Privacy Policy

SANMIRAA

Technologies Pvt. Ltd.

PRIVACY POLICY

ПОЛИТИКА КОНФИДЕНЦИАЛЬНОСТИ

Last updated / Последнее обновление: June 2026

ENGLISH VERSION

Sanmiraa Technologies Pvt. Ltd. (“Sanmiraa”, “we”, “us”, “our”) is committed to protecting the personal data of every person who uses our Platform. This Privacy Policy explains what data we collect, why we collect it, how it is used, stored, and protected, and what rights you have over your data.

This Policy applies to all users of the Sanmiraa digital ecosystem, including clients, designers, visualizers, suppliers, and visitors, across all platforms: web application, mobile application, and any other digital products operated under the Sanmiraa brand.

By accessing or using the Platform, you confirm that you have read and understood this Privacy Policy.

1. Who We Are

Legal name: Sanmiraa Group.

Contact email: sanmiraa2026@gmail.com

Operating markets: Russian Federation, Republic of India, and international markets.

2. What Data We Collect

2.1 Registration and Identity Data

Full name and username

Email address and phone number

Date of birth (where required for age verification)

Identity documents — passport, national ID, or business registration number — collected during the verification process for designers and suppliers

Profile photo (optional)

2.2 Transaction and Project Data

Order history, project scope, and delivery status

Payment information — transaction amounts, payment method type (we do not store full card details; payments are processed by certified third-party processors)

Escrow records and dispute history

Project files, design briefs, and uploaded room photos

Messages exchanged between clients and designers within the Platform

2.3 Usage and Technical Data

Pages visited, features used, and time spent on the Platform

AI interaction logs — prompts submitted, designs generated

IP address, browser type, operating system, and device identifiers

Cookies and similar tracking technologies (see Section 8)

2.4 Data You Provide Voluntarily

Portfolio materials, project descriptions, and work samples uploaded by designers

Reviews and ratings submitted about other users

Support requests and feedback submitted to our team

3. How We Use Your Data

We process personal data only for specific, legitimate purposes:

Purpose

Legal Basis

Platform operation and account management

Performance of contract (Terms of Use)

Payment processing and escrow management

Performance of contract; legal obligation

Identity verification and anti-fraud

Legal obligation; legitimate interest

Improving AI systems and Platform features

Legitimate interest (anonymized/aggregated data only)

Sending transactional communications (order updates, confirmations)

Performance of contract

Sending marketing communications

Consent (you may withdraw at any time)

Dispute resolution and arbitration

Legitimate interest; legal obligation

Compliance with applicable laws

Legal obligation

4. How We Share Your Data

We do not sell your personal data. We do not share it with advertisers. Data may be disclosed only in the following circumstances:

4.1 Within the Platform

Client data (first name, project brief, and contact details) is shared with the designer or supplier assigned to a project, for the purpose of fulfilling that project.

Designer profiles and portfolio data are visible to clients as part of the public catalog.

4.2 Service Providers (Data Processors)

We work with trusted third-party providers who process data on our behalf, under strict data processing agreements:

Cloud infrastructure and hosting providers (AWS, Google Cloud, or Microsoft Azure)

Payment processors — for transaction processing only; card data is never stored by Sanmiraa

Communication service providers — for transactional email and SMS delivery

Analytics providers — for aggregated, anonymized usage analytics

4.3 Legal Authorities

We may disclose data to government authorities, courts, or law enforcement bodies when required to do so by applicable law, regulatory mandate, or valid legal process.

5. International Data Transfers

Sanmiraa operates across multiple jurisdictions. Your data may be transferred to and processed in countries other than your country of residence, including India, the Russian Federation, and countries where our cloud infrastructure providers maintain data centers.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent protections required by local law.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, and resolve disputes:

Account data — retained for the duration of your account and for 3 years after account deletion, to comply with financial record-keeping obligations.

Transaction and payment records — retained for 7 years in accordance with applicable accounting and tax law.

Project files and communications — retained for 2 years after project completion, unless otherwise agreed.

AI interaction logs — retained in anonymized, aggregated form indefinitely for model improvement; identifiable logs deleted after 12 months.

Marketing data — retained until you withdraw consent or request deletion.

7. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Rectification: You may request correction of inaccurate or incomplete data.

Right to Erasure: You may request deletion of your data, subject to legal retention obligations.

Right to Restriction: You may request that we limit the processing of your data in certain circumstances.

Right to Data Portability: You may request your data in a structured, machine-readable format.

Right to Object: You may object to processing based on legitimate interest, including profiling.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

To exercise any of these rights, contact us at: sanmiraa2026@gmail.com. We will respond within 30 days.

8. Cookies

The Sanmiraa Platform uses cookies and similar technologies to ensure functionality, measure performance, and improve your experience.

We use:

Strictly necessary cookies — required for the Platform to function (authentication, session management, escrow security).

Analytical cookies — to understand how users interact with the Platform (anonymized usage statistics).

Functional cookies — to remember your preferences (language, currency, display settings).

Marketing cookies — only with your explicit consent, to show relevant content.

You may manage cookie preferences through the cookie settings panel available on the Platform or through your browser settings. A full Cookie Policy is available separately on the Platform.

9. Data Security

We apply industry-standard technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure:

All data in transit is encrypted using HTTPS/TLS.

Data at rest is encrypted using AES-256 or equivalent.

Access to personal data is restricted to authorized personnel on a need-to-know basis.

Payment data is processed through PCI-DSS-compliant payment processors.

We conduct regular security audits and penetration tests.

An anti-fraud system monitors for suspicious activity across all transactions.

Despite these measures, no system can guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities within the timeframes required by applicable law.

10. Minors

The Sanmiraa Platform is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us immediately at legal@sanmiraa.com and we will take prompt action to delete such data.

11. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be published on this page with a revised effective date. For material changes, we will notify registered users by email or via a prominent notice on the Platform.

Continued use of the Platform after any update constitutes your acceptance of the revised Policy.

12. Contact

For all privacy-related questions, requests, or complaints:

Email: sanmiraa2026@gmail.com

Legal entity: Sanmiraa Group.