Mira Commerce Privacy Policy
Effective date: June 20, 2025
Last updated: November 1, 2026
Privacy at a glance
This summary highlights the key points of our Privacy Policy. Please read the full policy for details.
- Who we are: DEPLABS, Inc., doing business as Mira Commerce ("Mira," "we," "us"), a digital commerce agency headquartered in Walnut Creek, California.
- What this policy covers: personal information we handle for our own business, including information about website visitors, prospective and current client contacts, partners and vendors, event attendees, newsletter subscribers, people who interact with our AI chat and voice assistants, and job applicants.
- What it does not cover: personal information we process on behalf of our clients when we build, operate, or support their ecommerce sites and systems. Our clients' privacy policies govern that information.
- Selling and sharing: We do not sell personal information for money. Some advertising cookies on our website may count as "sharing" under certain U.S. state laws, and you can opt out at any time through the "Your Privacy Choices" link or a Global Privacy Control signal.
- AI and recordings: Our chat and voice assistants are AI systems. We tell you when you are communicating with one, and we tell you before a call or meeting is recorded.
- Your rights: Depending on where you live, you can ask to access, correct, delete, or receive a copy of your information and to opt out of certain uses. Email legal@miracommerce.com or call +1 (855) 445-6560.
1. Who we are and what this policy covers
This Privacy Policy explains how DEPLABS, Inc., doing business as Mira Commerce, collects, uses, discloses, and protects personal information when you:
- visit miracommerce.com website that links to this policy (our "Site");
- contact us, request a proposal, or work with us as a prospective or current client;
- interact with our AI chat or voice assistants, or call, text, email, or meet with us;
- subscribe to our newsletters, attend our webinars, or visit our booth at trade shows and industry events;
- work with us as a vendor, technology partner, or referral partner; or
- apply for a job with us.
Personal information means information that identifies, relates to, or could reasonably be linked to you. Because Mira works with businesses, most of the personal information we handle is about individuals acting in a professional capacity, such as a marketing director at a client or prospect.
This policy does not cover:
- Client Data that we process on behalf of our clients, as explained in Section 2;
- personal information about our employees and contractors, which is covered by a separate internal privacy notice; and
- third-party websites, platforms, and services, including our clients' online stores, even where we designed, built, or support them.
2. When we act on behalf of our clients
Much of our work involves designing, building, migrating, operating, optimizing, and supporting ecommerce storefronts, marketing programs, and related systems for our clients, on platforms such as BigCommerce or Salesforce. In that work we may access or process personal information about our clients' customers, employees, or other individuals, such as shopper names, contact details, order histories, and account information ("Client Data").
When we process Client Data, our client is the "business" or "controller" responsible for that information, and Mira acts as its "service provider," "contractor," or "processor." We process Client Data only to provide services to that client, under the client's instructions and our written agreements with them, including any data processing terms. We do not sell or share Client Data, and we do not use it for our own marketing.
If you are a customer of one of our clients and have questions about your personal information, or want to exercise your privacy rights, please contact that client directly. If you contact us instead, we will refer your request to the relevant client and help them respond as our agreement with them requires.
3. Personal information we collect
3.1 Information you give us
- Contact and professional details: name, job title, company, business email address, phone number, mailing address, and professional profile (such as LinkedIn).
- Inquiry and project details: information you share when you submit a form, request a proposal, or discuss a project, such as your business needs, timelines, budget range, and technology platform.
- Communications: the content of emails, chat messages, text messages, voicemails, calls, and video meetings with us, including recordings, transcripts, and summaries as described in Section 4.
- Contract and billing details: signatory and billing contact names, invoicing and payment records. Payment card and bank account details are processed by our payment processors, and we do not store full card numbers.
- Event and marketing information: registration details for webinars and events, badge scans at trade shows, survey responses, and your communication preferences.
- Job application information: resume, work history, education, references, work authorization, and other information you choose to provide when you apply.
3.2 Information we collect automatically
When you visit our Sites or open our emails, we and our partners use cookies, pixels, tags, and similar technologies to collect:
- Device and connection information: IP address, browser type and settings, operating system, and device identifiers.
- Usage information: pages viewed, links clicked, referring websites, search terms entered on our Sites, time spent, and the dates and times of visits.
- Approximate location: city, state, or country inferred from your IP address. We do not collect precise geolocation.
- Email engagement: whether you opened one of our emails or clicked a link in it.
