miCloud legal

Effective date: 24 October 2026

1. Who we are

This Privacy Policy applies to the miCloud / MagicInfo Cloud Center website, customer cabinet and managed digital-signage services available through micloud.center (the Service).

The Service is operated by VIDOS, Semeniouk, a Swiss sole proprietorship operated by Anatoli Semeniouk, Chemin des Persières 11, 1268 Begnins, Switzerland. Commercial register: Canton of Vaud, CH-550.1.145.988-9. Swiss UID: CHE-406.230.144. VAT number: CHE-406.230.144 TVA. Contact: support@micloud.center.

VIDOS is the controller for account administration, billing, security, support and its own business operations. When we host or support customer content and device data solely on a business customer's instructions, that customer is normally the controller and VIDOS acts as its processor. A separate data processing agreement may apply.

2. Personal data we collect

• Account and business data: name, business name, business address, country, telephone number, email address, password hash, account role, language and registration date.
• Google sign-in data: if you choose Sign in with Google, the Google account identifier and basic profile information returned through the openid, email and profile scopes, such as name, email address, email-verification status, profile image and locale.
• Service data: projects, plans, licences, connected-display information, server assignments, device approval requests, service status, renewal history, and credentials that we issue or manage for a hosted MagicINFO environment.
• Billing data: invoice details, currency, amounts, payment status, transaction references and tax information. Card payments are processed by Stripe and PayPal payments by PayPal; they collect and handle the card and payment-account details themselves. We never see or store card numbers or card security codes. If you pay by card through Stripe, we keep the Stripe customer and subscription identifiers, the references of each payment and invoice, and their status, such as paid or a failed renewal and its date.
• Support data: support-ticket titles, messages, dates, status and correspondence.
• Sign-in security records: each sign-up, sign-in, Google sign-in and Google account connection is recorded with the date and time, the IP address our server received the request from, and an approximate location (country, region and city) derived from that IP address. The location is looked up in a database stored on our own server; your IP address is not sent to a location service. We do not use your device's GPS or browser location.
• Visit statistics (only with your consent): if you accept statistics in the cookie banner, we record the page you arrived on, the referring site or campaign tag, the pages you view, the time spent on each page, the page you leave from and, before your first display is added, the steps you take in your account. This data is collected by miCloud itself and stored in our own database, using a first-party cookie (mcj) that identifies your browser for these statistics. If you later create an account, these records are linked to it so we can see where sign-up or setup gets stuck.
• Technical data: IP address, browser and device information, timestamps, requested pages, session information, security events and diagnostic logs.

3. How we use personal data

We use personal data to create and authenticate accounts; provide trials, licences, hosted environments, device management and support; process payments, invoices and automatic card renewals; send service communications; protect the Service; diagnose faults; improve reliability; comply with law; and handle legal claims.

We use sign-in security records to detect account abuse and fraudulent sign-ups and to investigate security incidents. We use visit statistics to understand which pages help visitors, and to improve sign-up and setup.

We do not sell personal data or use Google user data for advertising, credit assessment or data-broker purposes. We do not make solely automated decisions about individuals that produce legal or similarly significant effects.

4. Google sign-in and Google user data

Google sign-in is optional. When selected, miCloud requests only the openid, email and profile scopes. We use the returned data only to authenticate you, create or link your miCloud account, display basic account information and protect the sign-in process.

miCloud does not request access to Gmail, Google Drive, Google Calendar, contacts, Google Photos or other Google product content. We do not use Google user data to train general-purpose artificial intelligence models. We retain the Google account identifier and the minimum account information needed to maintain the account link and security records.

We disclose Google user data only to providers acting for us where needed to operate or secure the Service, when required by law, or as part of a corporate transaction subject to applicable notice and consent requirements. Our handling and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You may revoke miCloud's access through your Google Account permissions. Revocation stops future Google sign-in access but does not delete your miCloud account. To request deletion, email support@micloud.center.

5. Legal bases

We process personal data under the Swiss Federal Act on Data Protection. Where the EU or UK GDPR applies, we rely on contract, legitimate interests in operating and securing a business service, legal obligations, and consent where required for optional processing or non-essential cookies. Where we act as a processor, the customer determines the legal basis and we follow its documented instructions. Sign-in security records are processed on the basis of our legitimate interest in protecting accounts and the Service. Visit statistics before sign-up are based on your consent, which you can withdraw at any time through "Cookie settings".

6. Cookies, statistics and reCAPTCHA

The Service uses necessary session and security cookies, and stores your cookie choice. With your consent, the site also uses our own visit statistics (see section 2) and Google Analytics to measure site use; neither is loaded if you decline. Google reCAPTCHA protects forms from abuse. Google Analytics and reCAPTCHA may process device identifiers, IP addresses, browser information and interaction data. You can change or withdraw your choice at any time through "Cookie settings" at the bottom of every page. Browser controls may block or clear cookies, although blocking necessary cookies may prevent login.

7. Who receives personal data

Data may be received by authorised VIDOS personnel; hosting, infrastructure, backup and security providers; Google for optional sign-in, reCAPTCHA and analytics; Stripe, if you pay by card through Stripe, which receives your account email address and the details of the bill (plan, number of displays, period and amount) and acts as an independent controller for the card and payment data it collects, under its own privacy policy (stripe.com/privacy); PayPal and banking providers; email providers; Samsung MagicINFO software running in managed environments; professional advisers; and authorities where legally required. Installing or operating Samsung software does not by itself mean Samsung receives customer data. Our own visit statistics and sign-in security records stay in our database and are not shared with analytics or advertising providers.

8. International transfers

Some providers operate internationally. Where required, we rely on an adequacy decision, approved contractual clauses or another lawful transfer mechanism and apply supplementary safeguards where appropriate. Information about safeguards is available from support@micloud.center, subject to necessary security and confidentiality restrictions.

9. Retention

We retain account and service records while the account or service is active and for a reasonable closure, security and dispute period afterwards. Google account-link data is removed when the link or miCloud account is deleted unless limited retention is legally required. Customer content is returned or deleted under the applicable agreement. Sign-in security records are kept for 12 months and then deleted; copies may remain for up to 71 days in our account-data backups until those backups expire. Visit statistics that are never linked to an account are deleted after 90 days; visit statistics linked to an account are kept for 13 months. Swiss accounting and transaction records are generally retained for ten years. Stripe customer and subscription identifiers and payment references are kept as part of these billing records. Backup copies expire through the normal backup lifecycle.

10. Security

We use measures designed to protect personal data, including encrypted web connections, password hashing, access controls, backups, logging and restricted administrative access. No internet service is completely secure. Notify us promptly if you suspect unauthorised account access.

11. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability and may withdraw consent. You may complain to the Swiss Federal Data Protection and Information Commissioner or another competent authority. Send requests to support@micloud.center. We may verify your identity.

12. Children

The Service is intended for businesses and is not directed to children. We do not knowingly permit children to create accounts.

13. Changes

We may update this policy to reflect changes to the Service, providers or law. We will post the revised policy here, update its effective date and provide additional notice where required.

14. Contact

IP geolocation by DB-IP, licensed under CC BY 4.0.