Privacy Policy

Miraq LABS Pvt Ltd ('Miraq Suite', 'we', 'our', or 'us') is dedicated to protecting the privacy, security, and integrity of your retail business and customer data. This Privacy Policy governs your use of the Miraq Suite Desktop terminal, Web management dashboard, and automated Social Commerce integrations including WhatsApp Business Cloud API and Facebook Messenger.

When merchants activate WhatsApp Social Commerce inside Miraq Suite via Meta WhatsApp Cloud API: • We process incoming customer orders, customer contact phone numbers, delivery addresses, ordered items, and order status updates. • Customer message content is parsed strictly to extract product names, quantities, and delivery details into your Miraq Suite POS sales pipeline. • We do not use customer WhatsApp messages for marketing, ad profiling, or unauthorized third-party analytics. • Communications are handled strictly within Meta's 24-hour customer service window guidelines and encrypted in transit via TLS 1.3 HTTPS protocols.

When merchants connect their Facebook Pages or WhatsApp Business Accounts using Meta Embedded Signup ('Connect with Facebook'): • We request standard OAuth permissions (whatsapp_business_management, whatsapp_business_messaging, pages_messaging, pages_show_list). • We securely store the merchant's WhatsApp Phone Number ID, WhatsApp Business Account ID (WABA ID), and Facebook Page ID. • All access tokens are stored with AES-256 encryption at rest and used solely to route incoming customer order inquiries and dispatch outbound order status confirmations.

Miraq Suite desktop terminals run an 'Offline First' architecture. Store inventory levels, daily counter receipts, barcodes, and customer offline records are stored in a dedicated local SQLite database on your computer. Your offline transactions operate without interruption even during internet outages.

When you register for a Miraq Suite account, we collect basic administrative information: your full name, business/store name, email address, contact telephone, and encrypted passwords. If you subscribe to cloud-enabled tiers, your sales and inventory are synchronized to our secure MongoDB Atlas cloud infrastructure to enable multi-device reporting and analytics.

Under Meta Platform Terms and global privacy regulations (GDPR / CCPA / PDPA), users and merchants have the right to request deletion of their data at any time: • Merchants can disconnect WhatsApp or Facebook Messenger instantly from the Social Integrations settings panel, which purges all stored access tokens. • To request full account and transaction data deletion, send an email with your registered business email to support@miraqlabs.com with the subject 'Data Deletion Request'. Your records will be permanently removed within 48 hours.

We enforce a strict zero-selling policy: we never sell, rent, trade, or monetize your store data, sales volumes, product margins, or customer communications to advertisers, data brokers, or third parties under any circumstances.

Payments for Miraq Suite subscriptions are processed through PayHere, a PCI-DSS certified national payment aggregator in Sri Lanka. We never record, process, or store credit/debit card numbers or CVV codes on our servers.

For privacy questions, compliance inquiries, or Meta platform verification assistance, please contact the Miraq Suite Privacy Team: • Email: support@miraqlabs.com • Official WhatsApp Support: +94 77 626 7692 • Corporate Address: Miraq LABS Pvt Ltd, Colombo, Sri Lanka.