Privacy Policy

When you purchase a report, we store:

• A one-way cryptographic hash of your email address — not your plaintext email — used to confirm your identity for support purposes.
• Your Paddle transaction and customer identifiers.
• Your entitlement and delivery status (e.g. whether your report has been sent).
• Your secure access credential, stored internally so your access link keeps working — never displayed in any tool we use to support you.

If you submit feedback through our site, we store:

• Your email address, only if you choose to provide it — it's always optional.
• The feedback message itself and which report or page it relates to.

If you submit our Contact form, we receive:

• Your name, work email address, and message, plus your company if you provide it.
• This is delivered directly to our support inbox by email so we can reply — we do not store Contact-form submissions in any database of our own.

We also record minimal first-party usage events (e.g. which page was viewed, which report, and when) to understand how the site is used. These events do not include your IP address, browser fingerprint, or any cookie-based identifier.

In our own application data, we do not intentionally store: your card or payment details (Paddle handles these directly — we never see them); your raw IP address; a browser or device fingerprint; advertising identifiers; a behavioral advertising profile; a customer account or profile; or session-replay recordings of your visit.

This describes our own application, not our infrastructure providers. Providers like Cloudflare and Paddle necessarily process certain technical data (including IP addresses) as part of operating their own services — see Third Parties, below.

Paddle — our Merchant of Record, handling checkout, payment processing, and payment-related communication with you.

Cloudflare — hosts this website and the infrastructure behind it (our Pages, Functions, and storage all run on Cloudflare), and provides network security.

Cloudflare Turnstile — verifies that feedback-form submissions come from a real visitor, not automated abuse.

Resend — delivers your transactional purchase and access emails.

Each of these providers may process technical and/or personal data — which can include your IP address — as necessary to provide their own service to us. We use each of them for the specific purpose described above, not for advertising.

MI Reports does not itself run advertising or behavioral-analytics cookies, and we don't use a cookie-consent banner because we don't operate that kind of tracking. However, our checkout provider (Paddle) and our infrastructure provider (Cloudflare, including Turnstile) may use cookies or similar technical mechanisms as part of providing checkout and security functionality — this is outside our direct control, and we don't claim this site uses no cookies at all.

Our service providers may process data outside Switzerland as part of operating their own global infrastructure. Where that happens, it is subject to those providers' own applicable safeguards for international data transfers.

We keep entitlement and delivery records for as long as needed to honor your continuing access to a report you've purchased. We have not set a fixed deletion schedule for these records, since your access is intended to remain valid indefinitely. Our service providers retain data according to their own published policies, which we don't control.