Your Privacy Matters to Us

Personal Information You Provide

• -Contact Information: Name, email address, company name, and phone number when you contact us or create an account.
• -Account Information: Username, password, and profile details when you register for our services.
• -Communication Data: Messages, feedback, and other communications you send to us.
• -Payment Information: Billing details processed securely through our payment providers.

Information Collected Automatically

• -Device Information: Browser type, operating system, device identifiers, and screen resolution.
• -Usage Data: Pages visited, features used, time spent on our services, and interaction patterns.
• -Log Data: IP address, access times, and referring URLs.

Supabase

We use Supabase for database hosting and authentication services. Supabase maintains SOC2 Type II compliance and implements industry-standard security measures. Your data is encrypted at rest and in transit.

OVHcloud & Cloudflare

Our website is hosted on OVHcloud infrastructure with Cloudflare providing global CDN distribution and DDoS protection. Both providers maintain strong security standards and ensure data is transmitted over encrypted connections.

Analytics Providers

We may use analytics services to understand user behavior and improve our services. These tools collect anonymized usage data and do not track personal information without consent.

You are the controller of your contacts and leads

For contact lists you upload, records you retrieve through our lead-sourcing features, and the recipients of messages you send, you decide the purposes and means of processing. In GDPR terms you are the controller and Misar acts as your processor, handling that data on your documented instructions and for no independent purpose of our own.

This means the lawful basis for contacting those people is yours to establish, the privacy notice owed to them is yours to give, and access, correction, deletion, and objection requests from them are yours to answer. If such a request reaches us directly, we will forward it to you rather than act on it ourselves, unless the law requires otherwise.

What we do with it

We process it to deliver the Services you asked for, to keep them secure and available, and to meet our own legal obligations. We do not sell it, we do not use it to train models for other customers, and we do not use one customer's data to enrich another's.

We do process delivery and abuse signals — bounces, complaints, opt-outs, and reports — as a controller in our own right, because we need them to protect recipients, other customers, and the deliverability of the platform. That processing continues even where you instruct otherwise.

Retention and deletion

You can delete contacts and lists at any time from the product. On termination we delete or return customer data within the period set out in our data processing agreement. Suppression records — who opted out, and when — are retained after deletion: removing them would let a previously unsubscribed person be contacted again, which is the opposite of what they asked for.

Consent and account records

When you create an account we record which version of our Terms, Privacy Policy, and Acceptable Use Policy you accepted, when you accepted it, and the IP address and browser user agent at the time. We keep this for as long as your account exists and afterwards for as long as needed to evidence the agreement between us. The lawful basis is our legitimate interest in being able to demonstrate the terms on which the Services were provided.