3.3 Information from other sources
- Business data providers: providers of business contact and company information such as Apollo.io, which we use to find, verify, or update business contact details and company information.
- Technology and platform partners: partners such as BigCommerce that refer opportunities to us or work with us on joint proposals.
- Event organizers and co-sponsors: attendee information when you visit our booth or register for an event we host with others.
- Public sources: company websites, professional networking sites, news reports, and public filings.
- Referrals: colleagues, clients, or other contacts who introduce you to us.
- Recruiting sources: job boards, recruiters, and references.
We do not ask website visitors, prospects, or client contacts for sensitive personal information, such as government identification numbers, financial account credentials, health information, or precise geolocation. Please do not send it to us. If you apply for a job, we may collect limited sensitive information where the law requires it (such as work authorization) or where you choose to provide it (such as voluntary equal employment opportunity information), and we use it only for those purposes.
4. AI assistants, recordings, and automated tools
- AI chat and voice assistants. Our Sites and phone lines may use AI-powered chat and voice assistants to answer questions, gather details about your inquiry, schedule meetings, and route you to our team. When you interact with one, we tell you that you are communicating with an AI system. You can ask to speak with a person at any time.
- Recording and transcription. Calls with our voice assistants and our team, and some video meetings, may be recorded and transcribed. We tell you before recording begins. If you do not want to be recorded, tell us, or end the call and contact us another way.
- How we use this information. We use conversation content, recordings, transcripts, and summaries to respond to you, keep accurate records, follow up on your inquiry, train our team, and improve the quality of our assistants and services.
- Providers. Our AI assistants run on third-party technology such as Twilio, Retell.ai, and the AI providers they use. These providers process conversations on our behalf under contracts that restrict how they use the information. We do not permit them to use your conversations to train their general-purpose AI models.
- No significant automated decisions. We do not use AI or other automated processing to make decisions that have legal or similarly significant effects on you. In recruiting, a person reviews applications and makes hiring decisions.
5. How we use personal information
We use personal information for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, the right-hand column shows the legal basis we rely on.
| Purpose | Examples | Legal basis (EEA, UK, Switzerland) |
|---|---|---|
| Respond to inquiries and provide services | Answering questions, preparing proposals, delivering projects, managing the client relationship | Performance of a contract or steps before a contract; legitimate interests |
| Operate and improve our Sites and AI assistants | Analytics, troubleshooting, measuring content performance, improving assistant accuracy | Legitimate interests; consent where required for cookies |
| Marketing and business development | Sending newsletters, insights, and event invitations; tailoring outreach; measuring campaigns; advertising our services on other websites and platforms | Consent where required; otherwise legitimate interests |
| Partner programs | Registering and coordinating opportunities with technology partners; managing referrals | Legitimate interests |
| Contracts, billing, and administration | Signing agreements, invoicing, collections, managing vendors | Performance of a contract; legal obligation |
| Recruiting | Evaluating applications, communicating with candidates, meeting employment law requirements | Steps before a contract; legal obligation; legitimate interests |
| Security and fraud prevention | Protecting our systems, detecting spam and abuse, verifying identity for privacy requests | Legitimate interests; legal obligation |
| Legal and compliance | Complying with law and legal process, enforcing our agreements, establishing or defending legal claims | Legal obligation; legitimate interests |
| Other purposes with your consent | Any purpose we describe when we ask for your consent, such as publishing a case study or testimonial | Consent |
We may also create de-identified or aggregated information that can no longer reasonably be linked to you, for example to benchmark website performance. We keep and use that information only in de-identified form and do not attempt to re-identify it, except as the law permits.
6. How we disclose personal information
We disclose personal information only as described below:
- Service providers. Companies that process personal information on our behalf under contracts that restrict their use of it, including providers of hosting and content delivery, CRM, marketing automation, email and collaboration, e-signature, telephony and messaging, AI assistants, analytics, business data, recruiting, accounting and payments, and IT security. A list of our key service providers is available on request.
- Technology and platform partners. If you are evaluating a platform or technology we partner with, such as BigCommerce or Salesforce, we may share your business contact information and project details with that partner to register the opportunity, coordinate a solution, or obtain partner support. Partners use this information under their own privacy policies. If you prefer that we not share your information with a partner, tell us.
- Event co-sponsors. When you register for an event or webinar we host with another company, as disclosed at registration.
- Advertising and analytics partners. As described in Section 7.
