Privacy, data handling, and account rights

Personal data MygrateUs collects

• Account data such as username, email address, and a hashed password managed by Django authentication.
• Relocation planning profile inputs such as current country, passport region, move timeframe, relocation goal, education, family stage, budget, climate, language comfort, and work field.
• Selected destination country, checklist progress, priorities, due dates, reminder settings, and premium/basic plan state.
• Document vault files and related metadata such as document type and upload timestamp.
• Compliance and security records such as email verification time, privacy/terms acceptance timestamps and versions, IP address, and user agent.

Why the data is used

• Provide your account, sign-in, account recovery, and email verification flows.
• Generate destination-specific planning tools such as checklist items, dashboard metrics, reminder previews, and document storage.
• Respond to account rights actions such as data export and account-closure requests.
• Maintain service security, prevent abuse, and keep records of accepted policy versions.
• When you actively request on-page translation, selected page text snippets are sent to Langbly to fulfil that request.

How MygrateUs shares or discloses data

• MygrateUs uses third-party processors to host the service, send transactional emails, and perform requested page translation.
• Brevo is used for transactional email delivery when verification or account messages are sent.
• Langbly is used only when you request page translation, and only the selected page text needed for translation is sent.
• MygrateUs does not sell user data and does not run advertising or analytics cookies in the current release.

Cookies and similar technologies

• Django uses essential cookies for session management, CSRF protection, and secure authenticated requests.
• The site stores a language preference in browser local storage when you choose a page language.
• No ad-tech, profiling, or third-party analytics cookies are intentionally deployed in the current release.

Retention, deletion, and account controls

• Profile, checklist, and document records remain in your account until you update them, remove them, or an account-closure request is processed.
• Document vault files can be replaced or deleted by the signed-in account owner.
• You can download a structured export of your account data from the Profile page.
• Account closure in the current release is a reviewed request, not an instant self-serve deletion flow.

Your rights and important limits

• You can correct account details from your Profile page and keep your email address accurate for account recovery.
• If you are in the UK or EU, local data-protection law may give you rights to access, rectify, erase, restrict, object, or complain to a regulator depending on the circumstances.
• MygrateUs is a planning tool, not legal advice or immigration representation.
• Always confirm immigration rules, document requirements, deadlines, and fees with official sources before acting.

Security and access controls

• Authenticated pages require sign-in for onboarding, checklist, destination details, and document vault tools.
• Document actions are user-scoped and uploads are validated server-side for file type, MIME type, and size.
• Secure-cookie and security-header defaults are enabled for deployed environments.
• Policy version acceptance is recorded at registration.

Questions or complaints

If you have privacy questions, contact you@mygrateus.com.

If you are in the UK and believe your personal data has been mishandled, you can complain to the UK Information Commissioner's Office (ICO).

Country guidance supports planning only. Verify legal requirements, deadlines, and official fees with government sources before acting.