At miCommunity, we believe privacy is a fundamental human right. This Privacy Policy describes how miCommunity ("we", "us", or "our") collects, uses, stores, and protects your information across the miCommunity Ecosystem, including miSearch, miMail, miCommunity Account, and miConsole.
🔒 Our Core Privacy Commitment
We do not sell your personal data or search histories to advertisers. We collect only the minimum information necessary to authenticate your account and deliver fast, secure services.
1. Information We Collect
Depending on the services you use within the miCommunity ecosystem, we collect:
- Account Information: Full name, primary email address, password hash (encrypted via bcrypt), avatar photo, and optional recovery email / phone number provided during account setup.
- miMail Communications: Message headers (sender, recipient, subject, timestamp) and encrypted message content stored in your private miMail inbox for delivery.
- OAuth & Developer Console Data: Application titles, client credentials, and callback URIs created in miConsole.
- Technical Data: User-agent headers, IP address, and cookie tokens strictly used for 30-day persistent session authentication and security alerts.
2. How We Use Your Information
We use your information exclusively for the following operational purposes:
- Authenticating your single sign-on (SSO) login across miCommunity services.
- Delivering incoming and outgoing miMail messages, including cross-platform sync with external mail clients (Gmail, Yahoo, Outlook).
- Dispatching high-priority security alert emails when password or security settings are changed.
- Providing 6-digit SMS OTP verification codes for account password recovery.
3. Data Storage & Security Controls
Your data is protected by industry-standard encryption standards:
- Password Encryption: Passwords are never stored in plain text. They are hashed using one-way
bcrypt algorithms.
- Session Cookie Security: Login session cookies are configured with 30-day lifetimes,
HttpOnly, Secure, and SameSite=Lax protections against cross-site scripting (XSS).
- Database Integrity: Production database records are stored in secure MySQL containers with strict query parameterization against SQL injection.
4. Third-Party Sharing
We never sell, rent, or monetize your personal data. We disclose information only under the following limited circumstances:
- Service Providers: Standard SMTP / SMS gateways strictly used to dispatch password reset tokens or security alert notifications.
- Legal Requirements: When compelled by valid, binding legal processes (such as court orders or warrants).
5. Your Choices & Privacy Rights
You maintain complete control over your miCommunity account:
- Access & Update: You can view and update your name, email, recovery email, phone number, and avatar image at any time in your miCommunity Account Settings.
- Password Reset: You can reset or update your password via SMS OTP or external recovery email.
6. Contacting Security
If you have questions regarding this Privacy Policy or suspect unauthorized access to your account, please contact our security team at security@micommunity19.org.
miCommunity