Categories
MigiHub Cookie Policy & Consent
This Cookie Policy explains how MigiHub (owned by InnuCloud Experts Inc.) uses cookies and similar technologies — such as SDKs, local storage, and pixels — on our websites, web app, and communications. It also explains your choices.
1) What are cookies and similar technologies?
Cookies are small text files stored on your device by a website. Similar technologies include local storage, pixels, SDKs, and device identifiers. We use these to operate the service, remember preferences, measure performance, secure accounts, and (with consent) personalize marketing.
2) Our roles
- Controller: our public websites, marketing pages, and billing.
- Processor: in-tenant product analytics configured by our customers. In that case we process on the controller's documented instructions.
3) Categories we use
- Strictly necessary: required for core functionality, authentication, security, fraud prevention, load balancing.
- Preferences/functional: remember choices like language or time zone.
- Performance/analytics: understand usage to improve features and reliability.
- Advertising/targeting: measure campaigns and show relevant ads on third‑party sites.
4) Your choices & how to manage them
- Cookie banner & preferences: On first visit (and periodically), we present a banner. Except for strictly necessary items, categories are off by default in regions requiring opt‑in. Use the Manage Cookie Preferences link (in footer or account menu) to change settings anytime.
- Global Privacy Control (GPC): Where feasible, we honor GPC signals for opt‑out of sale/sharing/targeted advertising.
- Do Not Track: We respond per browser capabilities and regional law, but behavior may vary by tool.
- Browser controls: You can block/delete cookies via your browser settings. Blocking strictly necessary cookies may break the service.
5) Regional notes (summary)
- EU/EEA/UK: prior opt‑in required for non‑essential cookies (analytics/ads). Ability to withdraw consent at any time.
- Québec/Canada: obtain consent where required; follow CASL for marketing and keep unsubscribe simple.
- U.S. states (e.g., CA/CO/CT/VA/UT): provide opt‑out of sale/sharing/targeted advertising; link to Do Not Sell or Share My Personal Information and honor GPC where supported.
6) First‑party cookies set by MigiHub (examples)
- session_id / auth_token — strictly necessary; keeps you signed in (session).
- csrf_token — strictly necessary; protects against cross‑site request forgery (session).
- locale / tz_pref — preferences; remembers your language/time zone (12 months).
7) Third‑party tools we use (web & app)
Below is a non‑exhaustive list of third‑party tools that may set cookies, store identifiers, or process similar telemetry. Many are optional and enabled per tenant configuration. Where possible, we offer region‑aware consent and server‑side configuration to reduce identifiers.
7.1) Cookie & SDK inventory (examples)
Tool | Category | Purpose | Examples | Retention | Provider |
---|---|---|---|---|---|
Google Analytics (GA4) | Analytics | Traffic & usage analytics (aggregated) | _ga, _ga_*, _gid | 13–24 months (configurable) | Google LLC |
Plausible | Analytics | Privacy‑focused analytics | No cookies by default | n/a | Plausible Insights OÜ |
Hotjar | Analytics | Heatmaps & session insights | _hjSession_*, _hjIncludedInPageviewSample | 1 day – 12 months | Hotjar Ltd. |
Segment | Analytics/CDP | Event collection & routing | ajs_anonymous_id, ajs_user_id | 12–24 months | Twilio Segment |
Amplitude | Analytics | Product analytics | amp_* | 12–24 months | Amplitude Inc. |
Mixpanel | Analytics | Product analytics | mp_* | 12–24 months | Mixpanel Inc. |
PostHog | Analytics/A-B | Product analytics & experiments | ph_* | 12–24 months | PostHog Inc. |
Statsig | A/B testing | Feature flags & experimentation | statsig_* (may use local storage) | 12–24 months | Statsig |
HubSpot | Marketing/CRM | Forms, chat, lead capture | hubspotutk, _hssc, _hssrc, _hstc | 6–13 months | HubSpot Inc. |
Customer.io | Comms | Lifecycle messaging | cio_* (beacons/links) | varies | Customer.io |
Mailchimp | Comms/Marketing | Email campaigns & forms | _mcid, _AVESTA_ENVIRONMENT | varies | Intuit/Mailchimp |
Mandrill | Comms | Transactional email delivery | web beacons/link redirects | per email | Intuit/Mandrill |
Twilio | Comms | SMS/voice program mgmt | program IDs; may set cookies for web widgets | session–12 months | Twilio Inc. |
Facebook (Meta) Pixel | Ads | Advertising & remarketing | _fbp | 90 days (typical) | Meta Platforms, Inc. |
Google Ads | Ads | Advertising & remarketing | _gcl_au | 90 days (typical) | Google LLC |
Bing Ads (Microsoft Advertising) | Ads | Advertising & remarketing | _uetsid, _uetvid | 13 months (typical) | Microsoft |
Cloudflare | Networking/CDN | Bot mgmt, WAF, performance | __cf_bm, __cflb | up to 30 days | Cloudflare, Inc. |
Stripe | Billing | Payment processing & fraud prevention | __stripe_mid, __stripe_sid | 1 year / 30 minutes | Stripe, Inc. |
PartnerStack | Partnerships | Affiliate & referral tracking | partnerstack_* | up to 12 months | PartnerStack |
Outgrow | Marketing | Interactive forms/quizzes | outgrow_* | varies | Outgrow |
OpenAI | AI | AI‑assisted features (if enabled) | Service tokens/IDs (no browser cookie typical) | session | OpenAI |
8) Retention & expiry
We set retention to the minimum needed. Most analytics/ads identifiers have a default of 13–24 months; session/auth cookies expire sooner. You can withdraw consent or delete cookies at any time.
9) International transfers
Where tools process data outside your region, we rely on appropriate safeguards (e.g., GDPR SCCs and, where applicable, vendor DPF participation). See our Sub‑processors page for vendors and purposes.
10) Consent records
We keep records of consent state (categories toggled, timestamp, region, and (where feasible) truncated IP or user ID) to demonstrate compliance. We re‑prompt at least annually or when materially changing vendors/cookies.
11) Contact & managing preferences
- Manage Cookie Preferences: <link to your CMP>
- Do Not Sell or Share (US): <link>
- Contact: [email protected] | InnuCloud Experts Inc., 2020 Trans‑Canada Hwy, Dorval, Quebec H9P 2N4, Canada