- Professional advisors. Lawyers, accountants, auditors, and insurers, who are bound by confidentiality obligations.
- Corporate transactions. In connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, subject to confidentiality protections.
- Legal and safety reasons. To comply with law, subpoenas, court orders, or lawful government requests, and to protect the rights, property, or safety of Mira, our clients, or others.
- With your consent or at your direction. For example, when you ask us to introduce you to another company, or approve a case study or testimonial.
We do not sell personal information in exchange for money. We do not share mobile phone numbers or text message opt-in data with third parties for their marketing purposes, as described in Section 8.
7. Cookies, analytics, and advertising
We use the following types of cookies and similar technologies on our Sites:
- Strictly necessary: required for the Sites to work, keep them secure, and remember your cookie preferences. These are always on.
- Functional: enable features such as our AI chat assistant, meeting scheduling, and embedded content.
- Analytics: help us understand how visitors use our Sites such as Google Analytics.
- Advertising: help us measure our campaigns and show ads about Mira on other websites and platforms such as LinkedIn and Google advertising tags.
Our cookie banner lets you accept or decline cookies, and you can change your choices at any time. Where the law requires consent, including in the EEA and the UK, we place non-essential cookies only after you consent.
Your Privacy Choices. Under California and some other U.S. state laws, allowing advertising partners to collect information through cookies for targeted advertising may be considered "selling" or "sharing" personal information. You can opt out by turning off advertising cookies in Cookie Settings, or by enabling a Global Privacy Control (GPC) signal in your browser, which we treat as an opt-out request for that browser. We display a confirmation once we have processed your opt-out.
Do Not Track. Because there is no common industry standard for legacy "Do Not Track" browser signals, our Sites do not respond to them. We do honor GPC signals as described above.
8. Marketing communications and text messages
Email. You can unsubscribe from our marketing emails at any time by using the link in any email or by contacting us. We may still send you messages about our services, contracts, or your requests.
Phone. If you ask us not to call you, we will add your number to our internal do-not-call list.
Text messages (SMS). If you give us your mobile number and opt in to receive text messages from Mira Commerce, we use your number and the content of our messages to respond to your inquiries, send service-related updates, schedule meetings, and coordinate with our team. Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time, or HELP for help. Consent to receive text messages is not a condition of purchasing any service. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, other than service providers that help us deliver our text messages, such as our messaging platform.
9. How long we keep personal information
We keep personal information only as long as we need it for the purposes described in this policy, including to provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. When we no longer need it, we delete it or de-identify it. Typical retention periods are:
| Category | Typical retention period |
|---|---|
| Prospect and marketing contact records | While we have an active relationship, and up to 5 years after your last interaction with us. We keep a record of opt-out requests so we can continue to honor them. |
| Client contact, contract, and project records | For the duration of the client relationship and up to 7 years afterward, for tax, accounting, and legal purposes |
| AI assistant conversations, call recordings, and transcripts | Up to 24 months, unless needed longer for an active matter. Summaries saved to our CRM follow the contact record periods above. |
| Website analytics and cookie data | Up to 24 months, or the lifetime of the relevant cookie as shown in Cookie Settings |
| Job applicant records | Up to 4 years after the hiring decision, or longer where the law requires |
| Privacy request records | At least 24 months |
10. How we protect personal information
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, multi-factor authentication, role-based access limited to personnel who need it, security reviews of key service providers, confidentiality commitments and security training for our team, and monitoring of our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the relevant authorities as the law requires.
11. International data transfers
Mira is based in the United States, and we process personal information in the United States. Our team members and service providers may also access or process personal information in other countries including Argentina, Uruguay, Mexico, Canada, Slovakia, Czech Republic, Poland, Ukraine, which may have data protection laws different from those where you live. When we transfer personal information from the EEA, the UK, or Switzerland, we use safeguards recognized by law, such as the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or we rely on an adequacy decision, such as the EU-U.S. Data Privacy Framework where the recipient is certified.
12. Your privacy rights and choices
12.1 Choices available to everyone
Wherever you live, you can unsubscribe from marketing emails, reply STOP to text messages, manage cookies through Cookie Settings, opt out of targeted advertising through "Your Privacy Choices" or a GPC signal, and ask us to update your contact information.
