Rechtliches & Datenschutz

Imprint

Mandatory provider information.

Provider

Miyon AG
Im Duxer 42
9494 Schaan
Principality of Liechtenstein

Authorised representative

Mathias Maierhofer, CEO / Chairman of the Executive Board

Register & tax

Commercial register no.: FL-0002.751.913-7
Register: Commercial Register of the Principality of Liechtenstein (Office of Justice, Vaduz)
VAT no.: 63941

Contact

Email: Mathias.Maierhofer@miyon.ai
General: info@miyon.ai

Responsible for content

Mathias Maierhofer, address as above.

Privacy Policy

This Privacy Policy covers the personal data we process through this marketing website under the General Data Protection Regulation (GDPR) and the data protection laws applicable in the EU. How Miyon processes end-customer data inside the product (call records, voice, transcripts) is governed separately by the Data Processing Agreement (DPA); see Compliance.

1. Data controller

The controller within the meaning of the GDPR and other data protection laws applicable in the Member States of the European Union is:

Miyon AG
Im Duxer 42
9494 Schaan
Principality of Liechtenstein
info@miyon.ai

2. Data Protection Officer

The Data Protection Officer responsible for processing:

External Data Protection Officer
Kertos GmbH
Brienner Str. 41, 80333 Munich, Germany
Data Protection Officer: Dr. Kilian Schmidt
dsb@kertos.io · +49 151 525 797 93

3. Definitions

This Privacy Policy uses the terminology of the GDPR. It should be legible and understandable for the general public, as well as our customers and business partners. We use the following terms:

• Personal data: any information relating to an identified or identifiable natural person (the "data subject").
• Data subject: any identified or identifiable natural person whose personal data is processed.
• Processing: any operation performed on personal data, such as collection, recording, storage, use, disclosure, erasure or destruction.
• Restriction of processing: the marking of stored personal data with the aim of limiting its processing in future.
• Profiling: any automated processing of personal data to evaluate certain personal aspects relating to a natural person.
• Pseudonymisation: processing personal data so it can no longer be attributed to a specific data subject without additional information.
• Controller: the person or body which determines the purposes and means of the processing.
• Processor: a person or body which processes personal data on behalf of the controller.
• Recipient: a person or body to which personal data are disclosed.
• Third party: a person or body other than the data subject, controller, processor and persons authorised to process the data under their direct authority.
• Consent: any freely given, specific, informed and unambiguous indication of the data subject's wishes agreeing to the processing of their personal data.

4. Cookies

This website uses cookies, text files stored on your device via your browser, to provide a more user-friendly service. You can manage your choices at any time via the banner and the cookie preferences link in the footer. The categories of cookies we use are listed in the Cookie Policy below.

5. Collection of general data and information

When you or an automated system call up the website, we collect general data and information that are stored in the server log files. This may include:

• browser types and versions used;
• the operating system of the accessing system;
• the website from which an accessing system reaches us (referrer);
• the sub-pages accessed;
• the date and time of access;
• an Internet protocol (IP) address;
• the Internet service provider of the accessing system;
• other similar data used to defend against attacks on our information-technology systems.

We use this data anonymously for the correct delivery and security of the website, and we draw no conclusions about you from it.

6. Contact via the website

The website lets you reach us quickly by electronic means, including a contact form and email addresses. If you contact us by email or through a contact form, the personal data you transmit (such as name, business name, email, phone number and your message) are stored to handle your request. We do not disclose this data to third parties without a legal basis.

7. Web analytics

With your consent, we measure aggregate website usage with PostHog on its EU Cloud (EU data residency). Analytics here is first-party and minimal: there is no session recording, no advertising network, and no tracking across other websites. We capture no personal data in analytics events (no names, email addresses or message content, only coarse, non-identifying properties). The provider processes your IP address server-side to derive an approximate location (city or country). You can decline analytics in the cookie banner at any time; the provider acts as a processor and is listed in the sub-processor register, see Compliance.

We also record where on a page visitors click and how far they scroll, shown in aggregate as heatmaps. This does not record your session, and what you type into a form field is never captured.

