MirmiPersonal data
Privacy policy — Mirmi
Last updated: November 2025
This Privacy policy describes how MIRMI, a société par actions simplifiée registered with the Paris Trade and Companies Register under number 991 005 604, collects, uses and protects your personal data in connection with the use of the website https://mirmi.ai and our Mirmi Base and Mirmi Connect services.
We are committed to complying with the General Data Protection Regulation (GDPR) and all applicable French laws on the protection of personal data.
1. Who is the controller of your data?
MIRMI
SAS with share capital of €1,000
Registered office: 14 Avenue du Général de Gaulle, 94160 Saint-Mandé, France
SIREN: 991 005 604
General contact email:alex@mirmi.ai
Data controller / GDPR contact: Mariya Borovikova (Chief Executive Officer)
Dedicated data protection email:mariya@mirmi.ai
2. What data do we collect?
We only collect the data necessary to use the site and provide our services.
2.1. Data you provide to us directly
Via contact, demo request or meeting booking forms, we may collect in particular:
- First name, last name
- Business email
- Company name
- Job title
- Message content and context of your request
- Information needed to organize a meeting or demonstration
2.2. Data collected automatically
As you browse our site, certain technical data may be collected automatically:
- Technical information (IP address, browser type and version, device type, operating system)
- Navigation data (pages visited, visit duration, clicks, traffic source)
- Technical cookies necessary for the site to work and, subject to your consent, analytics cookies.
2.3. Data processed within Mirmi Base or Mirmi Connect
As part of using our Mirmi Base and Mirmi Connect products, we process data strictly necessary to deliver the service, in particular:
- Contract documents and related files uploaded by the client
- Modified versions, comments, annotations, approvals
- Business metadata (timestamps, user identifiers, action logs, etc.)
No client data is used to train external models. No data is transferred outside the European Union, except at the explicit request of the client or if required by the hosting location chosen by the client.
3. Why do we collect your data?
3.1. Handle your requests and the commercial relationship
- Respond to messages and requests submitted through the forms
- Organize demonstrations and meetings
- Contact you back regarding your requests or our B2B commercial exchanges
3.2. Improve how the site works
- Audience measurement (via a tool such as Google Analytics or equivalent, subject to your consent)
- Performance analysis and resolving any bugs
- Optimizing site content and ergonomics
3.3. Deliver the Mirmi Base and Mirmi Connect services
- Hosting and processing of contract documents
- User account and access management
- Security, traceability and auditability of actions
- Client support and onboarding assistance
3.4. Meet our legal and regulatory obligations
- Invoicing and accounting obligations
- Handling requests to exercise rights
- Fighting abuse, fraud or behavior that breaches our commercial terms
4. What legal bases do we rely on to process your data?
- Performance of a contract: when processing is necessary to deliver the Mirmi Base or Mirmi Connect services, or to perform pre-contractual steps taken at your request.
- Legitimate interest: improving our services, securing our systems, managing the B2B commercial relationship, protecting our rights.
- Consent: for optional forms and non-essential cookies (especially analytics), which you can withdraw at any time.
- Legal obligation: retaining certain data to comply with our accounting or tax obligations.
6. How long do we keep your data?
- B2B contact and prospecting data: 3 years from the last exchange or last contact from you.
- Cookies: for the duration indicated in the cookie banner or cookie policy.
- Mirmi account / service data: for the duration of the contract, then up to 12 months after its end, unless a longer legal retention obligation applies or the data is anonymized.
- Invoicing data: 10 years, in line with legal accounting and tax obligations.
Client contract data is deleted, anonymized or returned at the end of the contract, in accordance with the terms set out in the commercial agreement with the client.
7. Your rights (GDPR)
Under the GDPR and the French Data Protection Act, you have the following rights over your personal data:
- Right of access to your data
- Right to rectify inaccurate or incomplete data
- Right to erasure (right to be forgotten) where the regulation applies
- Right to object to certain processing, in particular marketing
- Right to restrict processing
- Right to data portability, where applicable
- Right to withdraw your consent at any time for processing based on consent
To exercise your rights, please contact us at:mariya@mirmi.ai
You also have the right to lodge a complaint with the competent supervisory authority — in France, the CNIL(Commission Nationale de l'Informatique et des Libertés) –www.cnil.fr.
8. Data security
We implement technical and organizational measures appropriate to the sensitivity of the processed data, in particular:
- Data hosting within the European Union
- Dedicated or on-premise deployment available
- Strict environment isolation and access control
- Encryption of data in transit
- Logging and traceability of access and critical actions
- Proprietary AI running on our infrastructure, with no data sent to external models
- No use of client data to train external models
10. Changes to this policy
We may update this Privacy policy to reflect legal, technical or functional changes. In case of a significant change, we will inform you through appropriate means (on-site notice, dedicated communication, etc.).
The last updated date is shown at the top of this page.
11. Contact
For any question about this Privacy policy or how we process your personal data, please write to us at: