PRO trial terms

Mivlet PRO pilot · Version 28 October 2026

Scope and trial

These terms govern the free PRO trial provided by Patolix, SIA (company details) to the participating organization. The owner must be authorized to act for that organization. The owner accepts these terms, including the data processing terms below, on behalf of the organization when creating its workspace. The accepted version is available to save. A separately agreed written process may also be used before real workspace data is entered.

The first eligible organization created by its owner receives 14 days of PRO recording access from its creation time. Employees share that organization's end date; joining later does not restart the trial. The deadline is shown in Settings → Plan. No payment card is required, there is no automatic charge, and the pilot does not automatically become a paid subscription. Paid continuation requires a separate choice when available.

After the trial, recording stops and existing history remains available under the retention terms below. Any trial extension must be separately agreed; it is not automatic.

Accounts and work

Use an individual account and a unique password. Owners control invitations and access; administrators assign Timer buttons. Check email addresses and remove access when no longer needed. Two-factor authentication is recommended. If you enable it, keep a backup authenticator or a secure copy: we do not disable it on the strength of an email or invoice alone if all authenticators are lost.

Use Mivlet lawfully and only for data you are authorized to process. Inform employees about time tracking. Do not upload accounting documents, special-category personal data or other unnecessary confidential information in names, comments or support messages. Do not attempt to access other organizations or disrupt the service.

Availability, records and support

The pilot is an early release and may contain defects or require maintenance. We will investigate reported failures and inform affected owners about material incidents. There is no guaranteed uptime or response time during the free pilot. Review recorded time and synchronize pending work before clearing browser data. Mivlet is not a payroll or accounting system.

Use the Mivlet contact form for support, export or deletion requests. We may temporarily restrict access when reasonably necessary to protect accounts or the service, informing the owner where possible. You may end participation through support at any time; no cancellation fee applies.

Data after the pilot

Your organization retains responsibility for its data. Unless it requests earlier deletion or law requires otherwise, time history is retained for viewing for 12 months after PRO recording access ends. We give the owner at least 30 days' notice before routine deletion. Export and deletion assistance and retention notices are handled manually during this pilot.

Changes and applicable law

We will notify the owner before material changes to pilot terms. Paid terms will be presented separately. Latvian law applies, subject to mandatory applicable rights. We first seek to resolve disputes through direct contact. Nothing here excludes liability or rights that cannot lawfully be excluded.

Data processing terms

These terms form the data processing agreement between the participating organization (Customer) and Patolix, SIA (Processor) for workspace data. The Customer acts as controller, or as an authorized processor for its own controller. In the latter case it confirms authority to appoint Patolix as a subprocessor.

Instructions and scope. We process data only on the Customer's documented instructions to provide time tracking, access management, synchronization, reporting, support and agreed retention or deletion. Processing includes collection, storage, retrieval, access-controlled disclosure, export and deletion. It lasts for participation and the agreed retention period. Data subjects are users, invited employees and any people identified in Timer button names or comments. Data includes identifiers, emails, roles, assignments, time records, comments and user-entered rates. Special-category data is not intended. We will inform the Customer if an instruction appears to infringe data protection law or if law requires processing outside these instructions, unless legally prohibited.

Confidentiality and security. Access is limited to authorized persons bound by confidentiality. We maintain appropriate measures including encrypted transport, individual authentication, optional two-factor authentication, database-enforced organization permissions, restricted server credentials, audit records and backups. We assess risks and maintain these measures rather than guaranteeing absolute security. The Customer controls its users, devices and lawful collection of information.

Subprocessors and transfers. The Customer authorizes Supabase for database/authentication, Vercel for application hosting and Resend for service email delivery, with their documented infrastructure subprocessors. We impose corresponding data protection obligations and remain responsible for our subprocessors' performance of them. We give prior notice of intended additions or replacements and allow a reasonable opportunity to object on data protection grounds before affected processing begins. We will seek an alternative or enable termination and data return if an objection cannot be resolved. Transfers outside the EEA require a valid transfer mechanism, such as an adequacy decision or standard contractual clauses; details are available on request.

Assistance and incidents. Taking account of the processing, we assist with data-subject requests, security obligations, impact assessments and consultation with supervisory authorities. We notify the Customer without undue delay after becoming aware of a personal-data breach, provide available information and cooperate with containment and notification duties. We do not independently decide the Customer's response to workspace data-subject requests.

Return, deletion and review. At the Customer's choice we return or delete workspace personal data when processing ends, subject to legal retention duties. The agreed history retention period is an instruction to retain data unless the Customer requests earlier deletion. Backup data remains protected until rotation removes it, and deletion instructions are reapplied after restoration. We provide information needed to demonstrate compliance and allow and contribute to audits, including inspections by the Customer or its mandated auditor, under reasonable security and confidentiality arrangements.

Save trial terms, data processing agreement and privacy notice (28 October 2026)