Miggy Capital

Privacy

What data we hold, why, who touches it and how to delete it.

Last updated:

Controller

Mr Migraine LLC, owner of the Miggy Capital brand. For anything about privacy, including exercising your rights: hola@miggycapital.com.

What data we process

From your account: email address, name and picture if you provide them, and the language you use. These are handled by our identity provider, Clerk.

From your learning: your progress in the courses and simulators — lessons completed, score, streak — so you can pick up where you left off from any device.

From your purchases: which products you have active, since when and through which channel. Payment data — card, billing address — is handled directly by Stripe; we store only a customer identifier so we can open your billing portal.

From the mailing list, if you leave us your email: the address, the language, which form you used and the page you came from, and whether you have confirmed the subscription. It is a list separate from your account: you can be on it without having an account, and unsubscribe without losing your account.

We do not process special categories of data, we do not build advertising profiles and we make no automated decisions with legal effects on you.

Why, and on what legal basis

To provide the service you signed up for — your account, your progress, your access: performance of the contract.

To charge you and issue invoices, and to keep the accounting records the law requires: compliance with legal obligations.

To write to you about material changes to the service or your subscription: legitimate interest in keeping you informed about something that affects you.

To write to you on the mailing list, if you signed up: your consent. You can withdraw it whenever you like, from the unsubscribe link in any of those emails or by writing to us, and withdrawing it does not affect what was sent before.

Who else touches it

Clerk, for identity and account management. Stripe, for payments. Neon, for the database, hosted in Frankfurt (European Union). Vercel, for hosting the site and the apps.

All of them are processors: they process data on our behalf and under contract, not for their own purposes. We do not sell personal data, and we never share it with third parties for advertising.

Some of these providers are based in the United States, so there may be international transfers. These rely on the European Commission’s standard contractual clauses and on the applicable adequacy frameworks.

For how long

For as long as you have an account. If you delete it, we erase your account data and your progress, except what we must keep by legal obligation — mainly billing records, for the applicable tax periods.

On the mailing list, until you unsubscribe. When you do, we keep the address flagged as unsubscribed and only for that: so we do not write to you again by mistake. Deleting it outright would make it impossible to show we honoured your request.

Your rights

You can access your data, correct it, delete it, restrict or object to its processing, and ask us to hand it over in a portable format. Write to hola@miggycapital.com from your account email and we will reply within the legal one-month deadline.

If you think we have got it wrong, you can complain to the data protection authority in your country. In Spain that is the Agencia Española de Protección de Datos (aepd.es). First, if you like, tell us what happened: it is faster and usually fixable.

Who provides the service

Mr Migraine LLC

hola@miggycapital.com