Miro legal information

Last Updated: May 20, 2026

This Privacy Notice describes how RealtimeBoard, Inc. dba Miro, including its affiliates and subsidiaries (collectively “Miro” and also referred to as “our”, “us” and “we”) collects, uses and discloses information from or about an identified or identifiable person, including information that we can associate with an individual person (“Personal Data”) in the context of our recruiting processes and programs, as well as any choices you may have with respect to your Personal Data.

This Privacy Notice only applies to the Personal Data of job applicants, potential candidates for employment, and those who participate in our recruiting programs and events.

By submitting an application, you confirm that you have read and understand this Privacy Notice. If you do not understand or agree with any part of this Privacy Notice, please refrain from applying and contact us for clarification before proceeding.

1. The Type of Personal Data We Receive

We receive Personal Data about you during the sourcing, application and recruitment process either directly from you or from third parties, such as professional recruiting firms, your references, or prior employers. If you fail to provide certain information when requested, we may not be able to progress your application. We also receive Personal Data about you in the course of the recruitment process for the purposes described in section 2 below. The categories of Personal Data we receive includes: 

• Profile information, including your name, address, contact information, work and educational history, achievements, identity documents, test results, any information that may be required due to legal requirements (e.g. residence or work permits) and other types of information that you voluntarily decide to share with us as part of the sourcing and application process. We may also collect Personal Data about you online to the extent that you have chosen to make this information publicly available on professional social media websites. For example, we may find your profile on LinkedIn and contact you about suitable roles.
• Assessment information, including interview notes, test scores and other types of information created by our recruiting personnel and interviewers in the course of their interactions with you or through your participation in our interactive assessment tools during the recruiting process.
• Photographs, video or audio recordings, and transcripts, including those obtained during our recruiting events or as part of the recruiting process itself (e.g., interview recording).
• Background information, including about criminal convictions, offences and proceedings, to the extent permitted by applicable law, as part of background checks in the recruitment process.
• Special categories of Personal Data where you choose to provide us with information such as your ethnicity, trade union membership, religious or philosophical beliefs, sexual orientation, physical or mental health information and immigration/naturalization records (if this discloses racial/ethnic origin information) other categories as prescribed by law. We may collect special categories of Personal Data about a candidate to the extent permitted or required to do so by applicable laws (e.g., U.S. equal opportunity laws) and to support our efforts to create an inclusive and diverse work environment.
• Website information. Miro uses a variety of cookies and similar technologies in our websites and services. For more details about how we use these technologies, as well as your opt-out opportunities and other options, please see our Cookie Policy.
• Email performance data. Miro may use a ‘clear image’ (gif) in email communications in order to track engagement and performance metrics (e.g., open rates). Much of this data is aggregated and does not contain Personal Data. If you wish to turn off this tracking, you can do so by turning off images in the email itself.

2. How We Use Your Personal Data

We use your Personal Data for legitimate human resources and business management reasons, including:

• To identify and evaluate candidates for potential employment, as well as for future roles that may become available.
• To assess and make a decision about your suitability for a role. 
• To communicate with you. 
• To comply with legal requirements, including those relating to public health and workplace safety.
• To foster our corporate programs and practices.
• To conduct background checks, including, to the extent permitted by applicable law, criminal history checks.
• To protect our legal rights to the extent authorized or permitted by law.
• To protect the workplace and communicate with medical professionals, law enforcement, or other public authorities in the event of an emergency or public health event, such as when the health or safety of you or one or more individuals may be endangered.

Where permitted by applicable law, we may conduct background screening, either directly or through a third-party provider, proportionate to the requirements of the role that you are being offered. Any use of criminal records data will be limited to what is legally permitted in the jurisdiction where the position is located. If a background screening is required, you may be contacted by a third-party background screening service provider and be provided with further information about the process and what Personal Data it might involve.

We may leverage technologies such as artificial intelligence (AI) to assist our recruiters in identifying qualified candidates. We do not rely solely on these tools to assess job applications and the outputs are considered in combination with other information about you. We also ensure that there is meaningful human involvement during the process and that each assessment is based on human judgment. We evaluate each individual candidate on their own merits. 

Certain roles may require specific prerequisites or skills (for example, fluency in a certain language, particular professional qualifications or certifications, or number of years in a similar role). Applications that do not meet those requirements may be rejected.

We may also use your Personal Data for analytics purposes to improve our recruitment and hiring process and augment our ability to attract successful candidates. 

3. Our Lawful Basis for Processing your Personal Data

We collect and use your Personal Data for the purposes laid out in this Privacy Notice based on one or several of the following legal grounds, as required in your jurisdiction:

• In part, on our legitimate business interests in evaluating your application to manage our relationship with you, to ensure that we recruit appropriate employees, and to evaluate and maintain the efficacy of our recruiting process more generally; and in operating our business and protecting Miro and its employees, customers, and third parties. When we rely on this legal ground, Miro will only process your Personal Data after assessing the adequacy, proportionality, and legitimacy of the data processing activity.
• In part, on our performance of contractual and pre-contractual measures relating to our potential employment relationship with you, including background screening, as legally permitted.
• In part, on our compliance with applicable law regarding Personal Data necessary to satisfy our legal and regulatory obligations, including with regard to disabilities, public health, or workplace safety.
• in part, on your consent, if we offer you the opportunity to participate in our optional recruiting programs or if we collect special categories of Personal Data for legally permitted purposes other than compliance with our legal obligations regarding public health and workplace safety.

