Privacy Policy

Mira HR provides a modular HR and payroll platform for companies in the United Arab Emirates and Egypt. Mira HR operates this website and the Mira HR service. In this policy, “Mira HR”, “we”, “us” and “our” refer to the operator of the website and the service.

This policy explains what personal data we collect through the website and the service, why we use it, who we share it with and what rights you have.

If you have any questions about this policy, you can contact us through the demo request form on this website.

For personal data of website visitors and of people who request a demo, Mira HR decides why and how the data is processed and acts as the controller.

For employee and HR data that our customers enter into the Mira HR service, the customer, as the employer, is the controller. Mira HR processes that data on the customer's behalf and only in accordance with the customer's instructions, acting as a processor.

If you are an employee of one of our customers, please direct any request about your data held in the service to your employer.

We collect the following personal data:

• Demo request details: your full name, company, work email, phone or WhatsApp number, country, number of employees, an optional message and, if you came to the form from the price calculator, the plan you selected there.
• The language of the form and the version of the privacy notice shown to you when you submitted the request.
• The IP address from which the request was sent. We use it only to protect the form against spam and abuse.
• With your consent, usage data collected by Google Analytics: pages viewed, approximate location that Google derives from the IP address, device and browser type, and how you reached the site.
• How you reached the website (campaign tags in the link, the referring website and the first page you opened), sent with your early access request.
• For customers of the service, account data: name, email address and password, which is stored only as a one-way hash.
• Sign-in and security data: two-factor authentication settings, sign-in attempts and sessions, including the IP address, browser or device information and device identifier of each session.
• If you use the mobile app, a push notification token and the device model, used to deliver notifications.
• If you sign in with Google, the identifier and email address of your Google account.
• Technical records of actions in the service, kept for a limited period to operate and secure it.
• Content that customers and their users enter into the service, including employee and HR data.

We use Google Analytics only if you accept analytics cookies in the cookie banner. Your choice is stored in your browser and you can change it at any time with Cookie settings at the bottom of any page. Details and the list of cookies are in our Cookie policy.

We do not use advertising cookies or advertising pixels, and we do not sell personal data. Fonts are served from our own servers.

The Mira HR app uses a strictly necessary sign-in cookie. Videos that customers embed in the service, for example from YouTube or Vimeo, are loaded from those providers.

We use personal data for the following purposes:

• To respond to demo requests and communicate with prospective customers, on the basis of steps taken at your request before entering into a contract and our legitimate interest in answering enquiries, and on the basis of your consent where the law requires it.
• To understand how visitors use the website and which pages lead to early access requests, on the basis of your consent, which you can withdraw at any time.
• To provide, secure and support the Mira HR service, on the basis of the performance of our contract with the customer.
• To protect the website and the service against spam, fraud and abuse, on the basis of our legitimate interest in keeping them safe.
• To comply with our legal obligations.

We process personal data in line with applicable data protection laws, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and Egyptian Law No. 151 of 2020 on the Protection of Personal Data.

We share personal data only with the following categories of recipients, and only to the extent needed for the purposes described in this policy:

• Infrastructure and content delivery providers that host and protect our systems (for example, Cloudflare).
• Google, where a user chooses to sign in with a Google account, and to deliver mobile push notifications through Firebase Cloud Messaging.
• Google, which provides Google Analytics for this website if you accept analytics cookies.
• Our email delivery provider, to send service emails.
• Public authorities, where we are required to share data by law.

We do not sell personal data.

Our service providers may process personal data outside the United Arab Emirates and Egypt. Where this happens, we take the steps required by applicable law to protect the data.

If you accept analytics cookies, Google may process usage data outside the United Arab Emirates and Egypt, including in the United States.

Details of the current hosting regions are available on request through the demo request form on this website.

We keep demo request details while we are in contact with you and for a reasonable period afterwards. We delete them earlier if you ask us to.

We keep customer data for the duration of the contract with the customer. On termination, we handle it as agreed with the customer.

Security records, such as temporary sign-in lockouts, and technical activity records are kept only for short periods.

Your cookie choice is kept in your browser for up to 12 months, and Google Analytics cookies for up to 13 months; your browser may delete them sooner.

Google Analytics keeps usage statistics in aggregated form. Detailed event-level data used for ad-hoc analysis is kept for up to 14 months, per our retention setting.

We protect personal data with technical and organizational measures appropriate to the risk, including encryption in transit, role-based access control and protection of user accounts. You can read more about these measures on our Compliance & data security page.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate personal data corrected.
• Have your personal data deleted.
• Object to the processing of your personal data or ask us to restrict it.
• Withdraw your consent at any time where we rely on consent. This does not affect processing carried out before the withdrawal.
• Lodge a complaint with the competent data protection authority.

To exercise any of these rights, contact us through the demo request form on this website. We may need to verify your identity before we respond.

The website and the service are intended for businesses and are not directed at children.

We may update this policy from time to time. The date at the top of this page shows when the latest version was published.

If you have any questions about this policy or about how we handle personal data, please get in touch.

You can reach us through the demo request form on this website.