Privacy Policy

1. Introduction

This Privacy Policy explains how Mirola.io ("Mirola", "we", "us", "our") collects, uses, shares and protects personal information when you visit our website, create an account, or use our customer relationship and marketing platform.

Mirola.io is owned and operated by Sauce Marketing Group Ltd, a company registered in England and Wales (company number 16482250). For the purposes of UK data protection law, Sauce Marketing Group Ltd is the data controller of personal information collected through Mirola.io, unless stated otherwise in this policy.

We are committed to handling your personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

2. Scope

This policy applies to personal information we collect through:

Our marketing website at mirola.io and any subdomains;
The Mirola.io application at app.mirola.io;
Our contact form, live chat, and email correspondence; and
Any other service, event or communication that links to this policy.

Some correspondence from us may come from email addresses associated with Sauce Marketing Group Ltd, depending on the nature of your enquiry.

3. Information we collect

We collect the following categories of personal information:

Account information — your name, work email address, password (stored as a hash), business name, role and any profile details you provide.
Customer and lead data — contact details, notes, communications history and other personal information about your customers and leads that you upload to or generate within Mirola.io. You are the controller of this data; we act as your processor and only handle it on your instructions.
Billing information — your billing name, billing address and subscription plan. Card and bank details are collected and processed directly by our payments provider, Stripe; we do not store full payment card numbers on our systems.
Usage and device data — IP address, browser type and version, device identifiers, pages viewed, features used, referring URL, and similar diagnostic data, collected through cookies and similar technologies.
Communications — the content of messages you send via our contact form, support tickets, email correspondence and live chat transcripts (including interactions with our AI assistant).
Marketing preferences — your consent choices and engagement with our marketing communications.

4. How we use your information

We use personal information to:

Create and manage your Mirola.io account;
Provide, operate and improve the platform and its features;
Process payments and manage your subscription via Stripe;
Respond to enquiries, provide customer support and resolve issues;
Send service-related messages (e.g. security alerts, billing notices, product updates);
Send marketing communications where you have consented or where we are otherwise permitted to do so;
Monitor and protect the security and integrity of our services and prevent fraud;
Understand how the platform is used and improve our products and content;
Comply with our legal, regulatory and tax obligations.

5. Legal bases for processing

Under UK GDPR Article 6, we rely on the following lawful bases:

Contract — to deliver the services you have signed up for and to manage your account and billing.
Legitimate interests — to operate, secure and improve Mirola.io, prevent fraud, send business-to-business marketing where appropriate, and analyse usage. We balance these interests against your rights.
Consent — for non-essential cookies, for marketing emails to individuals where required, and for any optional features that rely on consent. You can withdraw consent at any time.
Legal obligation — to meet our accounting, tax, regulatory and other legal obligations.

6. AI features

Some Mirola.io features — including our live chat assistant and in-app automation tools — use artificial intelligence. When you interact with these features, the content of your messages (and, where relevant, related contextual data from your account) is sent to AI providers acting as our sub-processors so that we can generate responses and perform the requested task.

We choose AI providers that contractually commit not to use your data to train their foundation models without our explicit instruction. We apply data minimisation, meaning we only send the information necessary to perform the task.

7. Cookies and tracking

We use cookies and similar technologies for essential functionality (e.g. keeping you logged in), performance and analytics, and — with your consent — marketing. You can manage your preferences from our cookie banner or your browser settings. For full detail, see our Cookie Policy.

We do not sell your personal information. We share it only with trusted third parties who help us run Mirola.io, including:

Stripe — payment processing and fraud prevention.
Cloud hosting and infrastructure providers — to host our application, databases and backups.
Email and notification providers — to send transactional and marketing emails.
Analytics providers — to understand aggregated usage of the platform and website.
AI providers — to power our AI features as described above.
Professional advisers — accountants, auditors and lawyers, where required.
Authorities — where we are required by law, court order or to protect our rights.

If Mirola.io or the business operating it is sold, merged or reorganised, personal information may be transferred as part of that transaction, subject to appropriate safeguards.

9. International transfers

Where personal information is transferred outside the United Kingdom or European Economic Area, we ensure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK government has deemed adequate.

10. Data retention

We keep personal information only for as long as necessary for the purposes set out above:

Account information: for the lifetime of your account and for up to 6 years after closure to meet accounting, tax and legal obligations.
Customer and lead data inside the platform: for as long as you keep it in your account; deleted on request or upon account closure, subject to backup retention windows.
Contact form and support enquiries: up to 24 months from the last interaction.
Marketing logs and consent records: until you withdraw consent, plus a reasonable period to evidence compliance.
Server and security logs: typically up to 12 months.

11. Your rights

Under UK data protection law you have the right to:

Access the personal information we hold about you;
Request that we correct inaccurate or incomplete information;
Request erasure of your personal information in certain circumstances;
Restrict or object to how we process your information;
Request that we transfer your information to you or another provider (data portability);
Withdraw consent at any time, where we rely on consent;
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

To exercise any of these rights, please email privacy@mirola.io or use our contact form. We may need to verify your identity before responding.

12. Security

We use a combination of technical and organisational measures to protect your information, including encryption in transit (TLS), encryption at rest for sensitive data, role-based access controls, secure software development practices, and regular review of our suppliers. No system can be guaranteed 100% secure, but if we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify you and the ICO as required by law.

13. Children

Mirola.io is a business tool intended for use by professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us so we can remove it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or via the application before the changes take effect.

15. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, you can reach us at:

Email: privacy@mirola.io
Web: mirola.io/contact
Post: Sauce Marketing Group Ltd (company no. 16482250), United Kingdom.

This document is provided for transparency and does not constitute legal advice. If you need a tailored legal opinion you should consult a qualified solicitor.