4. How We Share Personal Data

We may, at times, disclose Personal Data we receive to the following categories of third parties or in the following circumstances: 

• Service providers. We use third-party service providers that process your Personal Data on our instructions, including to manage sourcing, application and recruitment processes. We maintain processes designed to help ensure that any processing of Personal Data by third-party service providers is consistent with this Privacy Notice and protects the confidentiality, availability, and integrity of your Personal Data in compliance with applicable law. 
• Compliance with law. We may disclose your Personal Data with third parties as required by law or if we reasonably believe that such action is necessary to comply with law and/or reasonably request of law enforcement, or to detect and investigate illegal activities or breach of agreements, or to exercise or protect the rights, property, or safety of Miro, our employees or others.
• At your direction. We disclose your Personal Data where you ask us to or with your consent, such as banks or mortgage providers, insurance and other benefits providers, or other employers if you ask for a reference from us when you apply for another position.
• Change of control. We may disclose or transfer your Personal Data in the event of a re-organization, merger, sale, joint venture, assignment, or other transfer or disposition of all or any portion of our business.

When Personal Data is transferred from a country outside of the U.S., including the EEA, Switzerland, the UK or Brazil to another recipient located in a country whose legislation has not been recognized by the applicable authority as having an adequate level of protection (such as the U.S.), the transfer is governed by appropriate legal mechanisms, including standard contractual clauses. If you would like further information, please contact us using the information below. 

5. How We Retain Your Personal Data

If you accept an offer of employment with us, any relevant Personal Data collected during your pre-employment period will become part of your personnel records and will be retained in accordance with legal requirements and with the privacy notice applicable to Miro employees, which will be provided during the on-boarding process.

If we do not employ you, we may retain your Personal Data for at least twelve months from the last interaction with you and use that data for system administration purposes and to consider you for potential future roles. Thereafter, we retain a minimal amount of your Personal Data to record your recruiting activity with us.

To the extent that we have collected Personal Data, including special categories of Personal Data, for the specific purpose of fulfilling our legal obligations regarding disabilities, public health, or workplace safety, we will retain that data for the duration of those legal obligations. Thereafter, we retain a minimal amount of your Personal Data to establish our compliance with those obligations.

6. Security

We implement technical and organizational measures to help protect Personal Data against accidental or unlawful destruction, loss, change or damage. When we transfer Personal Data to our service providers, we require that the recipients implement appropriate technical and organizational security measures to help protect your Personal Data. You should understand that no data storage system or transmission of data over the internet or any other public network can be guaranteed to be a hundred percent secure, accurate, complete, or current. 

7. Your Rights

We take reasonable steps that are designed to keep your Personal Data accurate, complete, and up-to-date for the purposes for which it is collected and used. We also have implemented measures that are designed to help ensure that our processing of your Personal Data complies with this Privacy Notice and applicable law. Subject to the privacy rights granted to you under the law in your country, you have the following rights:

• Access. You may request access to your Personal Data, subject to applicable law. 
• Portability. You may request a copy of your Personal Data that we process on the basis of consent or in order to perform a contract with you. 
• Erasure. You may request to erase your Personal Data that we are not required to process for compliance with law or in connection with legal claims. Where we rely on an exemption, we will inform you about this.
• Correction. You may request that we correct inaccurate information we maintain about you.
• Objection and restriction of processing. You may request that we cease processing of your Personal Data in certain circumstances or limit or restrict the use and disclosure of Personal Data, including sensitive Personal Data. We do not use sensitive Personal Data for any purpose other than to fulfill the business purposes described herein and do not use it to infer characteristics about you, and therefore do not provide this right.
• Withdrawal of consent. You may withdraw your consent to our processing of your Personal Data where the basis of our processing is your consent. This right may not apply if there are other legal justifications to continue processing or we need to retain certain Personal Data where required or permitted under applicable law.
• Opt out of sharing or selling. You may opt out of sharing or selling of your Personal Data, as those terms are defined under applicable privacy laws. While we do not sell or share your Personal Data, we may use analytics services that are intended to analyze your use of our website based on information obtained from cookies or other trackers. You can opt out of the use of cookies and other trackers on our website as described in our Cookie Policy. We do not have actual knowledge that we “sell” or “share” the personal information of consumers under 16 years of age. 

• Opt out of profiling. You may opt out of certain profiling relating to automated processing analyzing certain categories of an individual’s information that would produce a legal or similarly significant effect.

Exercising your rights. To exercise your rights or ask us any questions pertaining to your rights, please contact us using the details set out in the “How to Contact Miro” section below. Please note that we may request that you or your authorized agent provide us with additional information in order to confirm your identity and ensure that you are entitled to access the relevant personal information.

We will respond to requests in a reasonably timely manner. If we require extra time to respond, we will inform you of the reason and extension period in writing. In order to protect the security of your Personal Data, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. The method used to verify your identity will depend on the type, sensitivity and value of the information, including the risk of harm to you posed by any authorized access or deletion. Verification will be performed by matching the identifying information provided by you to the Personal Data that we already have.

Any disclosures we provide will only cover the 12-month period preceding our receipt of your request (and will not be made more than twice in a 12-month period). If we cannot comply with a request, or cannot fully comply with a request, the response we provide will also explain the reasons we cannot comply. 

We will not discriminate against you for exercising any of your rights. You also have the right to lodge a complaint to a data protection authority. For more information, please contact your local data protection authority.

8. Changes to this Privacy Notice

Miro may change this Privacy Notice from time to time, as required by changes to our business processes or applicable law. We will post any changes to our Privacy Notice on this page and notify you when required by applicable law. Please check this page regularly to keep up-to-date.

9. How to Contact Miro

If you have questions about this Privacy Notice, or regarding your Personal Data, you can contact us via email at privacy(at)miro.com, or by mail at:

RealtimeBoard, Inc. dba Miro ATTN: Privacy Team 201 Spear St Suite 1100 94105 San Francisco, USA

Our representative in the European Union:

RealtimeBoard BV ATTN: Data Protection Team Singel 542 1017 AZ Amsterdam, NL