Legal

Privacy Policy.

We collect the minimum data necessary, store it securely, and delete it when no longer needed. No surprises, no hidden clauses, no data selling.

Last updated: July 4, 2026|GDPR & KVKK Compliant

Principles

Data minimalism.

Encrypted

AES-256 at rest, TLS 1.3 in transit

Transparent

You know exactly what we collect

Temporary

Auto-deleted when no longer needed

Yours

Export or delete anytime

Collection

What we collect.

Complete transparency about every data point, why we need it, and how long we keep it.

Account Data
Email, username, password hash
Authentication, account management
Until account deletion + 30 days
Contract necessity
Usage Data
IP address, browser type, pages visited, time spent
Service improvement, security monitoring
14 months (anonymized after 30 days)
Legitimate interest
Payment Data
None — handled by Stripe
N/A
N/A
N/A
Communication
Email content, support tickets
Customer support, issue resolution
3 years
Legitimate interest

Your Rights

Control your data.

You can request a copy of all personal data we hold about you. We provide this within 30 days, free of charge.

You can request complete deletion of your account and associated data. We process this within 30 days, with 30-day backup retention.

You can request your data in a machine-readable format (JSON) for transfer to another service.

You can opt out of analytics tracking at any time via our cookie consent banner or browser settings.

Subprocessors

Who we trust.

We use a minimal set of third-party services. Each is vetted for security, privacy practices, and data residency options.

Vercel

USA (EU data residency available)

Hosting & CDN

Data: IP addresses, access logs

Stripe

USA

Payment processing

Data: No card data — tokenized only

Google Analytics

USA

Usage analytics

Data: Anonymized IP, page views, events

Data protection officer.

For privacy-related requests, data subject access requests, or compliance questions, contact our DPO directly.

privacy@miransas.com

Response time: 72 hours for acknowledgment, 30 days for resolution.