MIRVEX Technology ("MIRVEX", "we", "our", or "us") is dedicated to upholding the highest standards of data integrity, confidentiality, and statutory privacy protection.

This Privacy Policy explains how we collect, store, process, and safeguard information when you visit our website (https://www.mirvex.in), submit a consultation inquiry, interact with our quotation tools and interactive assistants, or engage our engineering teams for custom software development services.

We operate in strict adherence to the Information Technology Act 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011, and the Digital Personal Data Protection (DPDP) Act 2023 of the Republic of India.

1. Directly Submitted Inquiry Data: When you submit an inquiry form, schedule a discovery call, or request a custom quotation, we collect your name, business email address, phone/WhatsApp number, company name, project brief, feature specifications, and budget range.

2. Client Project & Operational Data: During active engineering engagements, we may handle technical parameters such as server access credentials, third-party API keys, domain DNS settings, and staging mock datasets strictly necessary to build and deploy your software.

3. Automated Telemetry & Analytics: When you navigate our digital properties, our servers may automatically collect standard diagnostic telemetry, including IP address, browser type and version, operating system, referrer URL, device screen resolution, and anonymized interaction timestamps to verify system health and performance.

4. AI Assistant Transcripts: Conversations held with the MIRVEX automated project estimation assistant on our platform are logged securely to assist our solutions architecture team in drafting accurate project scopes and follow-ups.

We process your data exclusively for lawful, legitimate business purposes, including:

• Formulating tailored technical architectures, Statements of Work (SOW), and quotation estimates.

• Communicating regarding milestone delivery, code releases, security patches, and scheduled maintenance.

• Executing agile sprints, conducting User Acceptance Testing (UAT), and deploying code to production servers.

• Generating statutory tax invoices, GST filings, and verifying transaction settlements.

• Preventing fraudulent activities, unauthorized intrusion, and ensuring continuous platform security.

We DO NOT engage in targeted third-party advertising tracking, nor do we construct behavioral surveillance profiles for commercial resale.

Zero Model Training: MIRVEX explicitly warrants that proprietary client source code, database schemas, business logic, customer databases, and confidential trade secrets will NEVER be ingested into, utilized by, or submitted to train public foundation models or generative AI datasets.

Dedicated Git Repositories: All client repositories are hosted within private, access-restricted GitHub or GitLab organizations with Two-Factor Authentication (2FA) enforced across all contributing engineers.

Production Data Protection: We enforce a strict policy forbidding the duplication of live client customer records to local development workstations. All testing and staging runs utilize synthetic, anonymized, or mock datasets.

Our web applications use minimal, essential cookies and browser local storage mechanisms required for system stability, theme preferences (dark mode states), session persistence, and anti-CSRF security verification.

We use privacy-centric, cookieless or privacy-compliant analytics that do not track users across unrelated third-party websites. You can configure your browser to reject cookies or notify you when cookies are set; however, certain interactive portal functions may experience reduced capability.

To deliver high-availability engineering, MIRVEX engages enterprise-grade infrastructure providers vetted for stringent SOC2 Type II, ISO 27001, and GDPR compliance:

• Cloud Hosting & Edge CDN: Vercel Inc. and Amazon Web Services (AWS) for edge server rendering and high-speed asset distribution.

• Database Systems: MongoDB Atlas (encrypted cloud database clusters with IP whitelisting).

• Communications: Nodemailer / SMTP gateways and WhatsApp Business API (Meta) for automated quotation dispatch and verified project alerts.

All third-party sub-processors process data strictly under our contractual instructions and are legally prohibited from utilizing your information for independent commercial endeavors.

We implement technical and organizational safeguards engineered to protect data against unauthorized destruction, loss, alteration, or disclosure:

• End-to-end encryption in transit utilizing Transport Layer Security (TLS 1.3 / SSL) with strong cryptographic cipher suites.

• Advanced Encryption Standard (AES-256) encryption for sensitive keys, environment files, and database partitions.

• Role-Based Access Control (RBAC) and least-privilege principles, restricting server and repository permissions to authorized personnel on a strict need-to-know basis.

• Comprehensive administrative audit logs recording privileged access and configuration modifications.

We retain client records and communication histories only as long as necessary to fulfill the operational purposes for which they were collected, or as required by applicable Indian tax, legal, and financial auditing statutes (typically seven years for financial and contractual documentation).

Upon formal project sign-off or termination of services, and following completion of statutory audit requirements, client staging branches, temporary credentials, and development databases are securely sanitized or permanently purged upon written request.

Depending on your jurisdiction, you possess enforceable rights concerning your personal data, including:

• Right to Access: Request a summary of the personal data we hold about you and the processing activities undertaken.

• Right to Correction & Completion: Request that inaccurate, incomplete, or outdated personal information be rectified promptly.

• Right to Erasure (Right to be Forgotten): Request the deletion of your personal data when it is no longer necessary for the purposes for which it was gathered.

• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.

• Right to Grievance Redressal: Lodge a grievance regarding our data handling directly with our designated Grievance Officer.

We endeavor to acknowledge all formal statutory requests within forty-eight (48) hours and complete fulfillment within fourteen (14) business days.

Where MIRVEX serves international clients across North America, Europe, the Middle East, or Asia-Pacific, personal data and source code may be accessed by our engineering teams located in India.

All cross-border data transfers adhere strictly to standard contractual clauses (SCCs) and appropriate data protection frameworks to ensure an equivalent standard of protection is maintained across jurisdictions.

Our engineering services and website are geared toward commercial enterprises, entrepreneurs, and professional entities. We do not knowingly solicit, collect, or market services to individuals under the age of eighteen (18) years. If we discover that personal data of a minor has been inadvertently submitted, we will immediately delete such records.

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, the details of the designated Data Protection & Grievance Officer for MIRVEX Technology are provided below:

Entity: MIRVEX Technology

Designation: Grievance Officer (Data Protection Desk)

Registered Address: H-56, Sector 51, Noida, Uttar Pradesh 201301, India

Electronic Mail: mirvextechnology@gmail.com

Telephone Helpline: +91 93361 75234

Working Hours: Mon – Sat · 10:00 AM – 7:00 PM IST