1. Who we are
During the beta, MIM Lead Organizer (“MIM”, “we”, “us” or “our”) is operated by Jose Miguel Costa Moreira in the Netherlands.
For personal data that MIM itself determines how and why to process, Jose Miguel Costa Moreira is the controller for the purposes of applicable data-protection law.
Contact: hello@mimlead.com.
2. What we process
Account and authentication data
- MIM user ID and account email address.
- Google account identifier and basic identity information made available through Google Sign-In.
- Authentication/session identifiers and timestamps needed to keep you signed in and protect the service.
- Account creation, update and last-seen timestamps.
MIM does not operate a password database for users who authenticate through Google.
Licensing and device data
- Device identifier or hash used for licensing.
- Device name and platform information supplied by the application.
- Device activation, last-seen and deactivation timestamps.
- Trial, complimentary or paid entitlement status and dates.
- Administrative/security audit records relating to account-access changes.
Subscription and payment data
Paid subscriptions are not required for the current beta. If paid subscriptions are introduced, the payment provider or merchant of record identified at checkout may process payment and tax information. MIM may retain account-level subscription metadata such as provider customer ID, subscription ID, plan, status and renewal/end dates. MIM does not store full card numbers.
Support and security data
If you contact us, we process the information you provide in that request. Our hosting and security providers may also process technical request data such as IP address, browser/device information and timestamps where reasonably necessary to operate and secure the service.
3. Why we process personal data
| Purpose | Typical GDPR basis |
|---|---|
| Create and operate your MIM account | Performance of the service agreement |
| Authenticate users and maintain secure sessions | Performance of the agreement; legitimate interests in security |
| Enforce trial/device/access limits | Performance of the agreement; legitimate interests in preventing abuse |
| Provide user-requested Drive, geocoding or enrichment functions | Performance of the agreement / steps requested by you |
| Protect MIM and investigate misuse | Legitimate interests in security, service integrity and fraud prevention |
| Comply with accounting or other legal obligations | Legal obligation |
4. Google Sign-In and Google Drive
Google Sign-In
MIM uses Google Sign-In to authenticate users. Identity information received through sign-in is used to create or identify your MIM account and protect account access.
Google Drive
Google Drive access is separate and optional. If you connect Drive, MIM uses that authorisation only for the backup/restore functionality implemented in the application and requests only the permissions needed for that function.
Disconnecting Drive or deleting your MIM account does not automatically delete backup files already stored in your Google Drive. You control those files through your Google account.
5. Your local-first working database
Your working MIM database is normally stored locally in browser/device storage and scoped to the signed-in MIM account. It can include leads, companies, business contacts, notes, websites, LinkedIn URLs, addresses, coordinates, priorities, statuses, exhibitions, saved views and related sales information (“Customer Data”).
Because local-only Customer Data is not held in MIM’s central account database, we may be unable to access, recover, correct or delete it remotely for you.
6. Optional external features
Some MIM functions deliberately use third-party services. If you choose to use such a function, the information required to perform that request may be sent to the relevant provider.
- Google Drive backup/restore: the backup file and information required to create, locate or restore it.
- Geocoding/location lookup: an address, place name or related location query used to obtain coordinates.
- Web/company enrichment: the minimum company, website, public contact or search information needed for the lookup you request.
- External search/maps: search terms or location information when you intentionally open an external search, mapping or navigation service.
Those providers may process the information under their own terms and privacy policies. MIM aims to minimise the information sent for each requested function.
7. Cookies, browser storage and tracking
MIM uses strictly necessary cookies and similar technologies for authentication, session security and requested functionality. Browser storage, including IndexedDB/local storage, is used for the local-first working database and application settings.
MIM currently does not use advertising cookies, advertising pixels or cross-site behavioural advertising trackers.
8. When we share personal data
We disclose personal data only where reasonably necessary to operate the service, provide a function you requested, comply with law or protect legal rights. Recipient categories can include:
- Cloud infrastructure and security providers, including Cloudflare.
- Google, for authentication and separately authorised Google Drive functionality.
- Payment providers or merchants of record if paid subscriptions are introduced.
- Geocoding, mapping, enrichment and search providers when you invoke those features.
- Professional advisers or public authorities where legally required or reasonably necessary to establish, exercise or defend legal claims.
MIM does not sell personal data and does not share personal data for cross-context behavioural advertising.
9. International transfers
Some providers may process personal data outside the European Economic Area. Where MIM is responsible for an international transfer and applicable law requires a safeguard, we use an appropriate mechanism such as an adequacy decision, Standard Contractual Clauses or another lawful mechanism.
10. Retention
| Data | Typical retention |
|---|---|
| Active account and entitlement data | For the life of the account/entitlement |
| Active session data | Until expiry, logout or revocation, plus a short security period |
| Expired/revoked session records | Normally deleted or anonymised within 30 days unless needed for security |
| Deactivated device records | Normally up to 12 months |
| Administrative/security audit logs | Normally up to 24 months |
| Support correspondence | Normally up to 24 months after closure unless needed longer for a dispute/legal obligation |
| Required accounting/tax records | For the legally required period |
| Local Customer Data | Not centrally retained by MIM; remains on the user’s device until removed there |
| Google Drive backups | Controlled by the user in Google Drive until the user removes them |
11. Your rights
Where the GDPR applies, you may have rights to access, rectify, erase, restrict or object to processing of your personal data and, in some cases, receive certain data in a portable format.
These rights apply to personal data MIM actually controls. If information exists only in your local MIM database, MIM may not possess it and therefore may not be able to retrieve or erase it remotely.
You may also lodge a complaint with the Autoriteit Persoonsgegevens or another competent supervisory authority.
12. Security
MIM uses reasonable technical and organisational measures appropriate to the nature of the service, including HTTPS, secure authentication/session practices, account-scoped local storage, access controls and restricted administrative access.
No internet-connected service can guarantee absolute security. If you believe your MIM account or MIM-controlled data may have been compromised, contact hello@mimlead.com.
13. Account deletion
You may request deletion of your MIM account by contacting hello@mimlead.com. We will delete or anonymise MIM-controlled account information where required and technically feasible, subject to information we must retain for legal, accounting, security or dispute-resolution purposes.
Deleting your MIM account does not automatically erase data stored locally in your browser/device, exported files, or backup files stored in your Google Drive.
14. Business-user responsibilities
MIM is intended for ordinary business-contact and sales-organisation information. If you use MIM for an employer or other organisation, you are responsible for following that organisation’s policies and having an appropriate basis for the Customer Data you choose to enter and use.
Do not use MIM to store special-category personal data, criminal-conviction data, payment-card data, passwords/authentication secrets or other highly sensitive personal data unless MIM expressly supports that use and appropriate safeguards have been agreed.
15. United States
MIM does not sell personal information and does not share personal information for cross-context behavioural advertising. MIM currently does not use technologies to track users across unrelated websites for behavioural advertising. If a U.S. state privacy law becomes applicable to MIM, we will provide any additional rights and disclosures required by that law.
16. Changes and contact
We may update this policy when MIM, our providers or applicable law changes. We will post the revised policy with a new effective date and provide additional notice where required.
Operator: Jose Miguel Costa Moreira
Country: Netherlands
Email: hello@mimlead.com
Effective date: 24 September 2026