Skip to main content
Mirmi

Personal data

Privacy policy — Mirmi

Last updated: July 2026

This Privacy policy describes how MIRMI, a société par actions simplifiée registered with the Créteil Trade and Companies Register under number 991 005 604, collects, uses and protects your personal data in connection with the use of the website https://mirmi.ai and our Mirmi Base and Mirmi Connect services.

We are committed to complying with the General Data Protection Regulation (GDPR) and all applicable French laws on the protection of personal data.

1. Who is the controller of your data?

MIRMI
SAS with share capital of €2,000
Registered office: 14 Avenue du Général de Gaulle, 94160 Saint-Mandé, France
SIREN: 991 005 604
Créteil Trade and Companies Register

General contact email:alex@mirmi.ai

Data controller: MIRMI, represented by its President, Alex Hayem
GDPR contact:alex@mirmi.ai

2. What data do we collect?

We only collect the data necessary to use the site and provide our services.

2.1. Data you provide to us directly

Via contact, demo request or meeting booking forms, we may collect in particular:

  • First name, last name
  • Business email
  • Company name
  • Job title
  • Message content and context of your request
  • Information needed to organize a meeting or demonstration

2.2. Data collected automatically

As you browse our site, certain technical data may be collected automatically:

  • Technical information (IP address, browser type and version, device type, operating system)
  • Navigation data (pages visited, visit duration, clicks, traffic source)
  • Technical cookies necessary for the site to work and, subject to your consent, analytics cookies.

2.3. Data processed within Mirmi Base or Mirmi Connect

As part of using our Mirmi Base and Mirmi Connect products, we process data strictly necessary to deliver the service, in particular:

  • Contract documents and related files uploaded by the client
  • Modified versions, comments, annotations, approvals
  • Business metadata (timestamps, user identifiers, action logs, etc.)

No client data is used to train external models. Providers, processing destinations and any transfers depend on the enabled features and selected architecture; they are documented and contractually governed, including under GDPR.

3. Why do we collect your data?

3.1. Handle your requests and the commercial relationship

  • Respond to messages and requests submitted through the forms
  • Organize demonstrations and meetings
  • Contact you back regarding your requests or our B2B commercial exchanges

3.2. Improve how the site works

  • Audience measurement (via a tool such as Google Analytics or equivalent, subject to your consent)
  • Performance analysis and resolving any bugs
  • Optimizing site content and ergonomics

3.3. Deliver the Mirmi Base and Mirmi Connect services

  • Hosting and processing of contract documents
  • User account and access management
  • Security, traceability and auditability of actions
  • Client support and onboarding assistance

3.4. Meet our legal and regulatory obligations

  • Invoicing and accounting obligations
  • Handling requests to exercise rights
  • Fighting abuse, fraud or behavior that breaches our commercial terms

5. Who do we share your data with?

We only share your data with providers and partners strictly necessary to operate the service or manage the commercial relationship. These providers act as processors under article 28 GDPR and do not use your data for their own purposes.

Hosting and infrastructure

  • Marketing site host (mirmi.ai): Vercel, providing front-end hosting for the site.
  • SaaS application and client data host: Scaleway, in France, in the fr-par region.
  • For dedicated architectures — private cloud, VPC or on-premise deployment — the infrastructure provider and data location depend on the architecture agreed with the client and are specified contractually.
  • Certain specialised processing, including legal research when enabled, may use governed technical providers. Its purpose, the data involved, destination and retention period are specified in the documentation applicable to the project.

Business tools

  • Analytics tool (activated only with your consent)
  • Meeting booking tool (e.g. Calendly or equivalent)
  • CRM tool to manage the B2B commercial relationship

We never sell your data and do not transfer your data outside the European Union without appropriate legal safeguards or your explicit consent when required.

6. How long do we keep your data?

  • B2B contact and prospecting data: 3 years from the last exchange or last contact from you.
  • Cookies: for the duration indicated in the cookie banner or cookie policy.
  • Mirmi account / service data: for the duration of the contract, then up to 12 months after its end, unless a longer legal retention obligation applies or the data is anonymized.
  • Invoicing data: 10 years, in line with legal accounting and tax obligations.

Client contract data is deleted, anonymized or returned at the end of the contract, in accordance with the terms set out in the commercial agreement with the client.

7. Your rights (GDPR)

Under the GDPR and the French Data Protection Act, you have the following rights over your personal data:

  • Right of access to your data
  • Right to rectify inaccurate or incomplete data
  • Right to erasure (right to be forgotten) where the regulation applies
  • Right to object to certain processing, in particular marketing
  • Right to restrict processing
  • Right to data portability, where applicable
  • Right to withdraw your consent at any time for processing based on consent

To exercise your rights, please contact us at:alex@mirmi.ai

You also have the right to lodge a complaint with the competent supervisory authority — in France, the CNIL(Commission Nationale de l'Informatique et des Libertés) –www.cnil.fr.

8. Data security

We implement technical and organizational measures appropriate to the sensitivity of the processed data, in particular:

  • SaaS data hosted in France, in Scaleway's fr-par region
  • Location of dedicated architectures agreed contractually with the client
  • Dedicated or on-premise deployment assessed according to the project architecture
  • Strict environment isolation and access control
  • Encryption of data in transit
  • Logging and traceability of access and critical actions
  • Proprietary AI engine running in the selected architecture, with external flows limited to the features and technical providers documented for the project
  • No use of client data to train external models

9. Cookies

Our site uses cookies and similar technologies to:

  • ensure the site works technically;
  • measure the audience and performance of the site (only if you consent);
  • improve the user experience.

You can manage your cookie preferences at any time via the consent banner or your browser settings.

10. Changes to this policy

We may update this Privacy policy to reflect legal, technical or functional changes. In case of a significant change, we will inform you through appropriate means (on-site notice, dedicated communication, etc.).

The last updated date is shown at the top of this page.

11. Contact

For any question about this Privacy policy or how we process your personal data, please write to us at:

alex@mirmi.ai