Skip to main content
Effective Date: October 23, 2026

1. Introduction

Welcome to MigmaAI (“MIGMAAI, INC.,” “we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our website and services.

Our Privacy Commitment

Your privacy is protected. We want to be clear about our core commitments to you:
  • We do not sell your personal data. Your information is never sold to third parties for marketing or any other purpose.
  • Your data stays private by default. We only share data when necessary to provide our services (like hosting providers), when required by law, or with your explicit consent.
  • You have control. You can access, update, or delete your data at any time through your account settings.
The sections below explain the details of how we handle your information, but these commitments are the foundation of our approach to your privacy.
We comply with data privacy laws including the General Data Protection Regulation (GDPR) for users in the EEA, UK, and Switzerland, as well as relevant U.S. state privacy laws (such as CCPA, CPA, and CTDPA).

2. Data We Collect

We may collect and process the following types of information:
  • Personal Information: Your name, email address, company name, and country when you register, join our waitlist, or communicate with us.
  • Account Information: Profile information, login credentials, and preferences if you sign in with Google or use other authentication methods.
  • Usage Data: Pages visited, features used, interactions, and time spent on our platform.
  • Device Information: Browser type, IP address, device type, and operating system.
  • Cookies and Tracking Technologies: We use cookies and similar tools to improve user experience, enable essential features, and analyze performance.

3. How We Use Your Data

We use your data for the following purposes:
  • To operate, maintain, and improve the Services
  • To personalize your experience and suggest relevant content
  • To process your login and support your account activity
  • To communicate updates, security alerts, and service messages
  • To analyze usage trends and ensure platform stability
  • To comply with applicable legal and regulatory requirements
  • To enforce our Terms of Use

4. Google Sign-In

If you sign in using Google, we collect your name, email address, and profile picture through secure OAuth authentication. This data is used to:
  • Create and authenticate your account
  • Verify your identity
  • Personalize the user experience
  • Communicate relevant updates
Google’s handling of your data is governed by their Privacy Policy.

5. Third-Party Services

We rely on third-party providers to deliver key functionalities. Your use of these services is subject to their respective privacy policies and terms: These providers may collect and process your data as outlined in their policies. MigmaAI does not control or assume liability for third-party services.

Stock Media Search and Delivery

Photo and GIF searches you run in the email editor are sent to Pexels and GIPHY through our servers, so the search request itself carries our address rather than yours. The images those searches return are a separate matter: result thumbnails are loaded by your browser directly from the provider’s image network, so that provider may receive your IP address, user agent, and the time of the request while you browse results. The same is true of media you insert. An inserted photo or GIF is referenced on the provider’s content delivery network rather than copied to ours, so when a recipient opens your email, that recipient’s device requests the image directly from Pexels or GIPHY, and the provider may receive the recipient’s IP address, user agent, and the time of the request. If you would prefer your recipients’ devices not to contact a third party, upload the image to your own library and use that copy instead.

Connected AI Clients and Plugins

When you connect Migma to ChatGPT, Codex, or another MCP-compatible client, that client sends the tool inputs you approve to Migma. Migma returns only the account data or action result needed for that tool call. Depending on your request, a tool may read data or create, edit, export, validate, or send email through your Migma account. Access is limited by the permissions shown during OAuth consent or assigned to the connected API key. You can revoke a connected client from Settings → Developers → API Keys. Authentication tokens are used to authorize requests and are not included in normal tool results. The connected client provider processes conversation content and tool inputs or results under its own terms and privacy policy.

6. Data Sharing and Disclosure

We may share your information with:
  • Service Providers who perform hosting, analytics, authentication, or other operational services
  • Legal Authorities if required to comply with applicable law or respond to valid requests
  • Business Transfers in connection with mergers, acquisitions, or asset sales
  • With Your Consent when you authorize us to do so
We do not sell your personal data to third parties.

7. Data Storage and International Transfers

Your data is stored securely in the United States. By using our Services, you consent to the transfer and processing of your data in the U.S., which may not offer the same level of protection as your home jurisdiction. We implement safeguards to comply with GDPR and other applicable data protection laws.

Data Retention

We retain account information and saved workspace content, such as brands, subscriber lists, email designs, and campaigns, for as long as needed to provide your account and the features you use. You may delete content or request account deletion as described in Section 11. The following records have standard retention periods: Expired records are removed through automatic expiration or scheduled cleanup. Removal may occur shortly after the stated period as cleanup runs. These periods apply to the listed records, not to the underlying subscriber profiles, saved email content, or campaign records. Suppression list entries, including addresses blocked because of unsubscribes, bounces, or complaints, do not expire automatically. We retain them to prevent unwanted or undeliverable messages until they are removed or are no longer needed for that purpose. We may retain records for longer where required by law, including applicable accounting and tax obligations. You can contact info@migma.ai to ask about retention or request deletion of your data. These retention rules also apply to the corresponding data created or accessed through a connected AI client or plugin. Disconnecting a client revokes its access; it does not by itself delete content stored in your Migma account. The connected provider’s retention of conversations and tool results is governed by its own privacy policy.

8. Data Security

We apply industry-standard security measures (e.g., HTTPS, encryption, access controls) to protect your information. However, no method of electronic storage or transmission is completely secure.

9. Your Privacy Rights

Depending on your jurisdiction (e.g., EU, UK, California, Colorado), you may have the right to:
  • Access your data
  • Correct inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time
  • Restrict or object to data processing
  • Export your data in a machine-readable format
  • Lodge a complaint with your local data protection authority
You can export your data or delete your account in Settings → Privacy & data. You may also exercise any of these rights by emailing us at info@migma.ai. We use cookies to operate the platform, personalize content, and analyze traffic. For users in the EEA, UK, and certain U.S. states:
  • You will be prompted to provide consent before non-essential cookies are set
  • You may manage your preferences via our cookie banner or settings page
  • We comply with the ePrivacy Directive and US state laws related to cookies and data tracking

11. Account Deletion and Data Removal

You may delete your account and personal data at any time in Settings → Privacy & data, or by emailing info@migma.ai. We will email you within 48 hours to confirm the request. Upon deletion, we erase or anonymize your personal data unless retention is required by law. The retention periods in Section 7 do not prevent you from requesting earlier deletion.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you by updating the “Effective Date” at the top of this page. Your continued use of our Services means you accept any changes.

13. Contact Us

If you have any questions or wish to exercise your privacy rights, please contact: MIGMAAI, INC.
131 Continental Dr, Suite 305
Newark, Delaware 19713
Email: info@migma.ai
Last modified on October 23, 2026