Privacy Policy

Information we collect

• Your account. Your email address, your name and job title if you add them, a securely hashed password if you set one, your sign-in sessions, two-step sign-in settings, passkeys, and preferences such as language, theme and timezone.
• Your business content. What you and your team add: business and brand details, locations, services, files and images, posts, landing pages and goals, and the records of your customers and leads, which can include names, email addresses, phone numbers, appointments and messages.
• Services you connect. Only if you connect them, and only what you authorize. From Meta (Facebook, Instagram, Messenger and WhatsApp Business), this can include your Pages and ad accounts, campaign and performance data, lead form submissions, and comments and messages on the accounts you connect. From Google (Ads, Business Profile and Calendar), this can include your ad accounts, campaign and performance reports, lead form submissions, business locations and reviews, and calendar availability. If you sign in with Google or Microsoft, we receive the name and email address on that account.
• Technical and security information. Your IP address and browser details when you use the service, and a record of sign-ins and account changes. We use these to keep accounts safe and to limit abuse.
• Payment information. Paid plans are billed through Stripe, which collects your card details. We receive billing status and invoice details, not your full card number.

How we use information

• To provide the service: planning campaigns, creating content, publishing what you approve, managing leads and reporting results.
• To sign you in and keep your account secure.
• To send messages about the service, such as verification links, one-time codes, security notices and invoices.
• To answer support requests.
• To prevent abuse and meet our legal obligations.

We do not sell personal data, and we do not use it to show you advertising from other companies.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running a secure service, your consent where we ask for it, and our legal obligations.

AI features

Some features send your instructions and the relevant business content to an AI model provider, such as OpenAI or Google, to produce a result. This happens only for work you or your team has requested or approved, including agents you have switched on within the limits you set. If you add your own API key for a provider, those requests run under your agreement with that provider.

Data from Meta and Google

We use data received from Meta and Google only to provide the features you connected them for. We do not sell it, use it to advertise to other people, or share it except with the service providers listed below and as the law requires. Access tokens are stored encrypted. You can disconnect a service at any time under Integrations, and we then stop accessing it.

MiraiLeads' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Who receives information

• Your team. People you invite to your account, and agencies you authorize, according to the roles you give them.
• Service providers that run parts of the service for us: Cloudflare for hosting, storage and security; email delivery providers for the messages we send; Microsoft for our company mailbox; Stripe for payments; and AI model providers for the features above.
• Platforms you direct us to use. For example, Meta or Google when you publish content or start a campaign.
• Others when required. Where the law requires it, to protect people or the service, or as part of a business transfer such as a merger.

Where information is processed

The service runs on Cloudflare's global network, so your information may be processed outside the country where you live. We rely on the safeguards our providers offer for international transfers.

How long we keep information

We keep account and business information while your account is active. Sign-in sessions, one-time codes and confirmation links expire automatically. Data exports are available for a short time, 24 hours by default. We keep security and audit records for as long as they are needed to protect the service, and billing records for as long as the law requires. When information is deleted it is removed from the live service, and any copy in a backup is removed when that backup expires.

Security

We protect information in transit with HTTPS, store passwords only as hashes, encrypt connected-account credentials, separate each business's data, and control access by role. You can add two-step sign-in to your account. No system is perfectly secure, so please tell us at connect@miraileads.com if you believe your account has been compromised.

Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal information, object to or restrict how we use it, and withdraw consent. You can also complain to your data protection authority.

You can edit your name and email under Your profile. Account owners and administrators can export, correct and delete records under Settings, Privacy & Consent. For anything else, email connect@miraileads.com. We respond within 30 days.

How to delete your data

You can ask us to delete your data at any time, on any plan.

1. To stop further access, open Integrations in MiraiLeads and disconnect the service. You can also remove MiraiLeads from your Facebook account under Settings & privacy, Settings, then Apps and websites or Business integrations.
2. Email connect@miraileads.com from the address on your account, with the subject "Delete my data". If you do not have an account with us, tell us the name and the Facebook, Instagram or Google account involved.
3. We confirm the request, delete your account and the personal data tied to it, and tell you when it is done, within 30 days. We keep only what the law requires us to keep, such as billing records.

If a business uses MiraiLeads to hold your information

Businesses use MiraiLeads to manage their own customers and leads, including people who fill in a form on a landing page they publish. The business decides how that information is used, and we process it on its behalf. Please contact that business first. If you cannot reach it, email connect@miraileads.com and we will help.

Cookies

We use cookies that keep you signed in, protect your requests and complete sign-in or a connection with another service. The service cannot work without them. Our sign-in and registration forms may use Cloudflare Turnstile to tell people from automated traffic. Our public website sets no advertising or analytics cookies.

Children

MiraiLeads is a service for businesses and is not intended for anyone under 18.

Changes to this policy

We update the date at the top of this page when this policy changes, and we tell account holders about significant changes.

Contact us

For any question about this policy or your information, email connect@miraileads.com.

Mirai Integration Private Limited
WeWork Salarpuria Magnifi, Tinfactory 78 Old Madras,
Doorvaninagar, Bangalore North,
Bangalore – 560016
Karnataka, India