Privacy
Last updated: October 29, 2026. Controller: Travis Hong, sole proprietor, doing business as Mirava, mirava.build@gmail.com.
What we collect
| Data | Why | Legal basis (EU/UK) | Kept |
|---|---|---|---|
| Name, email, business details, project messages | To quote, deliver, and support your project | Contract | 6 years after the project (tax records) |
| Billing details (handled by Stripe; we never see full card numbers) | To take payment | Contract, legal obligation | 6 years |
| Business contact details from public sources (for outreach to businesses) | To offer our services | Legitimate interest | Until you opt out, or 12 months without reply |
| Aggregate site analytics (no cookies, no personal profiles) | To improve the site | Legitimate interest | 6 months |
| Content and logins you give us for your site | To build and run it | Contract | Until the project or care plan ends + 30 days |
Who we share it with: only the providers that run the business: Stripe (payments), Cloudflare (hosting, analytics), our email provider [email provider], and the marketplace you hired us through (Upwork, Fiverr, or Contra). AI tools we use are configured not to train on your data. We don't sell or rent personal data and don't share it for cross-context advertising.
International transfers: we are based in the US. Transfers from the EU/UK rely on our providers' Standard Contractual Clauses or the EU-US Data Privacy Framework where they participate.
Your rights: access, correction, deletion, restriction, objection (including to all outreach, any time), portability, and complaint to your local data protection authority. Email mirava.build@gmail.com; we answer within 30 days. Every outreach email has an opt-out, and opting out puts you on our do-not-contact list permanently.
Security: access is limited to people and systems that need it; accounts use two-factor sign-in where offered.
Children: the site and services are for businesses, not children under 16.
Changes: we post updates here with a new date.