assess whether AI processing of board content creates sector-specific compliance obligations. 4) VENDOR IMPLICATIONS: Enterprise procurement teams should review the AI Terms Addendum as part of Miro onboarding to confirm whether AI processing of customer board content is opt-in or opt-out, and whether it is covered under the DPA. 5) COMPLIANCE CONSIDERATIONS: Legal and compliance teams should review miro.com/legal/ai-features-addendum/ to assess the scope of AI data processing, determine whether board content is used for model training, and confirm whether enterprise customers can opt out of AI training uses of their data.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has issued guidance on AI and data practices and has jurisdiction over unfair or deceptive practices related to AI data handling for US users.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Miro Privacy Policy
Entity
Miro
Document last updated
May 5, 2026
Tracking information
First tracked
May 21, 2026
Last verified
May 21, 2026
Record ID
CA-P-012985
Document ID
CA-D-00556
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
930ae382442025ef72719a8f300cbeada1757813939671007e95a6359b947844
Analysis generated
May 21, 2026 03:39 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Miro
Document: Miro Privacy Policy
Record ID: CA-P-012985
Captured: 2026-05-21 03:39:20 UTC
SHA-256: 930ae382442025ef…
URL: https://conductatlas.com/platform/miro/miro-privacy-policy/ai-features-data-handling/
Accessed: June 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Miro's AI Features Data Handling clause do?

The existence of a separate AI Terms Addendum means that users of Miro's AI features are subject to additional data processing terms that must be reviewed in conjunction with the privacy policy to assess the full scope of AI-related data handling.

How does this clause affect you?

Under this structure, users who enable or use AI features within Miro are subject to both the privacy policy and the AI Terms Addendum, and should review both documents to understand how their data and board content may be used for AI model training or improvement purposes.

Is ConductAtlas affiliated with Miro?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Miro.