12.2 U.S. state privacy rights
Depending on your state of residence, including California, you may have the right to:
- Know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes, and the categories of third parties to whom we disclosed it;
- Correct inaccurate personal information;
- Delete personal information we collected from you, subject to legal exceptions;
- Receive a copy of your personal information in a portable format;
- Opt out of the sale or sharing of personal information and of targeted advertising;
- Opt out of profiling that produces legal or similarly significant effects (we do not engage in this profiling);
- Limit the use of sensitive personal information (we use sensitive personal information only for purposes the law permits without offering this right); and
- Not be discriminated against for exercising any of these rights.
Some state laws do not apply to information about individuals acting in a business or employment capacity. We will nevertheless consider and respond to requests from any U.S. resident.
12.3 Rights in the EEA, UK, and Switzerland
If you are in the EEA, the UK, or Switzerland, DEPLABS, Inc. is the controller of your personal information covered by this policy. You have the right to access, correct, delete, or restrict the processing of your personal information; to receive it in a portable format; to object to processing based on our legitimate interests; to object at any time to direct marketing; and to withdraw consent at any time, without affecting processing that took place before. You also have the right to lodge a complaint with your local data protection authority.
12.4 How to make a request
- Submit a request by emailing legal@miracommerce.com with the subject line "Privacy Request," or by calling us toll-free at +1 (855) 445-6560.
- Verification. To protect your information, we will verify your identity by matching information you provide with information in our records. We may ask for additional information, and we use it only for verification.
- Authorized agents. You may use an authorized agent to make a request on your behalf. We may require the agent to provide signed permission from you and may ask you to verify your identity directly with us.
- Timing. We confirm receipt of requests from U.S. residents within 10 business days and respond within 45 days, which we may extend by another 45 days where permitted, with notice to you. We respond to requests from the EEA, UK, and Switzerland within one month, which we may extend by two further months where the law permits.
- Appeals. If we decline your request, you may appeal by replying to our decision with the subject line "Privacy Appeal." We will respond within the time required by your state's law.
- Client Data. If your request concerns Client Data, we will refer you to the relevant client, as described in Section 2.
12.5 Additional information for California residents
The table below describes the categories of personal information we have collected in the past 12 months, using the categories defined in the California Consumer Privacy Act. Sources are described in Section 3, purposes in Sections 4 and 5, and retention in Section 9.
| Category | Examples | Disclosed for a business purpose to | Sold or shared |
|---|---|---|---|
| Identifiers | Name, email, phone, IP address, cookie IDs | Service providers; technology partners; professional advisors | No |
| Customer records | Name, address, phone, billing information | Service providers; professional advisors | No |
| Commercial information | Services you considered or purchased | Service providers; technology partners | No |
| Internet or network activity | Browsing and interactions on our Sites, email engagement | Service providers; advertising and analytics partners | [Shared with advertising partners] |
| Approximate geolocation | City or state inferred from IP address | Service providers | No |
| Audio and electronic information | Call recordings, voicemails, chat transcripts | Service providers | No |
| Professional or employment information | Job title, employer, work history (applicants) | Service providers; technology partners | No |
| Education information | Education history (applicants) | Service providers | No |
| Inferences | Interests and preferences inferred from your interactions | Service providers | No |
| Sensitive personal information | Work authorization, voluntary EEO information (applicants only) | Service providers | No |
We do not knowingly sell or share the personal information of consumers under 16. We do not offer financial incentives in exchange for personal information. California Civil Code Section 1798.83 permits California residents to request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.
13. Children's privacy
Our Sites and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected personal information from a child under 16, we will delete it. If you believe we have, please contact us.
14. Third-party websites and services
Our Sites may link to third-party websites, platforms, and services, including our clients' online stores and our partners' sites. Their own privacy policies govern how they handle your information, and we are not responsible for their practices. Please review their policies before you share personal information with them.
15. Changes to this policy
We review this policy at least once a year and may update it from time to time. When we do, we will change the "Last updated" date above. If we make material changes, we will provide notice through a prominent notice on our Sites or by email to clients and subscribers before the changes take effect, and we will obtain your consent where the law requires it.
16. Contact us
If you have questions about this policy or our privacy practices, contact us at:
DEPLABS, Inc., doing business as Mira Commerce
Attn: Privacy
2121 N California Blvd., Ste 290
Walnut Creek, CA 94596, USA
Email: legal@miracommerce.com
Phone: +1 (855) 445-6560 (toll-free) or +1 (415) 456-5600
If you have a disability and need this policy in an alternative format, please contact us using the details above.