The short version
- We collect what we need to run your account, take payments, deliver orders and keep the site safe.
- We never ask for your social media passwords and we do not sell your personal data.
- Only the link and quantity of an order are used to deliver it, never your account details.
- You can ask to see, correct, export or delete your data at any time.
This Privacy Policy explains how Mireon ("we", "us") collects, uses, shares and protects personal data when you use Mireon at https://mireon.xyz (the "Service"). It applies to visitors, account holders and API users.
1. Who is responsible for your data
Mireon is the controller of the personal data described here. You can contact us at admin@mireon.xyz or by post at:
the address published on our Contact page
2. What we collect
| Information | Examples | Why we need it |
|---|---|---|
| Account details | Name, email address, password (stored only as a one-way hash), discount level, API key hash | To create and secure your account and contact you about it |
| Order details | The links or usernames you submit, links you choose to save for reuse, services, quantities, status history, support messages about orders | To deliver, track, refund and support your orders |
| Payment details | Amounts, method, payment references, transaction hashes, status. Card and bank details are entered with the payment processor and are not stored by us | To credit your balance, prevent fraud and keep financial records |
| Support and contact messages | Tickets, replies, contact form messages and attachments you choose to send | To answer you and improve the service |
| Technical data | IP address, browser type, device information, pages and actions, timestamps, error logs | To secure the Service, detect abuse and fix problems |
| Cookies and similar | A session cookie that keeps you signed in | To make the site work. See the Cookie Policy |
We do not ask for, and you should never send us, your social media passwords, card numbers by email or identity documents unless we have specifically asked for them for a security check and told you why.
3. How we use your information and our legal reasons
- To provide the Service (performing our contract with you): creating your account, processing deposits, placing and tracking orders, issuing refunds and answering support requests.
- To keep the Service safe and prevent fraud (our legitimate interests): detecting stolen payment methods, abuse of the API, multiple accounts, chargeback abuse and security incidents, and enforcing our policies.
- To meet legal obligations: keeping accounting records, responding to lawful requests from authorities, and sanctions or anti-money-laundering rules that apply to us.
- To communicate with you: sending service emails such as confirmations, receipts, password resets, refund notices and replies to tickets. These are necessary to run your account. We do not send marketing emails unless you separately agree, and you can withdraw consent at any time.
- To improve the Service (our legitimate interests): understanding which features are used and fixing errors, using aggregated or de-identified information where practical.
4. Who we share it with
We share personal data only when needed and only with:
- Delivery partners. To carry out an order, the link or username, the service and the quantity are shared with the partners that help deliver it. They do not receive your name, email address or payment details.
- Payment providers. For example Paystack, Flutterwave or PalmPay when you pay by card, wallet or bank, or the wallet and network used for a cryptocurrency payment. They have their own privacy policies.
- Service providers. Hosting and database providers, email delivery providers and, if switched on, the provider that serves web fonts. They process data on our instructions.
- Authorities and advisers. Where the law requires it, to protect our rights, or to professional advisers under confidentiality duties.
- A buyer of the business. If the business is sold or reorganised, your data may be transferred to the new owner, who must respect this policy.
We do not sell your personal data and we do not share it with advertisers.
5. International transfers
Our hosting, delivery partners and payment providers may be in countries different from yours. Where personal data is sent to a country that does not have the same level of data protection law, we take steps that the law accepts to protect it, such as contractual safeguards. You can ask us for more information about these safeguards.
6. How long we keep it
| Data | How long |
|---|---|
| Account data | While your account is open and for a limited period afterwards to handle disputes |
| Order, deposit and refund records | As long as the law requires us to keep financial records, usually several years |
| Support tickets and contact messages | Up to 2 years after the matter is closed |
| Security and activity logs | Up to 6 months, longer if needed to investigate an incident |
| Email delivery records | Up to 60 days |
When we no longer need data we delete it or make it anonymous.
7. Security
We use measures suited to the risk, including encrypted connections, hashed passwords, encrypted storage of sensitive credentials, access controls, request limits against abuse and logging of administrator actions. No system is perfectly secure. Please use a strong, unique password, keep your API key private and tell us immediately if you suspect misuse. If a personal data breach affects you and the law requires it, we will notify you and the relevant authority.
8. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, the Nigeria Data Protection Act or similar laws) you may have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data deleted, subject to records we must keep by law;
- restrict or object to certain uses of your data, including uses based on our legitimate interests;
- receive your data in a portable format;
- withdraw consent where we rely on it, without affecting earlier use; and
- complain to your data protection authority.
To use a right, write to admin@mireon.xyz from the email address on your account. We may need to verify your identity first and we will answer within the time the law requires, normally one month. Deleting your account stops future use of it, but we keep records we are legally required to keep.
9. Cookies
We only use cookies that the site needs to work, such as the cookie that keeps you signed in. We do not use advertising or analytics cookies. Our pages may load typefaces from a font provider (Google Fonts). When that is switched on, your browser contacts the provider, which receives your IP address and browser details. See the Cookie Policy for details and how to control this.
10. Children
The Service is for people aged 18 and over. We do not knowingly collect data about children. If you believe a child has given us personal data, contact us and we will delete it.
11. Automated decisions
We use automated rules, for example request limits and fraud checks, to protect the Service. They can lead to a payment being held or an account being reviewed. We do not make decisions with legal or similarly significant effects on you solely by automated means; a person reviews those cases and you can contact us to contest them.
12. Links to other sites
The Service may link to other websites, such as a payment provider's page. We are not responsible for their content or privacy practices, so please read their policies.
13. Changes to this policy
We may update this policy as our Service or the law changes. The date at the top of the page shows when it was last changed. If we make a significant change we will tell registered users by email or by a notice on the dashboard.
14. Contact and complaints
Questions or requests about your data: admin@mireon.xyz. If you are not satisfied with our response you have the right to complain to the data protection authority where you live or work.