Privacy Policy

Introduction and Scope

This policy applies to the MIGs website and platform. By creating an account or using the Service, you acknowledge it together with our Terms of Service. If you do not agree with it, please do not use the Service. MIGs determines how and why your personal information is processed, and is the party responsible for it. MIGs is a private service provider and is not affiliated with, or endorsed by, any government agency.

Information We Collect

Depending on how you use the Service, we collect the following.

Account information: your username, email address, full name, mobile number, and a hashed version of your password. We never store your password in plain text.
Verification and reset data: a one-time token used to confirm your email or to reset your password. For password resets, we keep only a hash of the token, and it expires after 30 minutes.
Sign-in records: the date and time, success or failure, your IP address, browser and operating system, device type, a device fingerprint derived from your browser details and IP address, and the user agent string.
Order and wallet information: the services you order, the details you submit with each order, wallet top-ups, balances and refunds.
Identity information and documents: where you use verification or document services, the information and files you submit, which can include national ID, passport and similar details about you or someone you are authorised to act for.
Messages: what you send through our contact form (name, mobile number, email address, subject, message) and our replies, together with your IP address and the time of sending.
Rate-limit counters: the number of recent attempts from your IP address on the sign-in, registration, password reset and contact forms.

How We Use Your Information

To create and manage your account, and to authenticate your sign-ins.
To process your orders, wallet transactions and verification or document requests.
To send account emails, such as registration confirmation and password reset links, and to reply to your messages.
To protect the Service: detecting and preventing fraud, abuse, unauthorised access and repeated guessing of passwords.
To keep records of orders, payments and refunds, and to resolve disputes.
To maintain, troubleshoot and improve the Service.
To comply with legal obligations and respond to lawful requests.

Automated Security Checks

We use automated limits that count attempts per IP address and temporarily block further attempts after too many. These checks do not make decisions about your eligibility for services. If you believe you were blocked in error, please use Contact Us.

Cookies and Similar Technologies

We use one strictly necessary session cookie to keep you signed in and to protect forms against cross-site request forgery. It is set for the session and is removed when you close your browser, and the Service cannot work properly without it. We do not use advertising cookies, analytics trackers or third-party tracking, and our pages load no third-party scripts, fonts or images.

We do not sell your personal information. We share it only as follows.

With service providers that help us run the Service, such as hosting and email delivery, who may process it only to provide their service to us.
With third-party platforms or authorities, only to the extent needed to fulfil an order you placed, and only with the details that order requires.
When required by law, regulation, legal process or a lawful government request.
To protect the rights, property or safety of MIGs, our users or the public, including to investigate fraud or abuse.
In connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information unless you are told otherwise.

Data Retention

Account information is kept while your account is active and for as long afterwards as needed to meet legal, accounting and dispute-resolution requirements.
Order, wallet and refund records are kept as long as needed for accounting, audit and legal purposes.
Sign-in and security records are kept only as long as needed for security and fraud prevention.
Password reset tokens expire after 30 minutes and are removed once used. Rate-limit counters are temporary and are replaced when their time window ends.
When information is no longer needed, we delete or anonymise it, unless the law requires us to keep it.

Data Security

We use safeguards designed to protect your information, including password hashing, protection against cross-site request forgery on forms, limits on repeated sign-in and reset attempts, restricted access to our systems, and encrypted connections (HTTPS) where your browser and our servers support them. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your information, we will act on it and notify you where the law requires.

Your Rights and Choices

Subject to applicable law, you may ask us to:

give you access to the personal information we hold about you;
correct information that is inaccurate or incomplete;
delete your account and personal information, except records we must keep by law;
restrict or stop certain processing of your information; and
explain how your information is used.

How to Exercise Your Rights

Send your request to support@migs-info.top from the email address registered on your account, and tell us what you would like us to do. We may ask you to confirm your identity before acting, to protect your account from impersonation. We aim to respond within a reasonable time. If you are not satisfied with our response, you may contact the data protection authority that applies to you.

Children's Privacy

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, please contact us and we will take appropriate action, including deleting it.

Third-Party Links

The Service may link to third-party websites. We do not control them and are not responsible for their privacy practices. Please read their policies before giving them any information.

International Data Transfers

Your information may be processed or stored in a country other than your own, for example by our hosting or email providers. Where that happens, we take steps to ensure that it continues to be protected to a reasonable standard.

Changes to This Policy

We may update this policy from time to time. The date of the latest revision is shown at the top of this page, and we will provide additional notice of material changes where appropriate. Continuing to use the Service after a revision takes effect means that you accept the updated policy.

Contact Us

Questions about this policy or about how your information is handled? Write to us at support@migs-info.top.