Privacy policy
Who we are
Migravo is a service of Steaan, established in Belgium. For privacy questions, reach us through the contact page.
Our role
When you migrate mailboxes, you decide which data is moved and why: you are the data controller and we are the processor acting on your instructions. For your own account data (name, email address, billing records) we are the controller.
What we process
- Account data: name, email address, organization name, password hash, sign-in and registration IP addresses.
- Connector credentials: the credentials you enter for source and destination systems, stored encrypted.
- Migration metadata: mailbox addresses, folder names, message subjects, dates and error messages, kept in the migration logs so you can see what happened.
- Billing data: orders and payments, handled by our payment provider — we never see your card details.
What we do not store
Message bodies and attachments are streamed from the source system directly to the destination. They are not written to our storage.
Retention
- Migration logs, including subjects: removed a set period after a project is completed.
- Connector credentials: deletable by you at any time, and removed with the project.
- Registration and sign-in IP addresses: kept for abuse prevention, then anonymised.
- Invoices and order records: kept for the period required by accounting law.
Subprocessors
Hosting, transactional email, payment processing and bot protection are provided by third parties. A current list is available on request and before any change that affects you.
Your rights
You can access, correct, export or delete your data, and you may delete your account yourself. For any request, reach us through the contact page. You also have the right to complain to the Belgian Data Protection Authority.
Security
Data is encrypted in transit, credentials are encrypted at rest, and each customer is isolated from every other customer. We keep an incident response process and will notify you without undue delay if a breach affects your data.