"Miro's privacy practices pose a moderate-to-high risk profile (58/100) comparable to mainstream SaaS platforms like Spotify and Netflix. The service collects extensive personal, financial, and sensitive data including call recordings, location information, and customer content, with broad sharing to advertising partners, corporate affiliates, and third-party AI providers (Microsoft) with limited transparency. Concerning practices include indefinite data retention after account deletion for 'legitimate business interests,' cross-context behavioral advertising via cookies and tracking pixels, and material policy changes allowed with only 'commercially reasonable' notification rather than explicit user consent."
Take Action
7 Privacy Improvements Available
miro Privacy Concerns & Scorecard
Miro collects extensive sensitive personal data including location data from multiple sources (IP address, employer business address), financial data (credit card, banking information), device identifiers, crash data, and call recordings. Additionally, contact information is imported from devices based on device consent rather than explicit user consent to Miro.
Miro uses cookies, tracking pixels (clear images/gifs), and similar technologies to track user behavior across the service for interest-based and cross-context behavioral advertising without explicit opt-in at collection point.
Material policy changes may be made with only 'commercially reasonable' notification rather than explicit consent requirement
Employer/administrator access to employee activity logs and profile details within organizations allows broad visibility into individual user behavior without individual consent mechanisms.
Services Data is retained indefinitely for legitimate business interests, audits, legal compliance, dispute resolution, and agreement enforcement even after account deactivation, with no clear deletion mechanism specified.
Third party app access revocation
- 1From your Miro dashboard, go to Team Settings.
- 2Navigate to Apps & Integrations.
- 3Find the app you want to remove from the list of installed apps.
- 4Click the app and then click 'Uninstall for me' or 'Uninstall for team' (depending on your permissions and how the app was installed).
Privacy rights request
- 1Review the 'Your rights' section (Section 10) of Miro's Privacy Policy at miro.com/legal/privacy-policy/.
- 2Contact Miro's privacy team using the contact details provided in the policy (Section 13) to submit a request to access, correct, delete, or receive a copy of your Personal Data.
- 3Be prepared to verify your identity as part of the request process.
Notification email preferences
- 1Open your Profile Settings at miro.com/app/settings/user-profile/.
- 2Navigate to the 'Manage notifications and email preferences' section.
- 3Adjust your notification and email settings as desired and save your changes.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, authentication, communication, and service delivery
Payment processing and billing
Service delivery, troubleshooting, analytics, and security
Service localization, analytics, and potentially targeted advertising
Service improvement, analytics, AI feature development, and targeted advertising
Customer support, marketing communication, and service improvement
Service delivery, service improvement, and AI feature training/improvement
Unspecified; policy references this category without detailed enumeration
Service features and invitations
Analytics, service delivery, advertising, and user preference storage
Cross-Platform Tracking
Miro uses cookies and tracking pixels that operate across its service and integrate with third-party advertising and analytics networks to track user behavior for interest-based and cross-context behavioral advertising. Email tracking via embedded pixel images (clear GIFs) tracks engagement across email communications. The company does not explicitly describe cross-site behavioral tracking beyond its own platform.
Tracking Methods:
Cookies
Used for analytics, service delivery, advertising, and tracking user preferences. Cookie-based opt-out preferences are lost if cookies are cleared.
Tracking Pixels (Clear GIFs)
Embedded in email communications to track open rates and engagement metrics using 'clear image' (gif) technology
Device Identifiers
Device-specific identifiers collected to track devices and enable cross-device activity correlation
IP Address & Location Tracking
IP address used to derive location and track network activity across sessions
Analytics Services
Third-party analytics and advertising partners track service usage and deliver behavioral advertising
AI & Data Training
miro uses your content to train AI
Below is what's used and how (if at all) you can object.
What Content Is Used
Customer Content & Service Data
Miro analyzes and processes customer content (boards, files, activity logs) using AI features and shares interaction data with third-party AI providers including Microsoft. The policy references 'broad automated analysis of customer content including AI features' and collection of 'interaction data with AI features' but does not itemize specific AI training or improvement use cases.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed miro
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.