Effective Date: 07/05/2026
mibeero is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in compliance with applicable laws, including GDPR and PIPEDA.
We collect:
1. Account and profile information: first name, last name, username, email, country, bio, and profile or backdrop images you choose to upload.
2. Authentication information: if you register with email and password, we store a hashed password (we do not store your plain-text password). If you sign in through Google or Microsoft, we store account identifiers and profile details supplied by those providers (such as name, email, and profile image). We issue secure session tokens so you can stay signed in, including a short-lived access token in your browser and a separate refresh mechanism that does not expose long-lived credentials to page scripts.
3. User-generated content: reviews, comments, ratings, tags, mentions, prices, and media files (images and videos) you upload; unpublished review drafts you save while writing (including draft text and attached media), stored on our servers and visible only to you until you publish or delete them.
4. Social and activity data: follows, likes, notifications, and related interactions on the platform.
5. Technical data: IP address, browser type, and device information as typically processed by our hosting environment for security, fraud prevention, and service delivery.
6. Affiliate program data (when enabled): purchase URLs and sponsored flags on your reviews; affiliate program enrollment date; PayPal email for payouts; click attribution logs for enrolled creators (review id, destination URL, timestamp, and approximate viewer country when available — not recorded for your own clicks on your reviews, and not recorded while you are not enrolled); in-app notifications when affiliate payouts are recorded. When a monetized purchase link is used, outbound clicks are routed through our affiliate partner Sovrn Commerce (including redirect.viglink.com), which may also receive technical data needed to attribute the click.
7. Optional AI assist inputs: when you choose AI-assisted drafting for a review description or profile bio, we process the prompt and context you provide (such as draft text, product and brand names, star rating, and your first and last name) to generate suggestions. When you choose AI analysis & verification while writing a review, we process product photos you uploaded plus related details you entered (such as brand, product name, country, price, purchase URL, and draft review text) to suggest product names and assess whether those details appear consistent with your photos. Do not enter sensitive personal information in AI prompts or review fields used with these features.
8. Billing and brand-claim data: subscription plan and status; Stripe customer and subscription identifiers; billing currency and interval; brand claim domain and work email; claim review status; in-app billing and claim notifications.
We use your data to:
1. Provide and maintain your account and the mibeero service.
2. Display your profile, reviews, comments, and other content to other users.
3. Enable community features such as follows, likes, mentions, and notifications.
4. Communicate updates, support messages, and important service notices.
5. Improve platform features, performance, and security.
6. Operate the affiliate program when enabled: attribute outbound purchase clicks, estimate creator earnings, reconcile commissions with Sovrn reports, and process creator payouts.
7. Provide optional AI assist when you request it, including drafting for review descriptions and profile bios, and analysis & verification that suggests product names and checks purchase details against your photos before you submit a review.
8. Save and sync unpublished review drafts while you write, subject to plan limits.
9. Process payments and entitlements; verify brand-domain ownership; administer brand claims; deliver in-app billing and claim notifications (domain verification may still be sent by email).
10. Make public pages and public user-generated content available to search engines and AI crawlers that follow our robots.txt, to help people discover mibeero and fashion reviews.
Your data is hosted on Microsoft Azure. Account and application data are stored in Azure Cosmos DB for MongoDB. Media files are stored in Azure Blob Storage. Unpublished review drafts and their attached media are stored in the same infrastructure and are not visible to other users unless you publish them. When you delete your account, we remove your unpublished review drafts and any media files attached to them from our servers. When you use optional AI assist (writing or analysis & verification), the inputs described above are processed through Microsoft Azure AI Foundry; analysis may temporarily transmit product photos to that service for vision processing. We do not use your content to train public models through these features. AI analysis results are not stored in review drafts — if you close and reopen a draft, you may need to run analysis again. Billing and claim records may be retained for tax, fraud prevention, and dispute resolution after account deletion where required by law. We use encryption in transit (HTTPS), access controls, and industry-standard security practices to protect your information. Data is retained only as long as necessary to provide the service and meet legal requirements.
Your information may be stored and processed on servers in various countries where we or our subprocessors operate. Where personal data is transferred across borders, we implement appropriate safeguards for lawful transfers, such as Standard Contractual Clauses approved by relevant authorities, reliance on adequacy decisions where available, and other mechanisms permitted under applicable privacy laws.
We do not sell or rent your personal information. We may share your data only:
1. With trusted service providers (for example cloud hosting and infrastructure), under confidentiality and data-processing obligations consistent with this policy and applicable law.
2. If you sign in through third-party identity providers (such as Google or Microsoft), in line with the permissions you grant and those providers' terms and privacy notices.
3. With other users, when you post public content or use community features visible on the platform.
4. If required by law, regulation, court order, or lawful government request, or where we reasonably believe disclosure is necessary to prevent harm, fraud, abuse, or to protect the security of our users or the service.
5. If mibeero is involved in a merger, acquisition, reorganization, financing, or sale of assets, your information may be transferred as part of that transaction; we will provide notice as required by applicable law before your information becomes subject to a different privacy policy.
6. With Sovrn Commerce, our affiliate redirect partner, when you click a monetized purchase link on a review. mibeero sends you through Sovrn's redirect service (for example redirect.viglink.com) so clicks can be attributed and commission calculated. Sovrn may receive information such as the destination retailer URL, referrer, and standard technical or device signals. Sovrn processes that data under its own privacy practices; see Sovrn's privacy policy.
7. With Microsoft Azure AI Foundry when you use optional AI assist (writing or analysis & verification), so suggestions and verification assessments can be generated from the prompts, context, and photos you submit. Microsoft processes that data as our infrastructure subprocessor under its own terms and privacy practices.
8. With Stripe, our payment processor, to manage subscriptions and payment methods. Stripe processes payment details under its own privacy practices — see Stripe's Privacy Policy. We send brand domain verification and account security emails through Resend.
Depending on your location, you may have the right to access, correct, delete, or export your personal data. You can delete your account at any time from Profile Settings in the app. Deletion removes your profile, personal identifiers, and unpublished review drafts (including attached media); public reviews and comments may remain in anonymized form. Affiliate and payout records may be retained for legal and financial compliance. You may also contact us at [email protected] to exercise these rights.
We use browser localStorage to keep you signed in across page loads (for example a short-lived access token and basic profile details derived from your session). We also set a secure HttpOnly cookie on our API host used to refresh your session when the access token expires; that cookie is not readable by page scripts. When you return to an open tab, the app may refresh your session in the background before you are signed out. We may use additional cookies or similar technologies to improve user experience and analyze site traffic. You can manage cookie preferences in your browser settings. Clearing localStorage or cookies will sign you out of the service.
We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted here with an updated effective date.