Privacy Policy

Miridar (operated by MiriDar HR + IT Agency SRL) is the controller of personal data collected through this website and the Miridar CRM application.

• Office: Strada Mihai Viteazu 4, Chișinău, Republic of Moldova
• GDPR contact email: office@miridar.com
• Phone: +373 683 09049

We collect the data needed to provide our service and communicate with you:

• Contact data (name, email, phone, company) — when you contact us through the website form or request a demo.
• Usage data (IP address, browser type, pages visited, time on page) — automatically collected via Google Analytics 4 for aggregated analysis.
• Data entered in the app (contacts, deals, contracts, files) — if you are a Miridar CRM customer. This data belongs to the customer, not us — we process it only on your behalf under the DPA (see /legal/dpa).
• Cookies — see section 7.

We process your data under the following legal bases (Art. 6 GDPR):

• Consent — for newsletters and non-essential cookies; you can withdraw it at any time.
• Performance of a contract — for data collected during a demo or subscription.
• Legitimate interest — for security, fraud prevention, aggregated analytics.
• Legal obligation — for keeping fiscal records under Moldovan and European law.

Under GDPR and Law 133/2011, you have the following rights:

• Access — find out what data we hold about you.
• Rectification — correct inaccurate data.
• Erasure ('right to be forgotten') — request data deletion (except for legal obligations).
• Restriction — temporarily limit processing.
• Portability — receive your data in a structured format (Excel, CSV, JSON) and transfer it to another controller.
• Objection — object to processing for direct marketing or legitimate interest.
• Complaint — to the National Center for Personal Data Protection (CNPDCP) of Moldova or your equivalent EU authority.

To exercise any right, email office@miridar.com. We respond within 30 days.

Hosting location: AWS Frankfurt servers (European Union).

Backup: daily, 30-day retention.

Encryption: TLS 1.2+ in transit, AES-256 at rest.

Access controls: authorized personnel only, audit log active for all sensitive data access.

Self-hosted: if you choose the Self-hosted plan, data stays on your infrastructure; Miridar has no access.

• Leads and contact forms: 24 months from last interaction, then anonymized.
• Active customer accounts: throughout subscription + 90 days (for final export).
• Fiscal records: 10 years per Moldovan/Romanian Tax Code.
• Aggregated analytics: indefinitely, but without individual identification.

We use only essential cookies for site functionality plus, with your consent, Google Analytics 4 for aggregated stats. See the cookie banner on your first visit — you can withdraw consent any time from the footer.

We do not use third-party advertising cookies (no Facebook Pixel, no Google Ads retargeting on this site).

Data stays in the EU (AWS Frankfurt hosting). If you use BYO integrations (Bring Your Own AI or Mailjet), data leaves us only towards the providers you configure — on your account, under that provider's own policy (OpenAI, Anthropic, Mailjet, etc.).

When we update this document, we change the 'Last updated' date and, for significant changes, notify you by email (if you are a customer) or via a site banner.