8. Third-party services

We keep the number of third parties on this website to a minimum and use only processors that handle data on our instructions. For this website:

• PostHog (EU Cloud) provides the web analytics described above, with EU data residency, no session recording, and no personal data in event properties.
• CookieYes provides the cookie-consent banner and stores a record of your consent choices.
• Vercel hosts and delivers this website (content-delivery network) and processes server log data, including IP addresses, for delivery and security.
• Zoho CRM (Zoho Corporation B.V., EU data centre) stores what you send through the forms on this website (contact, demo booking, demo call and partner enquiry) so that a colleague can respond to your request.
• Miyon platform (app.miyon.ai) receives a copy of what you send through the forms and e-mails it to our team, and places the demo call you request. For that call it uses a telephony provider and an AI language provider as sub-processors; both are named in the sub-processor register.

The full, current sub-processor register is available in the DPA and at Compliance.

9. International data transfers

We keep personal data within the European Economic Area wherever possible. Our analytics (PostHog) and consent records (CookieYes) are processed in the EU/EEA or in a country recognised by an EU adequacy decision. Website hosting is provided by Vercel Inc. (United States). Where personal data such as IP addresses in server logs is processed in the United States, the transfer is safeguarded by the EU-US Data Privacy Framework and/or the EU Standard Contractual Clauses. You may request a copy of the relevant safeguards from our Data Protection Officer.

10. Routine erasure and blocking of personal data

We process and store your personal data only for the period necessary to achieve the purpose of storage, or as required by the laws to which we are subject. When the purpose ceases to apply or a prescribed storage period expires, the personal data are routinely blocked or erased in accordance with the law.

11. Rights of the data subject

• Confirmation: to obtain confirmation as to whether personal data concerning you are being processed.
• Access: to information about your stored personal data, including the purposes, categories, recipients, storage period, the source of the data, and the existence of any automated decision-making.
• Rectification: to have inaccurate personal data corrected without undue delay.
• Erasure ("right to be forgotten"): to have your personal data erased where a legal ground applies and processing is not necessary.
• Restriction of processing and data portability.
• Objection to processing, and the right to withdraw consent at any time.

To exercise any of these rights, contact our Data Protection Officer at dsb@kertos.io or Mathias.Maierhofer@miyon.ai. We respond within 30 days.

12. Right to lodge a complaint

You have the right to lodge a complaint with a competent supervisory authority in the event of a data protection violation, in particular in the Member State of your residence, place of work or the place of the alleged infringement.

13. Legal basis for processing

• Art. 6(1)(a) GDPR, where we obtain your consent for a specific purpose;
• Art. 6(1)(b) GDPR, where processing is necessary to take steps at your request before or during a contract;
• Art. 6(1)(c) GDPR, where we are subject to a legal obligation;
• Art. 6(1)(f) GDPR, where processing is necessary for our legitimate interests.

14. Legitimate interests

Where processing is based on Art. 6(1)(f) GDPR, our legitimate interest is to operate, secure and improve this website and to respond to enquiries from prospective partners and customers.

15. Period for which personal data are stored

The criterion for the storage period is the respective statutory retention period. After it expires, the data are routinely deleted, provided they are no longer necessary to fulfil or initiate a contract or to respond to your request.

16. Automated decision-making

As a responsible company, we do not use automated decision-making or profiling on this website.

17. Google user data (Calendar & Sheets integrations)

This section is an exception to the marketing-website scope noted at the top of this policy. Where you (a Miyon customer) connect a Google account to Miyon's Calendar or Google Sheets tools in the product, Miyon accesses a limited set of Google data solely to perform the actions you set up. As required by Google, we disclose this here publicly, in addition to the Data Processing Agreement (DPA).

You can disconnect the connected Google account at any time from the tool's connection screen in Miyon (this revokes Miyon's access at Google and removes the tools that use that account), or revoke access directly from your Google Account settings.

Google Calendar. With your authorization (the calendar.readonly and calendar.events scopes), Miyon reads your calendar's availability and creates, updates or cancels appointments on the calendar you connect, so your AI assistant can book and manage appointments during calls as you configure it. Miyon stores only the data needed to manage those bookings (event identifiers, appointment times and the details captured for the booking) and does not retain a copy of your wider calendar.

