Privacy Policy.
We collect the minimum data necessary, store it securely, and delete it when no longer needed. No surprises, no hidden clauses, no data selling.
Principles
Data minimalism.
Encrypted
AES-256 at rest, TLS 1.3 in transit
Transparent
You know exactly what we collect
Temporary
Auto-deleted when no longer needed
Yours
Export or delete anytime
Collection
What we collect.
Complete transparency about every data point, why we need it, and how long we keep it.
Your Rights
Control your data.
You can request a copy of all personal data we hold about you. We provide this within 30 days, free of charge.
You can request complete deletion of your account and associated data. We process this within 30 days, with 30-day backup retention.
You can request your data in a machine-readable format (JSON) for transfer to another service.
You can opt out of analytics tracking at any time via our cookie consent banner or browser settings.
Subprocessors
Who we trust.
We use a minimal set of third-party services. Each is vetted for security, privacy practices, and data residency options.
Vercel
USA (EU data residency available)Hosting & CDN
Data: IP addresses, access logs
Stripe
USAPayment processing
Data: No card data — tokenized only
Google Analytics
USAUsage analytics
Data: Anonymized IP, page views, events
Data protection officer.
For privacy-related requests, data subject access requests, or compliance questions, contact our DPO directly.
privacy@miransas.comResponse time: 72 hours for acknowledgment, 30 days for resolution.