Privacy Policy

Last updated: March 2026

1. Who We Are

Midknight ("Midknight", "we", "us", "our") operates the platform accessible at midknight.ai. We provide AI-powered operational agents for direct-to-consumer brands.

For any privacy-related questions, contact us at: hello@midknight.ai

2. Scope of This Policy

This Privacy Policy applies to:

  • Visitors of our website (midknight.ai)

  • Users of the Midknight platform

  • Customers and their authorized team members

This policy is compliant with the General Data Protection Regulation (GDPR – EU 2016/679).

3. Data We Collect

3.1 Data you provide directly

  • Full name — collected at signup

  • Email address — collected at signup and used for account management and communications

3.2 Data collected automatically

  • Usage data — pages visited, features used, session duration, interactions within the platform

  • Cookies and tracking technologies — see Section 7 for full details

3.3 Data from your connected tools (third-party data)

When you connect your operational tools to Midknight (Shopify, Intercom, Meta Ads, Klaviyo, Google Search Console, Semrush), our agents access and process data from those platforms on your behalf. This may include:

  • Customer records, orders, and transaction data (Shopify)

  • Support tickets and customer conversations (Intercom)

  • Advertising campaign data and performance metrics (Meta Ads)

  • Email campaign data and subscriber lists (Klaviyo)

  • Search performance and keyword data (Google Search Console, Semrush)

This data is processed solely to provide the Midknight service. We do not sell, share, or use it for any purpose beyond service delivery.

4. Legal Basis for Processing (GDPR)

Purpose Legal Basis Account creation and management Contract performance (Art. 6.1.b) Service delivery (AI agents) Contract performance (Art. 6.1.b) Analytics and platform improvement Legitimate interest (Art. 6.1.f) Marketing communications Consent (Art. 6.1.a) Legal compliance Legal obligation (Art. 6.1.c)

5. How We Use Your Data

We use your data exclusively to:

  • Create and manage your Midknight account

  • Operate and improve the AI agents on your behalf

  • Send transactional emails (account updates, billing, security alerts)

  • Send marketing communications, with your consent and with opt-out available at any time

  • Analyze platform usage to improve our service

  • Comply with applicable legal obligations

We do not sell your personal data. We do not use your data or your customers' data to train our AI models without explicit consent.

6. Sub-Processors and Third Parties

Midknight uses the following third-party services to deliver its platform. Each sub-processor is bound by appropriate data processing agreements.

  • Railway: Platform hosting and infrastructure, United States.

  • OpenAI: AI language model processing, United States

  • Anthropic: AI language model processing, United States

  • Stripe: Payment processing,United States

  • Google Analytics: Usage analytics, United States

Transfers outside the EU: Several sub-processors are based in the United States. These transfers are governed by Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring an adequate level of data protection.

7. Cookies

We use cookies and similar tracking technologies on our website and platform.

Types of cookies we use:

Strictly necessary cookies Required for the platform to function. These cannot be disabled.

Analytics cookies Used to understand how visitors interact with our website and platform (pages visited, session duration, feature usage). You can opt out via our cookie banner.

Marketing cookies Used to measure the effectiveness of our marketing campaigns. Only activated with your consent.

You can manage your cookie preferences at any time via the cookie settings banner on our website, or through your browser settings.

8. Data Retention

We retain your personal data for as long as your account is active.

Upon termination or cancellation of your subscription, your data is permanently deleted within 30 days, unless we are required by law to retain it for a longer period.

You may request immediate deletion of your data at any time by contacting us at hello@midknight.ai.

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you

  • Right to rectification — request correction of inaccurate or incomplete data

  • Right to erasure — request deletion of your personal data ("right to be forgotten")

  • Right to restriction — request that we limit the processing of your data

  • Right to data portability — receive your data in a structured, machine-readable format

  • Right to object — object to processing based on legitimate interest or for direct marketing

  • Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at hello@midknight.ai. We will respond within 30 days.

If you believe your rights have not been respected, you have the right to lodge a complaint with your local supervisory authority. In France, this is the CNIL (www.cnil.fr).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encrypted data transmission (TLS/SSL)

  • Access control and authentication for all platform access

  • Regular security reviews of our infrastructure and sub-processors

In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay.

11. Children's Privacy

Midknight is a B2B platform intended for business use only. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify registered users by email for material changes. We encourage you to review this policy periodically.

13. Contact

For any questions, requests, or concerns regarding this Privacy Policy:

Email: hello@midknight.ai Website: midknight.ai