Privacy notice

Mivlet PRO pilot · Version 12 October 2026

Who is responsible

Patolix, SIA operates Mivlet. Our company details and contact address identify the service provider. Use the Mivlet contact form for privacy requests.

We are the controller for account administration, service communications, security and support. Your organization decides why and how it records work time and who can see those records. For that workspace data, we act on the organization's instructions under the data processing terms. Contact your organization first about its use of employee time records.

Data and purposes

We process your email address, authentication information, account preferences, organization membership, invitations and security events to provide and protect access. We also record the version of the terms accepted by an organization owner, their confirmed account email and the server acceptance time to document the service and data processing agreement. An organization owner may supply your email address to invite you. We use your email for account confirmation, password recovery, invitations and necessary service notices.

Workspace data includes Timer button names, assignments, time intervals, comments and any rates entered by the organization. Authorized members see data according to their role and assignments. Please avoid entering sensitive personal information in names, comments or support messages.

Support enquiries contain the details you submit and, when you choose to include it, organization context. Technical providers process connection information such as IP addresses, request times and error diagnostics to deliver and secure the service. We do not sell personal data, use advertising trackers or make decisions with legal or similarly significant effects solely by automated profiling.

Legal bases

We use account information to perform our service agreement with you where you are a party to it. For employees and business contacts, our legitimate interests are administering the business relationship and providing a secure working service. Security, abuse prevention and responding to support requests also serve these interests. We process information to comply with legal obligations where applicable. Your organization is responsible for the legal basis and employee information relating to its workspace records.

Providers and international processing

Supabase supplies the database and authentication; Vercel hosts the application; Resend delivers service emails; Apple iCloud hosts our support mailbox. Only information needed for the relevant service is shared. Our primary application database is hosted in Frankfurt, Germany. Provider support, email delivery and infrastructure may involve processing outside the EEA. Applicable safeguards may include European Commission adequacy decisions and standard contractual clauses. Contact us for the safeguards applicable to your data and a copy or reference to them.

There is no card collection or payment processing in this free pilot. We may disclose information where legally required, or to professional advisers subject to confidentiality.

Retention and deletion

Workspace history remains available for 12 months after PRO recording access ends unless the organization requests earlier deletion or a legal obligation requires retention. The owner will receive at least 30 days' notice before routine deletion. During the pilot, these requests and notices are handled manually through support.

Account and access information is retained while needed for your account and organization memberships. Agreement acceptance records are retained as needed to document the contract and comply with legal obligations; access is restricted. Support messages are retained while the enquiry remains open and reviewed for deletion within 12 months after closure, unless needed for a dispute or legal obligation. Technical logs follow the providers' configured retention periods. Backup copies expire through the applicable backup rotation and are isolated from ordinary use; deletion requests are reapplied if a backup is restored. Contact us for deletion or export assistance.

Your choices and rights

Depending on the legal basis and circumstances, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. We may need to verify your identity. Requests concerning workspace records are coordinated with your organization. You may complain to the Latvian Data State Inspectorate or your local supervisory authority.

Your email and authentication details are needed to create and secure an account. Providing optional comments and support context is your choice. See Cookies and storage for information stored on your device. Material changes to this notice will be communicated to affected pilot users.