Google Sheets. With your authorization (the drive.file scope), Miyon accesses only the specific spreadsheet you select through the Google Picker, never your other Google Drive files. Miyon reads rows from, or appends rows to, that spreadsheet so your assistant can look up information or record data as you configure it. Miyon stores the spreadsheet's identifier and the field mapping you define, and accesses the spreadsheet's contents on demand.

How we use and protect Google user data. Miyon uses Google user data only to provide the features described above. Miyon does not sell it, does not use it for advertising, and does not use it to develop, improve or train generalized or broadly applicable AI/ML models. Human access is limited to what is necessary to operate the feature, resolve a support request you raise, maintain security or comply with applicable law. Data is encrypted in transit and at rest and scoped to your account.

With whom we share it. To produce the assistant's response during a call, Google user data returned by a tool (for example, a spreadsheet row or a calendar time) is sent to our third-party AI provider, OpenAI, solely to generate that reply within your session; OpenAI processes it under its API terms as a processor and does not use it to train its models. Otherwise, Miyon does not share, transfer, or disclose Google user data to third parties, apart from service providers that process it on Miyon's behalf (listed in our Data Processing Agreement) and where required by law.

Limited Use. Miyon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookie Policy

Miyon's marketing website (this site) uses a minimal set of cookies. The platform dashboard uses separate session cookies covered in your DPA.

Cookies on this site

• Essential cookies: session continuity, language preference, consent state. Cannot be disabled.
• Analytics cookies: anonymised page-view counts (EU-resident analytics, no cross-site tracking). Opt-in via banner.
• Marketing cookies: none on the marketing site.

Third-party cookies

The marketing site does not embed Facebook / X / TikTok pixels. Embedded video (if any) uses privacy-friendly providers that don't set tracking cookies before consent.

Consent

Consent is captured via the banner on first visit. You can change your choice at any time via the cookie preferences link in the footer.

Terms of Use

The terms below apply to the public marketing site. The platform subscription is governed by the separate Master Service Agreement (MSA) included in your onboarding pack.

Use of the site

You may use this site to read about Miyon, request a free trial, request a demo, or request published documents (DPA, sub-processor list). You may not scrape it at scale or attempt to bypass authentication on gated areas.

Intellectual property

The Miyon name, logo, brand marks (M / O / O-open / IOI), and the Voice Orb component are property of Miyon AG. Other trademarks (HubSpot, Salesforce, Cal.com, etc.) are property of their respective owners and used here for descriptive purposes.

Disclaimers

The marketing site describes the product as it is operated today.

Liability

This site is provided as-is. Operational liability for the platform itself is governed by the MSA and the SLA included in your Scale-tier contract.

Governing law

These terms and the MSA are governed by the laws of the Principality of Liechtenstein. Exclusive jurisdiction: the competent courts of Liechtenstein (Vaduz), to the extent permitted by mandatory law.

Disclaimer

Liability for content

We compile the content of this site with care, but assume no liability for its accuracy, completeness or timeliness. As a service provider, Miyon AG is responsible for its own content on these pages under the general laws of the Principality of Liechtenstein. We are not obliged to monitor transmitted or stored third-party information; obligations to remove or block the use of information under the general laws remain unaffected.

Liability for external links

This site may contain links to external websites of third parties over whose content we have no influence. We therefore accept no liability for such third-party content; the respective provider or operator of the linked pages is always responsible for their content. Should we become aware of legal violations, we will remove such links promptly.

Demos, figures & availability

Interactive demos, sample conversations, dashboards, names and figures shown on this site are illustrative and for demonstration only. They are not a binding offer or a guarantee of any specific result. Which integrations are available today versus on the roadmap is described on the Integrations page; nothing on this marketing site constitutes a contractual commitment. The platform itself is governed by the separate Master Service Agreement (MSA) and SLA.

Copyright

The content and works on these pages, including the Miyon name, logo and brand marks, are protected by copyright and remain the property of Miyon AG. Third-party trademarks (e.g. HubSpot, Salesforce, Cal.com) are the property of their respective owners and are used here for descriptive purposes only. Any use beyond the limits of copyright requires our prior written consent.