Privacy policy
Last updated 31 July 2026
This policy explains what personal data Miramer collects through this website, why, who else handles it, how long we keep it, and what you can require us to do about it. It is written to meet the Digital Personal Data Protection Act, 2023.
1. Who we are, and who to write to
Miramer is an automation practice based in Salem, Tamil Nadu, India, run by Alex. For the personal data described here, Miramer is the Data Fiduciary — the party responsible for it.
Every question, correction, deletion request or complaint about this policy goes to [email protected] and is answered by Alex himself. There is no ticketing system to get lost in.
2. What we collect, and why
Only what the contact form asks for, plus what any web server unavoidably sees.
| What | Why we need it |
|---|---|
| Your name | To address you properly in the reply. |
| Company | Optional. It tells us what kind of operation we are looking at before we answer. |
| Email address | To reply to you. This is the only field we reply to by default. |
| WhatsApp number | Optional. Given only if you would rather we answer there. |
| Your message | The process you want automated. We need it to give you a useful answer rather than a brochure. |
| IP address and request details | Seen and logged by Cloudflare, which serves this site, to keep it available and block abuse. We do not use it to identify or profile you. |
3. What this website does not do
Worth stating plainly, because most sites cannot say it:
- It sets no cookies. There is no consent banner because there is nothing to consent to.
- It runs no advertising and no cross-site tracking scripts.
- It has no login, no account and no database.
- Sending the form does not subscribe you to anything. There is no mailing list.
- We do not sell, rent or share your data with anyone for marketing, and we never will.
- Nothing here makes an automated decision about you.
We do count visits, using Cloudflare Web Analytics. It is worth being specific about what that is, because most analytics is not this: it sets no cookies, assigns you no identifier, follows you to no other website, and reports only aggregate numbers — how many people opened a page, roughly where in the world from, and which page sent them. There is nothing in it that identifies you, and nothing we could look up about you even if we wanted to. That is also why this site has no cookie banner: there is no cookie to ask you about.
4. The basis on which we hold it
You give us this data yourself, for one purpose stated at the point you give it: so that we can reply to your enquiry. That is your consent under the DPDP Act, and we use the data for nothing else.
You can withdraw that consent at any time, as easily as you gave it — one line to [email protected] is enough. We then delete what we hold, other than anything we are required by law to keep.
5. Who else handles it
We run this on services rather than our own servers, so three companies process your message on our instructions along the way:
| Service | What it does with your data |
|---|---|
| Cloudflare | Serves this website, runs the form handler, counts visits through Cloudflare Web Analytics, and receives mail addressed to miramer.in. Operates a global network, including locations outside India. |
| Resend | Delivers your form submission to our inbox, and delivers our replies to you. Based in the United States. |
| Google (Gmail) | Where our mail is stored, read and answered. Operates globally, including outside India. |
Because of those services your data is processed outside India. The DPDP Act permits this except to countries the Government has specifically restricted, and no such restriction applies at the date of this policy.
6. How long we keep it
| Data | Kept for |
|---|---|
| An enquiry that does not lead to work | Up to 24 months from your last message, then deleted. |
| An enquiry that becomes an engagement | For the engagement, and 24 months after it ends. |
| Invoices and records we must keep | For as long as Indian tax law requires. We cannot delete these on request. |
| Cloudflare request logs | On Cloudflare's own retention schedule — typically days. Not something we control or can search. |
If you ask us to delete your enquiry sooner, we do, and we say when it is done.
7. Your rights
Under the DPDP Act you may ask us to:
- Tell you what personal data of yours we hold and what we have done with it.
- Correct anything inaccurate, or complete anything missing.
- Erase it, where we no longer need it for the purpose you gave it for.
- Stop processing it, by withdrawing your consent.
- Nominate another person to exercise these rights on your behalf if you die or are unable to act.
Write to [email protected]. We acknowledge within one working day and complete the request within 30 days. If you are not satisfied with how we handle it, you may complain to the Data Protection Board of India — but please raise it with us first, because we would rather fix it than be told to.
8. Data we see during an engagement
This is a different situation from the contact form, and it is worth being clear about. When we build automations we may see data belonging to your business — including data about your staff and your customers. There, you are the Data Fiduciary and we act on your instructions.
What we may access, for how long, and how it is protected is set out in the written proposal for that engagement, not on this page. Where practical we build inside your own accounts, so the data never leaves them at all.
9. Security, and its limits
- This site is a static export. It has no database, no login and no admin panel — there is nothing on it to break into.
- Form submissions travel over HTTPS and are delivered straight to our inbox. We do not keep a copy in a database of our own.
- Email is not a secure channel. Do not send passwords, API keys, bank details or customer records through the form. If we need credentials during an engagement, we will agree a safe way to hand them over.
- If a breach affects your personal data, we will tell you and the Data Protection Board, as the Act requires.
10. Children
This site is aimed at businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us data through the form, write to [email protected] and we will delete it.
11. Changes to this policy
If how we handle data changes, this page changes and the date at the top moves. Where a change materially affects data you have already given us, we tell you directly rather than relying on you to re-read this page.