Privacy Policy

Version 1.0 — Effective date: June 17, 2026

This document is the official privacy policy of Mify. It describes in a complete and transparent manner the collection, processing, retention and protection of your personal data, as well as the use of cookies on our showcase site, documentation site and application.

In accordance with GDPR principles voluntarily adopted by Mify as a reference standard, the data controller is:

Mify is committed to processing your personal data in accordance with the principles of lawfulness, fairness, transparency, minimization, accuracy, storage limitation, integrity and confidentiality.

This policy applies to all data processing carried out in the context of:

• Browsing the showcase site event.mifyyy.com
• Browsing the documentation site docs.mifyyy.com
• Accessing and using the Mify application via app.mifyyy.com
• Public invitation pages (invitation links, QR codes, RSVP)
• Public event modules (gallery, guestbook, program, menu, dress code, location, games)
• Email communications sent by Mify
• Contact and support forms

This policy does not apply to third-party websites to which Mify may redirect. Mify is not responsible for the privacy practices of these third parties.

4.1 — Organizer Users

4.1.1 Identification & Account Data

4.1.2 Event Data

• Event name (wedding, baptism or birthday)
• Event type, date(s), venue(s) and optional GPS coordinates
• Ceremony program, menu(s), dress code
• Couple / family story (optional text and media)
• RSVP deadline

4.1.3 Guest & Family Management Data

4.1.4 Financial & Payment Data

4.1.5 Google Drive Data (Photo Gallery)

When the organizer connects their Google Drive account to activate the photo gallery:

• OAuth 2.0 tokens (access_token and refresh_token): encrypted at rest
• Identifiers of selected Google Drive folders
• File metadata (names, types, modification dates)

The photos themselves never transit through Mify servers: guests view them directly from Google Drive.

4.2 — Data Collected from Guests

Public pages do not require account creation. Guest data is never used for commercial or advertising purposes.

4.3 — Technical Data Collected Automatically

When Mify relies on legitimate interest as a legal basis, a balancing test has been carried out between Mify's interests and the fundamental rights of the data subjects.

Upon expiry of the applicable period, data is permanently deleted or irreversibly anonymized. Backups are purged within an additional 30 days. Deletion requests are processed within a maximum of 30 business days.

Mify relies on carefully selected technical providers to operate the platform. Each is bound by a data processing agreement (DPA) compliant with GDPR.

None of these providers are authorized to use your data for purposes other than those strictly necessary for service execution. For the full list, contact privacy@mifyyy.com.

9.1 — Scope

• event.mifyyy.com — showcase site: navigation, functional and analytics cookies
• docs.mifyyy.com — documentation site: technical navigation cookies only

The Mify application (app.mifyyy.com) uses technical authentication mechanisms (JWT tokens) that are not subject to cookie consent as they are strictly necessary for service operation.

9.2 — event.mifyyy.com Cookies

🟢 Strictly necessary cookies (exempt from consent)

🔵 Functional cookies (consent required)

📊 Analytics cookies (consent required)

9.3 — docs.mifyyy.com Cookies

The documentation site collects only the technical navigation data strictly necessary for its operation. No additional advertising, analytics or functional cookies are placed.

9.4 — Managing Your Consent

On your first visit to event.mifyyy.com, a cookie management banner is presented to you. You can accept all cookies, reject non-essential cookies, or customize your preferences by category. Your choice is stored for 12 months and can be changed at any time via the 'Manage my cookies' link in the footer.

In accordance with GDPR principles adopted by Mify, you have the following rights:

Mify implements appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration or destruction.

Organizational measures

• Access to production data restricted to the minimum necessary
• Separation of development, test and production environments
• No real personal data in development environment
• Sensitive environment variables never integrated into source code

In the event of a breach likely to pose a risk to your rights, Mify commits to notifying the competent supervisory authority as soon as possible and informing you directly if the risk is high.

The Mify platform is intended for adults (18 and over) for creating organizer accounts. In the context of family events, information relating to children may be entered by the adult organizer (first name in the guest list, for example).

This data is processed with the greatest care: it is minimal, used only within the strict framework of event organization, and is not subject to any profiling or commercial processing. The organizer is responsible for ensuring the lawfulness of collecting data on minors.

Mify reserves the right to modify this policy to comply with new legal obligations, reflect service evolution, or incorporate user feedback.

• In case of substantial changes affecting your rights, an email will be sent to the address associated with your account at least 30 days before the changes take effect.
• An information banner will be displayed on the platform.
• Minor changes take effect immediately without prior notice.
• Continued use of the platform after notification constitutes acceptance of the new policy.

If you disagree with Mify's response:

1. Restate your request specifying the reason for disagreement at privacy@mifyyy.com
2. Contact the competent supervisory authority in your country of residence
3. Exercise a judicial remedy before the competent courts

Supervisory Authority

This policy is governed by Law n°2014-038 on the protection of personal data in Madagascar, enacted on January 9, 2015. Mify also applies, as good practice and international reference standard, the principles of Regulation (EU) 2016/679 (GDPR).

• In case of dispute, the parties will endeavor to find an amicable solution. Failing that, the competent courts of Madagascar will be seized.
• This policy, combined with Mify's Terms of Service, constitutes the entirety of Mify's commitments regarding personal data protection.
• In case of conflict between two versions, the most recent version prevails. If a provision is declared void, the others remain fully in force.
• The French version is authoritative.