Who this notice covers
This notice explains how Migo AI handles personal information when you visit our website, create an account, communicate with Migo, or use our healthcare mobility services.
Migo acts as the controller for information collected through the customer product unless a separate agreement says otherwise. Organisations using Migo for their own workforce may receive a separate business privacy notice.
Information we collect
We collect information needed to coordinate your mobility journey, including:
- account and contact details, including your name, email address, telephone number and communication preferences;
- professional and mobility information, such as qualifications, registration history, work experience, destination, role and journey goals;
- documents and extracted information, including identity, qualification, employment and regulatory evidence;
- messages, calls, approvals, uploaded files and other communications with Migo;
- credit purchases, transaction records and billing contact details, but not full payment-card details;
- device, security, diagnostic and usage information needed to operate and protect the service; and
- information received from employers, regulators, institutions or other people you authorise us to contact.
Please avoid sharing health or other highly sensitive information unless Migo specifically requests it and explains why it is needed.
How and why we use information
We use personal information to provide the service you request, build and manage your journey plan, check evidence, prepare forms and communications, obtain your approvals, process credits, support your account, prevent fraud and improve reliability.
Depending on the activity, our lawful basis may be performance of our contract with you, compliance with a legal obligation, our legitimate interests in operating and securing Migo, or your consent. If special-category information is required, we identify an additional legal condition before processing it.
How Migo uses AI
Migo uses AI to understand conversations, extract and organise document information, recommend next steps, draft forms and messages, and coordinate routine work. AI output can be incomplete or incorrect, so important submissions, sensitive permissions and credit spend are presented for approval or human review.
We do not use solely automated processing to make a decision with legal or similarly significant effects about you without the safeguards required by applicable law. You may ask for information about a significant automated decision, express your view, challenge the outcome and request human review.
Retention and security
We keep information only for as long as needed for your account, journey records, legal obligations, dispute handling, fraud prevention and legitimate business records. Retention varies by information type and destination requirements. When information is no longer needed, we delete it or make it anonymous.
We use technical and organisational safeguards designed to protect information, including access controls, secure transmission, audit logging, supplier review and incident response procedures. No online service can guarantee absolute security.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a regulator. Withdrawing consent does not affect earlier lawful processing, but it may limit what Migo can do for you.
You can manage channels and consent in Settings. To exercise a legal right, email us so we can verify your identity and respond within the applicable period.
Changes and contact
We may update this notice as Migo, our providers or legal requirements change. We will highlight material changes in the product or through an appropriate communication channel before they take effect.
Questions about this notice can be sent to privacy@migoai.com.
