Trust & Safety
Learn about our privacy, security, and compliance practices, and how Miracal Chat keeps your data secure at every step of your conversational commerce journey.
Data privacy & security by design
Privacy in Transit
Every chat on Miracal Chat — between Shoppers and Sellers — is transmitted over modern encrypted connections (HTTPS / TLS 1.2+ & TLS 1.3).
This protects your messages, product inquiries, order requests, and payment tokens in transit between your device and our cloud servers, preventing eavesdropping and packet interception.
Defense-in-Depth Security
The Miracal Chat platform is protected by a structured defense-in-depth approach — layering multiple safeguards so that a single point of failure does not compromise customer data.
- Encrypted data transmission: Robust ciphers guarding all API routes and socket channels.
- Strict internal access controls: Role-based access limiting who can view order records.
- Continuous anomaly monitoring: Automated rate-limiting and detection for suspicious activity.
Certifications & Standards Pathway
We believe in honest, transparent disclosures about our technical and security maturity:
“We are actively working toward formal SOC 2 and ISO 27001 compliance frameworks as we scale our engineering and infrastructure program. In the meantime, we strictly enforce industry-standard security best practices, including credential hashing, database isolation, automated patch management, and continuous defense-in-depth monitoring.”
PCI-DSS Delegated Compliance
All credit/debit card numbers are handled directly by PCI-compliant payment gateways. No raw card numbers touch our servers.
Vulnerability Assessments
Regular automated dependency checks and internal code reviews to catch configuration regressions early.
Principle of Least Privilege
Engineers and operational staff have only minimal required system permissions governed by scoped tokens.
Compliance & Data Governance
Miracal Chat takes regulatory compliance seriously and operates in strict alignment with applicable data protection frameworks, including the Indian Information Technology Rules (2021) and the Digital Personal Data Protection (DPDP) Act, 2023:
Published & Transparent Privacy Policy
We maintain a clear, publicly available Privacy Policy explaining exactly what information we collect from Shoppers and Sellers, how we use it, and how you can exercise your statutory rights.
Dedicated Contact Channel for Data Inquiries
We maintain a responsive contact point (support@miracal.in) for customer data questions, access requests, and record correction or deletion.
Purpose-Bound Third-Party Sharing
We only share data with certified third-party vendors (PCI-compliant payment gateways and physical delivery partners) to the extent strictly necessary to fulfill your orders.
Additional Resources & Quick Navigation
Quick links to our policy documents, technical architecture, and contact channels:
Privacy Policy
Complete documentation of our data collection, usage, and retention terms.
Business Overview
High-speed storefront features, catalog ordering, and QR commerce architecture.
Enterprise Features
Automated business messaging, customer service workflows, and catalog scaling.
Contact & Data Requests
Submit data access requests, corrections, or general security inquiries.