Privacy Policy

1. Introduction

This Privacy Policy describes how Ephoreal Technologies (OPC) Pvt. Ltd. ("we," "our," or "us") collects, uses, and protects your information when you use our platform available at https://mirano.app (the "Service" or "App").

Mirano enables users to create infographics, one-page presentations, and similar designs based on their input.

We respect your privacy and are committed to protecting your personal data in compliance with applicable laws, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, GDPR (EU), and other international standards.

2. Information We Collect

We collect only the information necessary to operate and improve the Service.

a. Information you provide directly

• Account information: name, email address, and password when you register through Supabase.
• User content: infographics, presentations, or any design you create or upload within the app.
• Communication data: messages, feedback, or support requests.

b. Automatically collected information

• Analytics and usage data: pages visited, features used, device/browser type, and time spent, collected via Google Analytics.
• Cookies and similar technologies: used to remember preferences and improve functionality.
• Security data: IP address, device information, and access logs for fraud detection and system protection.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service.
• Process transactions through Razorpay (we do not store card details).
• Authenticate and manage user accounts through Supabase.
• Deliver personalized features and recommendations using Gemini Flash 2.5 (our AI model).
• Send transactional, service-related, or marketing emails (you may unsubscribe at any time).
• Ensure the security, stability, and performance of the App.
• Comply with legal and regulatory requirements.

4. Data Storage and Retention

• Your data is stored securely on servers hosted by Hetzner (Germany/EU).
• Data you create is only stored if you choose to save it.
• Saved data is retained until you delete it or request deletion.
• Backups are encrypted and maintained for disaster recovery only.

5. Sharing of Information

We do not sell, rent, or trade your personal data.

We share data only with trusted service providers who help operate our business:

• Razorpay – for payment processing.
• Supabase – for authentication and database management.
• Hetzner – for cloud hosting and storage.
• Google Analytics – for anonymized usage analytics.
• Cloudflare – for DNS and security protection.

Each of these partners is bound by data protection and confidentiality obligations.

6. Legal Basis for Processing (GDPR)

For users in the EU/EEA, we rely on the following bases:

• Performance of a contract: to provide you the Service.
• Legitimate interests: to improve features, secure systems, and understand usage patterns.
• Consent: for analytics cookies and marketing communications.
• Legal obligation: to comply with accounting, tax, and KYC requirements.

7. User Rights

Depending on your location, you have the right to:

• Access, update, or delete your data.
• Withdraw consent to data processing.
• Request a copy (data portability).
• Object to certain uses of your data.

To exercise any of these rights, contact us at support@mirano.app.

8. International Data Transfers

Your information may be processed outside your country (for example, in Germany or India).

We ensure adequate data protection safeguards through secure, encrypted transfers and GDPR-compliant service providers.

9. Security Measures

We take reasonable organizational and technical steps to protect your data:

• All communication uses HTTPS encryption.
• DNS and DDoS protection via Cloudflare.
• Strict internal access control.
• Periodic security reviews.

While we implement best practices, no online system is fully immune to risks. Users are responsible for maintaining account security (e.g., strong passwords).

10. Children's Privacy

Our App is suitable for all ages but not specifically directed at children.

We do not knowingly collect data from individuals under 16. If you believe a child has provided data, contact us for deletion.

11. Marketing Communications

We may occasionally send you product updates, new features, or promotional messages.

You can unsubscribe anytime via the "unsubscribe" link or by contacting privacy@ephoreal.com.

12. Changes to This Privacy Policy

We may update this policy from time to time.

When we do, the updated version will be posted at https://mirano.app/privacy with a revised "Last Updated" date.

13. Contact Us

For questions or privacy-related concerns, reach us at: