Privacy Policy

1. Introduction

MiCompress ("we", "our", "us") runs the file compression service at micompress.com, the MiCompress mobile app for Android and iOS, and the MiCompress command-line tools, extensions and add-ons. This Privacy Policy explains what information we collect when you use any of them, how we use it, how long we keep it, and how to have it deleted.

2. Information We Collect

Files you compress

To compress a file we upload it to our servers. Files are:

• Processed solely to compress them
• Deleted automatically: the uploaded original within about 10 minutes (an unfinished large upload within 3 hours), and the compressed result within 24 hours
• Never shared with third parties, and never read by a person

Compression records

For each compression we keep a record of the file name, file type, size before and after, the time, the IP address it came from, which app or tool sent it, and your account if you were signed in. We use these records to show your history, to enforce upload limits and to understand how the service is used.

Your account

An account is optional. If you create one we store your email address, your password (as a one-way hash, never in readable form), your plan and monthly usage, your API key, and the status of any subscription.

On the website and in the mobile app you can also sign in with Google. Google then tells us your email address, your name and profile picture, and a Google account identifier; we store the email address and the identifier and use them only to sign you in. We never receive your Google password. If an account with the same email address already exists, signing in with Google opens that account.

On the website you can also sign in with Facebook. Facebook then tells us your email address, your name and an identifier for your Facebook account that is specific to MiCompress; we store the email address and the identifier and use them only to sign you in. We never receive your Facebook password and we do not post anything to Facebook. If an account with the same email address already exists, Facebook is not linked to it automatically: you sign in the usual way and link Facebook from your account page. To remove the data we hold, delete your account as described on our account deletion page; you can also remove MiCompress from your Facebook settings under Apps and Websites.

Payments

Paid plans are sold through Lemon Squeezy, which acts as the merchant of record. Lemon Squeezy collects your payment details; we never see or store your card number. We receive the subscription status and the email address used at checkout.

In the Android app, paid plans are sold through Google Play Billing. Google processes the payment, including any free trial and the monthly renewals, under the Google Play terms; we never see your payment details. We receive a purchase token, the plan bought, whether it is in a free trial, renewing, cancelled or expired, and when the current period ends, and we use them only to give your account the plan you paid for.

Emails and messages

We use your email address to verify your account, reset your password, and — only when you ask — send you a download link for a slow compression. If you contact us, we receive what you write in the form.

Error reports and server logs

When something fails, the website and the mobile app send us an error report: the error message, technical details of where it happened, and the app version. Our servers also keep logs of requests, which include IP addresses.

Analytics and advertising

The website uses Google Analytics to measure visits, and may show ads through Google AdSense. The mobile app shows ads through Google AdMob to signed-out users and to users on the free plan; paid plans see no ads. AdMob collects device information such as the advertising ID, IP address and how you interact with ads, to serve, measure and limit ads and to prevent fraud. In the EEA, the UK and US states with their own privacy laws, the app asks for your consent before showing personalised ads, and you can change that choice at any time in Settings → Ad privacy choices. You can reset or delete your advertising ID in your device settings. These services use cookies or device identifiers and collect information under Google's own privacy policy.

The mobile app uses Google Analytics for Firebase to understand how the app is used: which screens are opened, each step of a compression, how long each step takes and where it fails. It uses Firebase Crashlytics to receive crash reports. Both collect these events together with device information such as an app-instance identifier, the device model, the operating system version and an approximate location derived from the IP address. They do not receive your files, the contents of your files or your email address. Firebase processes this data on our behalf under Google's own privacy policy.

3. How We Use Your Information

We use collected information to:

• Compress your files and deliver the results
• Run your account, apply your plan's limits and show your history
• Prevent abuse, such as automated uploads, and keep the service secure
• Find and fix errors, and understand which features are used
• Respond to support requests

We do not sell your personal information.

4. How Long We Keep It

• Files: deleted within 24 hours, as described above
• Account information and compression records: for as long as your account exists; deleting your account deletes them
• Error reports and server logs: up to 90 days
• Mobile app analytics (Google Analytics for Firebase): up to 14 months
• Mobile app crash reports (Firebase Crashlytics): up to 90 days
• Payment records: kept by Lemon Squeezy and Google Play for as long as tax and accounting law requires

5. Data Security

We implement industry-standard security measures:

• Encrypted (HTTPS/TLS) connections for all file transfers
• Passwords stored only as salted hashes
• Secure server infrastructure
• Automatic file deletion after processing

6. Cookies

The website uses cookies and similar browser storage to:

• Remember your language preference
• Keep you signed in
• Measure usage (Google Analytics) and serve ads (Google AdSense)

7. Third-Party Services

• Google Analytics — website analytics
• Google AdSense — advertising on the website
• Google AdMob — advertising in the mobile app, for signed-out users and the free plan
• Google Analytics for Firebase and Firebase Crashlytics — usage analytics and crash reports in the mobile app
• Lemon Squeezy — payment processing for paid plans bought on the website
• Google Play Billing — payment processing for paid plans bought in the Android app
• Google Sign-In — optional sign-in with a Google account on the website and in the mobile app
• Facebook Login (Meta Platforms) — optional sign-in with a Facebook account on the website
• Cloudflare — network delivery and protection for all traffic to our servers

These services have their own privacy policies governing data use.

