Privacy Policy

1. Who we are

Misir ("we") provides a decision-readiness tool with an optional browser extension. Data controller: [legal entity, address]. EU/EEA representative (GDPR Art 27): [name, address]. Data Protection Officer: [contact]. Contact for privacy requests: [privacy@…].

2. What we collect

• Account data: your email and identifier (via Clerk).
• Content you choose to capture: with your explicit consent, the extension saves readable text from pages and/or your AI-chat conversations that match your spaces. Capture is off by default, per-purpose, and can be withdrawn at any time. Obvious direct identifiers are redacted on your device before upload.
• Usage signals: engagement metrics (e.g. dwell/scroll) on captured items.
• Derived data: AI-generated insights, gaps, and nudges.

We do not intentionally collect special-category data or the personal data of third parties. Please do not capture pages or conversations containing others' sensitive information.

3. Why we process it (lawful bases)

We process account data to provide the service (contract). All content capture and related profiling is based on your explicit, opt-in consent (GDPR Art 6(1)(a)/Art 9(2)(a); ePrivacy Art 5(3); CCPA opt-in for sensitive personal information; Bangladesh PDPO explicit consent). You may withdraw consent at any time in Settings without affecting prior processing.

4. Sharing & sub-processors

We use vetted processors under data-processing agreements: Clerk(authentication), Supabase (database/hosting), and Groq(AI inference for synthesis). We do not sell your personal information.

5. International transfers

Data may be processed in the United States. Where required, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses with a transfer-impact assessment. Bangladesh transfers follow the PDPO cross-border regime. EU/EEA hosting options: [region].

6. Retention

Captured content and derived data are retained for up to [400] daysand then purged, unless you delete them sooner. Account data is kept until you delete your account.

7. Your rights

Depending on where you live (EU/EEA, UK, US states, Bangladesh) you can access, correct, export, and delete your data, withdraw consent, and object to or restrict processing. Use Settings → Privacy & data to export or delete your account, or contact us. California residents: see Do Not Sell or Share My Personal Information. We honor the Global Privacy Control (GPC) signal.

8. Children

Misir is not directed to children. You must be at least 18 to use it. We do not knowingly collect data from minors; contact us to report any such collection.

9. Automated processing

Insights, gaps, and nudges are generated by AI to assist you. They are advisory and do not produce legal or similarly significant effects without your involvement.

10. Changes & contact

We will notify you of material changes and ask for renewed consent where required. Questions or complaints: [privacy@…]. You may also lodge a complaint with your local supervisory authority.