Privacy

Privacy Policy

Your data is yours. We are transparent about how we handle it.

Last updated: May 2026

What We Collect

  • ·Authentication credentials (OAuth tokens, encrypted)
  • ·Platform usage patterns (page views, feature interactions)
  • ·Error logs and debugging data
  • ·Account configuration (ICP, territory, product settings)

What We Do Not Do

  • ✓Your data is never used to train external AI models.
  • ✓Your data is not shared with third parties for marketing, profiling, or resale purposes. AI inference uses API calls to Anthropic; Anthropic's API terms prohibit training on your data.
  • ✓We do not retain data longer than operationally required.
  • ✓We do not use marketing or advertising trackers.
  • ✓We do not sell your data under any circumstances.

Your Rights

Consistent with GDPR principles and applicable privacy law:

  • →Request access to your data at any time
  • →Account data deleted within 30 days of a deletion request.
  • →Correct inaccurate account information
  • →Withdraw access to integrations at any time

Data Isolation

Tenant isolation enforced via Row-Level Security (RLS) at the database layer. Each row in every table is scoped to your authenticated account. Cross-account data access is structurally impossible at the database layer.

Compliance Posture

SOC 2: Mickey AI is actively implementing controls aligned with SOC 2 Trust Service Criteria. A Type II audit is planned. This is not a completed certification.
GDPR: Mickey AI is built with GDPR data-handling principles: purpose limitation, data minimization, and the right to deletion. We are not yet subject to a formal GDPR compliance audit.

Privacy FAQ

Is my data secure?

AES-256 encryption at rest. TLS 1.3 in transit. Infrastructure hosted on SOC 2-audited cloud providers. Access is controlled via OAuth 2.0 and signed JWTs.

Can Mickey modify my Salesforce or Gong data?

Mickey connects with read-only permissions. We never create, modify, or delete records in Salesforce, Gong, Salesloft, or LinkedIn.

Is my data used to train AI models?

Your data is never used to train external AI models. It is used solely to generate intelligence within your account.

How long is my data retained?

Account data deleted within 30 days of a deletion request. Specific retention schedules are available in the enterprise data agreement.

Privacy Contact

Questions about data handling, deletion requests, or GDPR inquiries:

privacy@getmickey.ai · security@getmickey.ai