8. MiCompress Mobile App

• The app uploads only the files you choose to compress, or share to it from another app.
• It does not access your contacts, location, camera or microphone.
• Your history of compressions is also kept on your device; you can clear it in the app's settings, and it is removed when you uninstall the app.
• If you sign in, your session is stored in your device's secure storage (Android Keystore / iOS Keychain).
• Signed-out users and the free plan see ads from Google AdMob, as described under "Analytics and advertising" — including a full-screen ad while the app starts. Paid plans, including a free trial, see no ads.
• You can sign in with your email and password or with Google, and buy a paid plan through Google Play, as described under "Your account" and "Payments".
• The app sends usage events and crash reports to Google Analytics for Firebase and Firebase Crashlytics, as described under "Analytics and advertising".

9. Google Workspace Add-on and Google User Data

This section applies only if you install the MiCompress Google Workspace Add-on for Google Docs and Google Slides. It describes how the add-on accesses, uses, stores and shares Google user data, and it governs in the event of any conflict with the rest of this policy.

What the add-on accesses

The add-on requests these OAuth scopes, and no others:

• .../auth/documents.currentonly and .../auth/presentations.currentonly — access is limited to the single document or presentation you have open while the add-on is running. The add-on cannot see, list or open any other file in your Google Drive.
• .../auth/script.external_request — allows the add-on to send an image to our compression service.

Within that one open file, the add-on reads only the embedded images. It does not read, transmit or store your document's text, comments, speaker notes, revision history, or file name.

How the data is used

Each image is sent over an encrypted HTTPS connection to our compression endpoint, compressed, and returned to the add-on, which writes the smaller image back in place of the original. The image is used for this single purpose and nothing else.

Retention

Images are processed in temporary storage and deleted immediately once the compressed result has been returned — typically within seconds. We do not retain copies, and we do not keep a record of your document's contents. For rate limiting we process an anonymous, non-identifying user token supplied by Google; it is held in memory only and is not linked to your Google account, email address or identity.

Sharing

We do not sell, rent or share Google user data with third parties. Google user data obtained through the add-on is never transferred to advertising platforms, data brokers, or information resellers, and is never used for advertising, marketing, credit assessment, or any comparable purpose.

Human access

No human at MiCompress reads or reviews your images. Automated processing is the only access, except where you have given explicit consent for us to investigate a specific problem you reported, where it is necessary for security purposes such as investigating abuse, or where we are required by law.

Machine learning

We do not use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models.

Limited Use disclosure

MiCompress's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can revoke the add-on's access at any time by removing it from the add-ons panel in Google Docs or Slides, or by removing MiCompress at myaccount.google.com/permissions. Because we retain no copies of your images, no deletion request is needed after revoking access.

10. AI Assistants (MCP Server)

This section applies when an AI assistant such as Claude, ChatGPT or Cursor uses MiCompress through our MCP server — either the hosted server at https://micompress.com/mcp or the local micompress-mcp package.

What we receive

• Only the arguments of the tool the assistant calls: the link to the file (hosted server) or the file itself (local server), plus the options chosen — preset, image width, file name.
• With the hosted server, we download the file from the link you or the assistant provided. We fetch nothing else from that address.
• Your API key, if you added one to the connection, to apply your plan's limits.
• The IP address the request comes from — for a connector run by an AI provider, that is the provider's server, not your device.

We do not receive your conversation, prompts, chat history, memory, other files or account details held by the AI provider, and the server does not ask for them.

How it is used and how long we keep it

• The file is used only to compress it. The downloaded original is deleted within about 10 minutes and the compressed result within 24 hours, exactly as for files uploaded on the website.
• A job record (job id, file name, sizes and the download link) is kept for 2 hours so the assistant can fetch a result that took longer than one request.
• A compression record is kept as described under "Compression records", marked as coming from the MCP server.

Sharing

We do not share files or MCP request data with third parties, and do not use them for advertising or to train machine learning models. The tool result we return — the download link and file sizes — goes to the AI assistant you are using, and is handled under that provider's privacy policy.

11. Your Rights

You have the right to:

• Access your personal data
• Request data deletion
• Opt-out of analytics tracking
• Lodge complaints with supervisory authorities

Deleting your account: in the mobile app go to Account → Delete account, or use micompress.com/delete-account. Your account, compression records and any remaining files are deleted immediately, and a renewing subscription is cancelled. If you cannot sign in, email us from the address on the account.

12. Contact Us

For privacy-related inquiries, contact us at:

Email: [email protected]

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page.