Privacy Policy
Last updated: August 2026
Who we are
DatMig is a registered business name of Photonic Wave Analyses Limited, a company registered in Ireland. For the personal data described in this policy as ours to decide about, we are the data controller. You can reach us at support@datmig.com.
Two different roles
We are the controller for the data you give us directly: your account details, your messages to us, and how you use this website. This policy explains what we do with it.
We are a processor for the content you migrate. Your tasks, comments, attachments and the people named in them belong to you; we handle them only on your instructions, to run the migrations you configure. That processing is governed by our data processing agreement and by your own privacy policy, not this one. If you are an employee or customer of a DatMig customer and your details were migrated, please contact that organisation.
What we collect and why
- Account details: name, email address, workspace membership. To create and run your account. Reason: performance of our contract with you.
- Platform connection credentials: the OAuth tokens and API keys that you use to connect to source and target platforms. Stored encrypted and used only to run the migrations you configure. Reason: performance of our contract.
- Migration records: object identifiers and names, per-job reports and API logs, so you can audit runs and retry failures. Reason: performance of our contract, and our legitimate interest in supporting and securing the service.
- Billing details: plan, invoices and payment records. Reason: performance of our contract and our legal obligation to keep accounting records.
- Contact form submissions: your name, email and message. Reason: our legitimate interest in answering enquiries.
- Abuse prevention: when you submit the contact form, we use your IP address briefly to rate-limit submissions, and for nothing else. Reason: our legitimate interest in preventing spam and abuse.
- Analytics: see the cookies section below. Reason: your consent.
Account details and platform connection credentials are needed to provide the service: without them we cannot create your account or run your migrations, and billing details are needed for a paid plan. The rest is optional: analytics only if you consent, and a contact-form message only if you choose to send one.
Migration data
During a migration, your data flows from the source platform to the target platform through DatMig's servers. We do not store the work data itself. Attachments are staged temporarily and deleted after transfer. Object identifiers, names, per-job reports and API logs are retained so you can audit your runs, and can be deleted on request.
What we don't do
We do not sell your data, mine your migrated content, use it to train models, or use it for anything other than executing and auditing your migrations. We do not make automated decisions about you that produce legal or similarly significant effects.
Who else processes your data
We use providers in the categories below, each under contract and, except where noted, acting only on our instructions:
- Hosting and infrastructure: running our content and platform, in France.
- Email delivery: sending the emails our website and service generate, including contact-form messages.
- Email and productivity: hosting our own mailboxes.
- Website analytics: only where you have consented.
- Payments: subscription payments and invoicing. Your card details go directly from you to our payment provider and never reach our servers. That provider acts on our instructions to process payments, but is an independent controller for fraud prevention, financial risk and its own legal compliance; that processing is governed by its own privacy policy rather than this one.
On request, we can share the provider names. A current list of subprocessors used for migration content is maintained in our data processing agreement. We may also disclose data where the law requires it, or to establish or defend legal claims.
Where your data is processed
Our servers are located in France. The content you migrate stays within the European Economic Area and is not transferred out of it.
Some of these providers process personal data in the United States, none of which is migration content. Those transfers rely either on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, where the provider is certified under it, or on the European Commission Standard Contractual Clauses, together with any additional safeguards required. You can ask us for details of the safeguards in place and which one applies to a given provider.
How long we keep it
Our data retention periods are tied to events in your workspace.
- User accounts. When a user account is deleted, everything associated with it is deleted immediately, except the person's name and email address. We keep those two so that past migration jobs and the workspace activity trail stay attributable; an audit trail that reads only "deleted user" is of little use to the workspace relying on it. They are kept while a workspace the person belonged to is still active, and removed once no active workspace refers to them.
- Platform connection credentials. Until you disconnect the connected account, or the workspace is deleted.
- Migration reports and API logs. Six months by default on an active workspace. We can retain your migration data for a longer or shorter period, subject to an Enterprise Agreement.
- Workspaces. When a workspace is deleted, its migration metadata is deleted immediately, apart from a minimal record of the workspace itself: its identifier, name and timestamps. User accounts that also belong to another workspace are unaffected.
- Billing records. We retain customer billing details and invoices for a period of six years from the date of creation of such data/documents.
- Contact form messages. Kept while there is an active enquiry or an ongoing relationship with you, and reviewed periodically so that messages we no longer need are removed. You can ask us to delete yours at any time: email support@datmig.com.
Deletion takes effect on our live systems immediately. Copies may persist in our hosting provider's daily backup, which covers a rolling 24 hours and is overwritten by the following day's backup.
How we protect it
Connected-platform credentials are encrypted at rest. Access to production systems is limited to people who need it. Data is transmitted over encrypted connections. No system is perfectly secure, but we take these measures seriously and review them as the service grows.
Your rights
Subject to the conditions in data protection law, you can ask us to give you a copy of your personal data, correct it, delete it, restrict how we use it, or provide it in a portable format. You can object to processing we carry out on the basis of legitimate interests, and you can withdraw consent, for analytics, at any time without affecting what happened before.
Email support@datmig.com and we will respond. If you think we have handled your data badly, you can complain to a supervisory authority.
Analytics & cookies
We use Google Analytics to understand how visitors use this site: which pages are viewed and how people move through them, including information derived from your IP address. Google Analytics is provided by Google, which processes this data on our behalf as a data processor.
If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies stay disabled until you accept on the cookie banner, and if you decline, none are set. Elsewhere, where the law does not require us to ask first, analytics are enabled by default and no banner is shown. Either way you can enable/disable analytics at any time using "Cookie preferences" in the footer.
Aside from analytics, this site sets no non-essential cookies until you accept. Your cookie choice itself is stored locally in your browser so we can remember it; this is strictly necessary and used for no other purpose.
Contact form
When you submit the contact form on this site, we collect your name, email address, and the message you send. We use these only to respond to your enquiry, with your email address as the reply address; we do not use contact-form details for marketing without your consent.
Changes to this policy
We may update this policy. If a change materially affects you, we will tell you by email or in the product before it takes effect. The date at the top always shows the current version.
Contact
Questions about this policy? Email support@datmig.com or use the contact form. See also our Terms of Service.