Privacy Policy

This document is not final. MirraSign's privacy policy is with counsel and has not been published yet. The outline below says what it will cover so the sign-up flow can link somewhere real. It is not a binding agreement, and nothing on this page should be relied on as one.

This notice will describe what MirraSign collects about the people who use it and the people who sign through it, why, and for how long.

What the notice will cover

• What we collect. Account details (name, email, phone number), the documents you send and their recipients, and the technical records signing produces: timestamps, IP addresses, and the outcome of each identity check.
• Why we collect it. Most of it exists to make a signature provable later. An audit trail that could be quietly edited would be worth nothing, which is why some of this data cannot be changed or removed on request.
• Identity verification. What happens to a one-time code, and what happens to a photo of an ID document, how long it is kept and who can see it.
• Where data is stored. MirraSign stores personal data in Tanzania. Any processor outside it is named, along with what it handles.
• Your rights. Access, correction, and deletion under the Personal Data Protection Act, 2022, including where an evidence record limits them and why.
• Retention. How long each kind of record is kept, and what triggers its deletion.
• Contact. How to reach the person accountable for this, and how to complain to the Commission.

Questions before this is published

Write to legal@mirrasign.com. If you need the final text before you commit to anything, say so and we will send it when it is ready rather than asking you to agree to a placeholder.