Privacy Policy

Who we are

Mirsad is provided by UPT House, a company registered in Jordan and based in Amman (“we”, “us”).

Send any question or request about personal data to idiab@upthouse.com.

Version 1. Effective date: 12 October 2026.

Data we hold

• Your name and email address.
• Your password, stored only as a secure hash that can't be read back.
• Your Google account ID, if you sign in with Google.
• Your language preference.
• The workspaces you belong to and your role in each.
• Sign-in sessions, with IP address and browser.
• An activity log of actions in each workspace: who did what, when, and from which IP address.
• What you enter: company profile, notes, documents, website addresses and encrypted website sign-ins.
• The date and version of the terms you agreed to.
• Requests you make about your data.

Why we use it

• To provide Mirsad and its features.
• To keep accounts and workspaces secure.
• To send service emails: sign-in links, invitations and reminders.
• To bill you and keep financial records.
• To comply with the law.
• To improve Mirsad.

Legal bases

• Contract: to provide Mirsad under our Terms of Service.
• Consent: including your consent to store and process data outside your country, given when you agree to the terms.
• Legitimate interests: to keep Mirsad secure and prevent fraud.
• Legal obligation: for example, tax records.

What we never do

• We don't sell personal data.
• We don't show advertising.
• We don't track you, and we use no analytics or advertising cookies.

Mirsad's AI and your data

Mirsad's AI work is done by Anthropic, PBC, in the United States. It receives your company profile, the notices, the text of pages Mirsad reads and search requests.

It never receives passwords or website sign-ins. Under its commercial terms, Anthropic does not use this data to train its models and keeps it only for a limited time.

Where your data is

Our servers are in the European Union, in Frankfurt, Germany.

• Google Cloud: the application, file storage and background jobs (Frankfurt, Germany).
• Neon: the database, hosted on Amazon Web Services (Frankfurt, Germany).
• Resend: sending emails (United States).
• Anthropic: AI work (United States).
• Google: “Continue with Google” sign-in.

Details are on our Service Providers page.

Data sent abroad

Your data is stored and processed in the European Union and the United States, which may be outside your country.

Jordan's Personal Data Protection Law (No. 24 of 2023) and the data protection laws of Saudi Arabia and the UAE require safeguards or consent for this. You give consent when you agree to the terms, and we use providers with contractual safeguards.

The European Union protects personal data at least as well as Jordan does.

Who can see it

• Members of your workspace see its data according to their role.
• Mirsad's staff (the platform administrator) can see account and workspace data to run the service, help you and fix problems. Changes they make inside your workspace (“support mode”) appear in its activity log.
• Our service providers process data on our behalf.
• Authorities, when the law requires it.

Workspaces are kept apart by the database itself: each company's data is visible only inside that company's workspace.

Security

• Encryption in transit (HTTPS) and at rest.
• Website sign-ins encrypted with a key that only Mirsad's background worker holds.
• Access is logged.
• Backups.

How long we keep it

• Account and workspace data: while the account exists.
• After a deletion request: deleted within 30 days, and removed from backups within 90 days.
• Invoices and payment records: as long as tax law requires.
• Activity logs: for the life of the workspace.

Your rights

You have the right to:

• get a copy of your data;
• have it corrected;
• have it deleted;
• object to how we use it;
• restrict how we use it;
• withdraw your consent. This may mean we can no longer provide Mirsad to you;
• complain to the data protection authority in your country. In Jordan, this is the Personal Data Protection Council under the Ministry of Digital Economy and Entrepreneurship.

On your account page, use “Get a copy of my data” or “Delete my account”, or email idiab@upthouse.com. We answer within 30 days.

Children

Mirsad is not for anyone under 18.

Changes to this policy

We will tell you about changes in Mirsad and by email. If a change is material, we will ask you to agree again.