Privacy Policy
Last updated: September 2026
Introduction
MigrateData ("we", "us", "our") operates the migratedata.app platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workspace migration platform. We are committed to protecting your privacy and handling your data with transparency and care.
By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use our services.
Information We Collect
We collect the following types of information to provide and improve our services:
Account Information: When you create an account, we collect your name, email address, company name, and billing information. This information is necessary to provision your tenant, manage your licenses, and provide customer support.
Usage Data: We collect information about how you interact with our platform, including migration job configurations, feature usage, page views, and performance metrics. This data helps us improve the platform and diagnose issues.
Platform Connection Metadata: When you connect source and destination platforms (such as Google Workspace or Microsoft 365), we store OAuth tokens (encrypted) and connection metadata required to perform migrations on your behalf. We do not store your platform passwords.
Migration Metadata: We store metadata about migration jobs, including item counts, data types, status, error logs, and timestamps. This metadata is necessary for reporting, reconciliation, and support.
We do NOT collect, store, or retain any of your email, file, calendar, or other workspace data during migration. Our zero-retention streaming architecture means your data flows directly from source to destination platforms and is never written to our servers. Data is transformed in memory only and is never persisted to disk or database.
How We Use Information
We use the information we collect for the following purposes:
- Provide and maintain our services: Execute migration jobs, manage your account, and deliver platform features.
- Billing and payments: Process license purchases, issue invoices, and manage your payment method through our payment processor.
- Customer support: Respond to your inquiries, troubleshoot issues, and provide technical assistance.
- Analytics and improvement: Analyze usage patterns to improve platform performance, reliability, and user experience.
- Security: Detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
- Communications: Send transactional emails (migration status, billing receipts), product updates, and optional marketing communications.
Data Retention
Account Data: Your account information is retained for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days, except as required by law or legitimate business purposes.
Migration Data: Zero retention. Your workspace data (emails, files, calendars, contacts, and all other content) is never stored on our servers. Data streams directly from source to destination in real time.
Migration Logs and Metadata: Job logs, item metadata, and error records are retained for 90 days after job completion to support reconciliation, reporting, and troubleshooting. After 90 days, this data is automatically purged.
Audit Logs: Compliance audit logs are retained as required by your plan and applicable regulations. Enterprise customers may configure extended retention periods.
Third-Party Services
We integrate with the following third-party services to operate our platform:
- Stripe: Processes all payment transactions. Stripe receives your billing information directly. See Stripe's Privacy Policy.
- OAuth Providers (Google, Microsoft): We use OAuth 2.0 to connect to source and destination platforms. We request only the minimum scopes necessary to perform migrations. Your platform credentials are never shared with us.
- AI Providers: Our AI-powered analysis features (such as pre-migration intelligence and error interpretation) use third-party AI APIs. No personally identifiable information (PII) or workspace content is sent to AI providers. Only anonymized metadata and aggregated statistics are used for analysis.
- Email Service: We use a transactional email provider to send account notifications, migration status updates, billing receipts, and other service-related communications.
Security
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data transmitted between your browser, our servers, and third-party platforms is encrypted using TLS 1.3.
- Encryption at Rest: All stored data, including OAuth tokens and account information, is encrypted using AES-256 encryption.
- Per-Tenant Key Derivation: Each customer tenant uses independently derived encryption keys, ensuring cryptographic isolation between organizations.
- Compliance Readiness: Our platform is designed and operated with compliant controls: immutable audit logs, role-based access control, encryption at rest and in transit, and automated security monitoring.
- On-Premises Agent Option: An on-premises agent option is available as an alternative to SaaS deployment.
- Access Controls: Role-based access control (RBAC), multi-tenant isolation, and immutable audit logging ensure that only authorized users can access your data.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete personal information.
- Deletion: Request that we delete your personal information, subject to legal and contractual obligations.
- Data Export: Export your account data and migration metadata in machine-readable formats.
- Opt Out of Marketing: Unsubscribe from marketing communications at any time using the link in any marketing email or by updating your notification preferences in your account settings.
To exercise any of these rights, please contact us at privacy@migratedata.app. We will respond to your request within 30 days.
Cookies
We use essential cookies only. These cookies are strictly necessary for the operation of our platform:
- Session Cookies: Maintain your authenticated session while using the platform.
- Authentication Cookies: Store your authentication token to keep you logged in across page navigations.
We do not use tracking cookies. We do not use third-party advertising cookies. We do not sell or share cookie data with any third parties.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email at the address associated with your account and update the "Last updated" date at the top of this page.
Your continued use of our services after any modifications to this Privacy Policy constitutes your acceptance of those changes. We encourage you to review this page periodically for the latest information about our privacy practices.
Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: