Privacy Policy
Version dated 29.09.2026. Describes what personal data Mikalab collects, why, to whom it is transferred and how you can manage it. Prepared in accordance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI; for users from the EU and the United Kingdom it also takes the GDPR into account.
1. Who We Are
The personal data controller is individual entrepreneur (FOP) Kuznetsov Mykhailo Oleksandrovych, taxpayer registration number (RNOKPP) 3045807199, 26 Vatutina St., Marianivka village, Ukraine 08650 (hereinafter, "we"). For data protection questions, write to support@mikalab.online.
2. Scope
This policy applies to the mikalab.online website and its subdomains, the Mikalab service, correspondence with support, newsletters, the referral and partner programs and the integration with Meta.
3. What Data We Collect
| Category | What exactly | Source |
|---|---|---|
| Account | name, email, password (in encrypted form), company, language, time zone, team members | from you at registration |
| "Contact us" form | name, email, company, phone | from you |
| Payment | plan, amount, date, transaction ID, card type and last 4 digits, country | from the payment provider. We do not receive the full card number |
| Content | links, briefs, texts, logos, images, created avatars, senses, scripts and creatives | from you and created by the service |
| Meta | IDs and names of ad accounts, access token, campaign and ad data, statistics (impressions, clicks, spend, conversions), Meta profile name and ID | from Meta after your permission ads_read, ads_management. We do not receive your Facebook password |
| Technical | IP address, browser, device, activity logs, cookies, referral or partner code | automatically |
| Communication | emails to support, feedback, messages in support channels | from you |
If you upload other people's data to the service (for example, photos or customer reviews), you are responsible for having the right to do so.
For audience analysis, the service uses open sources: the page at the link you provide, public reviews and discussions. This data is processed in aggregated form; we do not build profiles of specific individuals.
4. Purposes and Legal Grounds
| Purpose | Legal ground |
|---|---|
| Create an account, provide the service, accept payment, respond in support | performance of the contract (offer) |
| Connect Meta ad accounts and export creatives | performance of the contract and your permission in Meta |
| Protect the service from fraud, fix errors, improve the service | legitimate interest |
| Accrue referral bonuses and partner commissions | performance of the contract |
| Send news and offers | consent; for customers — legitimate interest, with the option to unsubscribe in every email |
| Analytics and advertising cookies | consent |
| Keep accounting and tax records | legal obligation |
5. Artificial Intelligence
To create avatars, scripts and creatives, your content is transferred to AI model providers via their APIs. We choose providers whose API data is not used for model training by default. We do not sell your content and do not transfer it for training other parties' models.
6. Who We Share Data With
We do not sell personal data. We transfer it only to contractors without whom the service cannot operate, and only to the extent necessary for their task.
| Contractor | Purpose | Location |
|---|---|---|
| [Hosting provider] | servers and database | Ukraine |
| [Payment provider] | accepting payments and refunds | Ukraine |
| AI model providers, e.g. OpenAI, Ideogram | text and image generation | USA |
| Resend | service emails: confirmations, invoices, password recovery | USA |
| MailerLite | newsletters | EU |
| Endorsely, Viral Loops | tracking of partner and referral visits and payments | Ukraine |
| Meta Platforms | exporting creatives and retrieving statistics at your command | USA, Ireland |
| [Analytics services, if used] | visit statistics | Ukraine |
We may also transfer data to state authorities if required by law.
7. International Transfers
Some contractors operate outside Ukraine — in the EU and the USA. The transfer is necessary for the performance of the contract with you and is carried out with the safeguards provided by the contractors' terms, including the EU Standard Contractual Clauses.
8. How Long We Keep Data
| Data | Period |
|---|---|
| Account and content | while the account is active; after the end of the trial period or subscription — 30 days, then deletion |
| Meta access token | until the integration is disconnected; deleted immediately afterwards |
| Payment documents | as long as required by tax legislation (usually at least 1095 days) |
| Technical logs | up to 90 days |
| Backups | overwritten within 30 days |
| Newsletters | until you unsubscribe or withdraw consent |
9. Your Rights
In accordance with Article 8 of the Law "On Personal Data Protection", you can:
- find out what data we store and receive a copy of it;
- correct inaccurate data;
- request deletion of your data;
- object to processing and withdraw consent;
- transfer your data to another service (for users from the EU);
- file a complaint with the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, with your local data protection authority.
Send your request to support@mikalab.online from the email address linked to your account. We respond within 30 calendar days. How to delete data yourself — see the "Data Deletion" page mikalab.online/en/data-deletion.
10. Security
Data is transmitted over a secure connection (HTTPS). Passwords are stored in encrypted (hashed) form, Meta tokens in encrypted form. Only those who need it for the operation of the service have access to the data. If a breach affecting your data occurs, we will notify you without undue delay.
11. Emails
Service emails (payment confirmations, renewal reminders, security) are sent to all users. We send marketing emails with your consent or, as a customer, about the service's features. You can unsubscribe via the link in every email.
12. Cookies
Which cookies we use and how to manage them is described in the Cookie Policy mikalab.online/en/cookies.
13. Age
The service is intended for persons over 18 years of age. We do not knowingly collect data of minors.
14. Changes
We publish a new version of the policy on this page with its date. We notify of material changes via email.
15. Contacts
Individual entrepreneur (FOP) Kuznetsov Mykhailo Oleksandrovych, 26 Vatutina St., Marianivka village, Ukraine 08650. Email: support@mikalab.online.