← Back to home

Privacy Policy

Last updated: February 18, 2026

Mise ("we", "us", "our") is operated by Cowlabs Ltd, a company registered in England and Wales (company number 14706132), with its registered address at Office Tw, Greengate Street, Oldham, OL4 1FN, United Kingdom.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Mise platform ("Service"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, Cowlabs Ltd is the data controller.

1. Information We Collect

1.1 Information You Provide

  • Account information: Name and email address when you register, sign in with Google, or use magic link sign-in via email (Resend)
  • Restaurant details: Restaurant name, city, country, cuisine type, typical covers, currency, timezone, and language preferences
  • Payment information: Processed securely by Stripe; we do not store your full card details
  • Operational data: Revenue figures, recipes, inventory records, supplier details, and other restaurant data you input through the Service
  • Communications: Messages you send through Telegram to your Mise assistant, and any emails you send to our support

1.2 Information Collected Automatically

  • Usage data: How you interact with the Service, including message frequency and feature usage
  • Device information: Browser type, operating system, and device type when accessing our website
  • IP address: Collected when you visit our website
  • Cookies: We use essential cookies for authentication and session management on our website (see Section 7)

1.3 Information from Third Parties

  • Telegram: Your Telegram user ID when you interact with your Mise assistant
  • Stripe: Payment confirmation and subscription status
  • Google: Authentication data when you use Google sign-in
  • Weather services: We query weather data based on your restaurant's location to provide weather-related operational insights; no personal data is shared with weather services

2. How We Use Your Information

We use your information for the following purposes:

  • Providing the Service: Processing your operational data, generating insights, delivering morning briefings, and responding to your messages via Telegram
  • Account management: Creating and managing your account, processing payments, and communicating with you about your subscription
  • Service improvement: Analyzing usage patterns to improve features and performance (using aggregated, anonymized data)
  • Support: Responding to your questions and troubleshooting issues
  • Legal compliance: Meeting our legal and regulatory obligations

3. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

  • Contract: Processing necessary to deliver the Service you have subscribed to (Article 6(1)(b))
  • Legitimate interest: Improving our Service, ensuring security, and preventing fraud (Article 6(1)(f))
  • Legal obligation: Complying with applicable laws, such as tax and accounting requirements (Article 6(1)(c))
  • Consent: Where required, such as for marketing communications (Article 6(1)(a)); you can withdraw consent at any time

4. How We Share Your Information

We do not sell your personal data. We share information only in the following circumstances:

  • Service providers: We use the following third-party services to operate Mise:
  • Stripe — payment processing (Stripe's privacy policy: https://stripe.com/privacy)
  • Hetzner — server hosting, based in the EU (Hetzner's privacy policy: https://www.hetzner.com/legal/privacy-policy)
  • Telegram — messaging platform for delivering the Service (Telegram's privacy policy: https://telegram.org/privacy)
  • MongoDB — database services
  • Resend — transactional email delivery
  • Google — authentication services
  • AI model providers — Moonshot AI and Anthropic, for processing your messages and generating responses
  • Legal requirements: We may disclose your information if required by law, court order, or governmental authority
  • Business transfers: If Cowlabs Ltd is acquired, merged, or sells its assets, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored on servers located within the European Union (Hetzner, Finland). Our website hosting and authentication services may process data in locations outside the EU; where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Encryption of sensitive credentials at rest (AES-256)
  • Access controls limiting who can access your data
  • Regular security reviews of our infrastructure

While we take reasonable precautions, no system is completely secure. We cannot guarantee the absolute security of your data.

5.3 Data Retention

  • Active accounts: We retain your data for as long as your account is active
  • After cancellation: We retain your data for 90 days after account cancellation, then permanently delete it
  • Payment records: We retain billing records for 7 years to comply with UK tax and accounting requirements
  • Support communications: Retained for 2 years after your last interaction

6. Your Rights

Under the UK GDPR, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data ("right to be forgotten")
  • Restriction: Request that we limit how we process your data
  • Portability: Request your data in a structured, commonly used, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are unsatisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

  • Website: https://ico.org.uk
  • Phone: 0303 123 1113

7. Cookies

Our website (heymise.com) uses the following cookies:

  • Essential cookies: Required for authentication and session management. These cannot be disabled as they are necessary for the website to function.
  • Analytics cookies: We may use privacy-friendly analytics to understand website usage. These do not track you across other websites.

We do not use advertising or tracking cookies.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

9. International Data Transfers

Your data is primarily stored within the EU. Where data is transferred outside the EU/UK, we ensure compliance with data protection laws through appropriate safeguards, including:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions where applicable

10. AI and Automated Decision-Making

The Service uses AI to generate operational suggestions, reports, and briefings. These are informational tools to support your decision-making - no automated decisions with legal or significant effects are made about you. You always retain full control over your restaurant operations and business decisions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us at:

Cowlabs Ltd Data Protection Contact: [email protected] Website: https://www.heymise.com

You can also write to us at: Cowlabs Ltd, Office Tw, Greengate Street, Oldham, OL4 1FN, United Kingdom