Privacy Policy
Last updated: 29 September 2026
Also read our Terms of Service and Data Deletion.
1. Who we are
MiraalTech Ltd (company number 17410938, registered in England and Wales) provides this website and MiraalChatBot.
MiraalChatBot is an AI chatbot for WhatsApp Business. A business subscribes to it, connects its own WhatsApp Business account, and uses it to reply to its customers.
This policy explains how we handle personal data when you use www.miraaltech.com or MiraalChatBot. It covers website visitors, businesses that buy the service, their staff, and people who message those businesses on WhatsApp.
Our registered address is 2 Frederick Street, Kings Cross, London, WC1X 0ND, United Kingdom.
2. Our role (controller vs processor)
Our role depends on whose data it is.
We are the controller of our business customers' account data. That includes the name, email, phone number, and billing details of the person or company that signs up for MiraalChatBot or contacts us through this website. We decide why and how that data is used.
We are the processor of WhatsApp conversations between a business and its own end customers. The business decides why those messages are collected and how the bot should reply. MiraalTech Ltd processes that data only on the business's instructions, to provide MiraalChatBot.
If you messaged a business on WhatsApp, that business is the controller of your conversation. Contact that business first. We will help them when they ask us to.
3. Data we collect
Business customer account data
When a business creates an account, asks for a demo, or contacts us, we collect the name, business name, email address, phone number, and billing details they give us. Payments are processed by Stripe. We do not store full card numbers.
WhatsApp Business data
With the business's permission, we access WhatsApp data through Meta's WhatsApp Business Platform (Cloud API). That can include:
- WhatsApp Business Account ID, phone number ID, and display name
- Message templates
- Message content, including text, images, documents, and voice notes
- End-user phone numbers and profile names
- Message timestamps and delivery or read status
We access this data only after the business connects WhatsApp and only for the features that business turns on.
Knowledge-base content
A business may upload PDFs, website text, FAQs, price lists, and similar files so its bot can answer questions. We store that content to run the bot.
Usage and technical data
When you use the website or the product, we collect technical data such as IP address, browser and device type, pages or screens used, and server logs. We also use cookies, described in the cookies section below.
4. How we use data
We use personal data to:
- Provide the chatbot, including receiving and replying to WhatsApp messages
- Generate AI replies and transcribe voice notes
- Hand a conversation to human staff when the business turns that on
- Show chat history, lead capture, and analytics to the business
- Take payment, manage the subscription, and provide support
- Keep the service secure and prevent fraud or abuse
- Meet legal and accounting duties
- Reply to enquiries sent through this website
We do not sell personal data. We do not use a customer's WhatsApp conversation data for advertising.
5. AI processing
To generate a reply or a transcription, we send the relevant messages and knowledge-base content to our AI provider(s): [AI PROVIDER NAME(S)]. We send that content only for those tasks.
Under our agreements with these providers, this data is not used to train their public models. [CONFIRM WITH PROVIDER TERMS]
AI replies can be wrong or incomplete. A business can turn on human handoff so its own staff can take over a conversation. The business is responsible for checking its knowledge base and for what the bot says to its customers. See our Terms of Service.
6. Meta / WhatsApp data
We access WhatsApp data only through Meta's official APIs, only after the business authorises MiraalChatBot, and only to provide the features that business uses. We do this in line with Meta's Platform Terms and WhatsApp Business policies.
The business can disconnect access at any time from the MiraalChatBot dashboard (Settings → WhatsApp → Disconnect) and in Meta Business settings. Steps are on our Data Deletion page.
7. Legal bases (UK GDPR / EU GDPR)
Where UK GDPR or EU GDPR applies, we rely on:
- Contract — to provide MiraalChatBot, create the account, and take payment.
- Legitimate interests — to keep the service secure, prevent abuse, understand how the product is used, and improve it, where those interests are not overridden by your rights.
- Consent — where the law requires it, including non-essential cookies and any marketing messages we send.
- Legal obligation — to keep records we are required to keep, such as invoices.
When we process WhatsApp conversations for a business customer, we do so as their processor. That business is responsible for having a valid legal basis for messaging its end customers, including opt-in consent where WhatsApp requires it.
9. International transfers
We are based in the United Kingdom. Some providers, including Meta and our hosting and AI providers, may process data outside the UK and outside your country.
Where UK or EU law requires a safeguard for those transfers, we use the UK International Data Transfer Agreement (IDTA) or the EU Standard Contractual Clauses, together with any extra measures those laws require.
We also respect the local privacy laws of the regions we serve. That includes Saudi Arabia's Personal Data Protection Law (PDPL), the UAE PDPL, Bahrain's PDPL, and the privacy laws that apply in Pakistan.
10. Data retention
We keep account data for as long as the account is open, and then for up to [X] years where we need it for legal, tax, or accounting records.
We keep conversation data and knowledge-base files while the business account is active. After the account is closed, or after a valid deletion request, we delete that data within 30 days, unless the law requires us to keep it for longer.
We keep technical logs for up to 90 days.
How to ask for deletion is explained on our Data Deletion page.
11. Security
We protect data in transit with HTTPS/TLS and encrypt it at rest. Access is limited to people who need it for their job, on a least-privilege basis. We log access to production systems and review those controls as the product changes. No online service can guarantee absolute security.
12. Your rights
Depending on where you live, you may have the right to access your personal data, correct it, delete it, restrict it, object to certain uses, and receive a portable copy. Where we rely on consent, you can withdraw that consent at any time.
Email privacy@miraaltech.com from the address we hold for you, and say which right you want to use. We will respond within 30 days. We may need to confirm your identity before we act.
You can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live.
If you are an end customer of a business that uses MiraalChatBot, contact that business first. They control the conversation. If you email us, we will pass the request to the business and help them complete it.
14. Children
MiraalChatBot and this website are for businesses. They are not directed at children. We do not knowingly collect personal data from anyone under 16, or under 18 where local law sets that higher age. If you believe we have, email privacy@miraaltech.com and we will delete it.
15. Data deletion
A business can delete its account and data from the dashboard, or by emailing privacy@miraaltech.com. End customers should contact the business they messaged, or email us and we will assist that business.
The full steps, what is deleted, what we may keep, and how long it takes are on the Data Deletion page.
16. Changes to this policy
We will update the “Last updated” date at the top of this page when we change this policy. If a change materially affects business customers, we will notify them by email or in the product before the change takes effect.
17. Contact us
Questions about this policy or your personal data can be sent to privacy@miraaltech.com.