Privacy Policy

Last Updated: September 26, 2026

At Mightora Feedback & Wall Platform, we are committed to protecting and respecting your privacy. This Privacy Policy explains how Tweed Technology Limited ("we", "us", or "our") collects, uses, stores, and protects personal data when you use our platform at feedback.mightora.io (the "Service").

1. Important Information & Who We Are

Tweed Technology Limited is the operator of the Service and is the data controller for the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

We are fully registered with the Information Commissioner's Office (ICO), the UK’s independent authority set up to uphold information rights in the public interest.

If you have any questions or wish to exercise your data rights, please contact us at support@mightora.io.

2. The Data We Collect About You

We may collect, use, and process different kinds of personal data depending on how you interact with the Service:

For Public Feedback Contributors:

* When you submit feedback on a wall, we collect your star ratings, text responses, date/time timestamps, and any responses to custom survey questions. * You may optionally provide your name, role, and company. These details are displayed beside your feedback on a public wall only when you affirmatively consent to that display. If you skip the question or do not consent, your public attribution is shown as “Anonymous”. * Feedback answers are displayed only after answer-level, feedback-link, and wall-specific approval. Automatic wall approval does not approve answers or feedback submissions.

For Administrative Users (Wall & Link Owners):

* We collect authentication metadata when you sign in via Microsoft Entra External ID, including your email address, unique user ID (OID), and full name. * Configuration and organization settings for your feedback channels and display walls.

Technical & Analytical Data:

* Standard internet log information, including your IP address, browser type and version, platform, operating system, and session statistics. This data is collected solely for security auditing and debugging of our Microsoft Azure server instances.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data for the following purposes:

Consent: To process and publish feedback submissions at your request, and to display identity details alongside feedback only where you have expressly agreed.
Contract Performance: To enable administrative functions and provide the Service dashboard.
Legitimate Interests: To maintain system security, analyze usage patterns, prevent spam, and improve platform performance.

We do not sell, rent, or trade your personal data with third-party advertisers or marketers.

4. Disclosures & Service Providers

We share data with trusted third-party service providers who assist us in hosting and running the Service:

Microsoft Azure: All databases, backend APIs, and files are hosted securely on Microsoft Azure cloud infrastructure (within UK/Europe data centers).
GitHub Pages CDN: Static frontend application bundles are hosted and served via GitHub Pages.

All third parties are contractually obligated to handle data in compliance with UK privacy standards.

5. Cookies & Local Storage

We use minimal cookies and browser local storage. These are strictly limited to technical and functional requirements:

Authentication Cookies: Secure cookies set by Microsoft Entra ID solely to maintain login sessions for administrators.
Functional Storage: Local storage tokens necessary to keep your active dashboard preference or submission logs.

No non-essential advertising or tracking cookies are placed by our platform.

6. How Long We Keep Your Data

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for:

Feedback Submissions: Held for as long as the respective Wall Owner maintains the feedback channel, or until requested to be deleted.
Administrative Accounts: Kept while your organization continues to use the active subscription or administrative panel.
Logs & Auditing Records: Automatically deleted after 30 days.

7. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered, or disclosed:

HTTPS-only encrypted transport.
Advanced token exchange protocols (OIDC) through Entra External ID.
Backend rate-limiter mechanisms and outbox worker patterns to protect databases.

8. Your Legal Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right to Access: Request a copy of your personal data.
Right to Rectification: Ask us to correct any inaccurate information.
Right to Erasure: Request that we delete your personal data.
Right to Restrict or Object to Processing: Object to our processing or request a restriction.
Right to Data Portability: Request transfer of your data to another organization.

To exercise any of these rights, please write to us at support@mightora.io.

If you believe we have not resolved your privacy concern satisfactorily, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO) (the UK regulator for data protection issues):

Website: https://ico.org.uk
Helpline: 0303 123 1113