Miro is an online collaborative whiteboard operated by RealtimeBoard Inc. (the product's original name before it was renamed Miro), a private, VC-backed company headquartered across offices including Amsterdam and San Francisco. Its own privacy policy discloses broad first-party account and Services Data collection (contact/login details, location, device identifiers, content interactions) used to power the product including its AI Features, plus Google Analytics and other advertising/analytics cookies, a tracking pixel in marketing emails, and a U.S. state-law disclosure self-declaring that some of its advertising/analytics data flows may qualify as a "sale" or "sharing" of personal information. Its published trust-center subprocessor list names Amazon, Anthropic, and Braze among its vendors — Anthropic for AI features and Braze for customer-engagement/marketing messaging, rather than an infra-only list. Ownership is not fully traceable (no SEC or comparable public filing found for the private company), but Miro's own privacy policy, About page, and Apple App Store developer listing all consistently name RealtimeBoard Inc. as the operating entity. Miro's trust center lists SOC 2 Type II, ISO 27001, and ISO 42001 (AI) certifications reviewed by AICPA-accredited auditors (not individually named) plus a public bug bounty program; no FTC/state-AG order, breach disclosure, or lawsuit outcome was found in the sources checked.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
9 ON FILE
COLLECTION
Miro's privacy policy states that Services Data — including account details supplied at signup — is used to provide, improve, and personalize the Services, explicitly including its AI Features.
Miro's Apple App Store privacy label (developer: RealtimeBoard Inc.) discloses collection of coarse location, device identifiers, usage/product-interaction data, and diagnostic/crash data, categorized as "Data Not Linked to You."
Miro's own About page states that the product originated as "RealtimeBoard" before being renamed Miro, directly naming the operating entity behind the current product.
Apple's App Store listing independently confirms Miro's publisher of record as RealtimeBoard Inc., corroborating the entity name given in Miro's own privacy policy and About page.
Miro's public trust center discloses its subprocessors by name, including Amazon, Anthropic (an AI provider), and Braze (a customer-engagement/marketing-messaging platform), rather than an infrastructure-only vendor list.
Miro's privacy policy states it does not sell Personal Data "in the conventional sense" but may use advertising and analytics services drawing on cookie/tracker data for delivering interest-based or cross-context behavioral advertising, which it separately frames as a self-declared "sale" or "sharing" under U.S. state privacy laws.
Miro's public trust center states it holds SOC 2 Type II certification, meaning an independent auditor confirmed the design and operating effectiveness of its security, availability, and confidentiality controls over a year-long period, alongside ISO 27001 and ISO 42001 (AI) certifications and a public bug bounty program; no named audit firm is given and no breach or regulator action was found.
Miro's privacy policy discloses that it embeds a tracking pixel ("clear image" gif) in marketing emails to measure engagement, which can be disabled by turning off images in the email client.