Privacy policy.

1. Who we are

Mijra is a Customer Conversation Operating System built and operated by Cornerz Hub (“we”, “us”). It brings customer conversations, customer context, AI and automation together so every conversation moves toward a business outcome.

Cornerz Hub is responsible for the personal data described in this policy where it acts as controller. Its legal name is Cornerz Hub Ltd. and its address is 3 Makram Ebeid St, Nasr City, Cairo, Egypt. [Company registration number: to be confirmed.]

2. Definitions

Personal data: any information about an identified or identifiable person, such as a name, an email address, a phone number, an identification number, location data or an online identifier.

Processing: anything done with personal data, such as collecting, recording, storing, changing, using, sharing, restricting or deleting it.

Usage data: information collected automatically when you use the site, such as IP address, browser and operating system, the pages you visit, the time of each request and the country you connect from.

User: anyone who visits the website or uses Mijra.

Data controller: the person or organisation that decides why and how personal data is processed. Unless this policy says otherwise, that is Cornerz Hub.

Service: Mijra, as described in our terms and on this site.

3. Scope of this policy

This policy covers the Mijra website, the Mijra app and mobile app, our store apps for Salla, Zid and Shopify, and our sales, support and marketing contact with you.

It does not cover the websites and services of third parties you connect, such as Meta, your store platform or your payment and shipping providers. Their own privacy policies apply.

4. Our two roles

We are the controller for the data we use to run our own business: website visitors, trial and account holders, team members you invite, billing records and marketing.

For the personal data of your own customers, imported from connected stores or sent through the service, you are the controller and Cornerz Hub is a processor acting on your behalf and under your instructions. Our data processing agreement governs that processing.

You are responsible for the lawfulness of collecting your customers’ data and for obtaining valid consent to contact them through the service.

5. Information you give us

Account data: your name, email, phone number, password, company or store name, country and preferred language when you sign up or install one of our store apps.

Workspace data: the channels you connect, team members you invite, roles and departments, automations, AI agent settings, knowledge you upload and Vertical Pack choices.

Communications: what you send us when you contact sales or support, chat with us on the website, answer a survey or apply to our partner programme. The contact form asks for your name, work email, phone number, industry and store or brand name.

6. Customer data we process for you

When you connect channels, we process the conversations that flow through them: messages, images, voice notes and files, contact names, phone numbers, social media handles and conversation history.

When you connect your store (Salla, Zid, Shopify or WooCommerce) and payment and shipping tools, we import the order, customer, cart, payment status and shipment data needed to run the features you switch on.

We process this data only to provide the service to you. We do not sell or rent your message content or contacts, and ownership of conversation content remains entirely yours.

7. Information collected automatically

When you use the website or the app, we collect technical data such as IP address, device and browser type, operating system, pages viewed, actions taken, and error and security logs.

On the website, optional cookies are used only with your consent. Our cookies policy lists the categories and explains how to change your choices.

This includes the date and time of each visit, your browser type and settings, your operating system, the page you came from, the amount of data transferred and your IP address. Server log files are deleted after 30 days.

8. Payment information

Subscriptions bought on our website are paid through a payment processor. Our payment processor is Stripe. [Other processors for local currencies: to be confirmed.] Card details are handled by the processor and are not stored by Mijra; we keep billing records such as plan, amounts, invoices and payment status.

Subscriptions bought through the Salla, Zid or Shopify app stores are billed by that platform, which shares with us only what it needs to confirm your plan.

9. Information from other sources

Store platforms, Meta and other services you connect send us data when you authorise the connection, under the permissions you approve.

Advertising and analytics partners tell us how our campaigns perform, and partners or resellers may refer you to us. Where we receive business contact details from public sources or events, we use them only for relevant business contact.

10. How we use information and our lawful bases

To provide the service under our contract with you: creating your account, connecting channels and stores, showing orders beside conversations, creating orders, sending payment links, shipping updates and abandoned cart messages, and running automations and AI agents.

For our legitimate interests: securing the service, preventing fraud and misuse, fixing problems, understanding usage in aggregate to improve the product, and sending service and product information relevant to your account.

With your consent: optional website cookies, and marketing where the law requires consent. You can withdraw consent at any time.

To meet legal obligations: keeping tax and accounting records, and responding to lawful requests from authorities.

11. AI features

Mijra includes AI features such as reply drafts, conversation summaries and AI agents. To run them, the relevant conversation content, customer context and the knowledge you upload are sent to an AI model provider to generate a response. [AI model providers: to be confirmed.]

We use customer conversation data to run AI features for your workspace only. We do not use it to train third-party foundation models, and we do not use one customer’s data to answer another customer’s conversations. [No-training terms with each AI model provider: to be confirmed.]

You choose what AI agents may do, and conversations hand off to your team when an agent is unsure. AI output can be wrong, so you should review it where accuracy matters.

12. WhatsApp, Instagram and Messenger

Mijra connects to WhatsApp only through the official WhatsApp Business API via a Meta partner, and to Instagram and Messenger through Meta’s official APIs.

Message data on these channels is also processed by Meta under its own terms and privacy policies, which you accept directly with Meta. Mijra has no control over Meta’s processing.

13. Who we share data with

Service providers that help us run the platform, such as hosting and infrastructure, AI model providers, email delivery, customer support and analytics. They act on our instructions under written data protection terms. Our current sub-processors are Amazon Web Services (cloud infrastructure), Google Cloud Platform (analytics and storage), Stripe (payment processing) and SendGrid (email delivery). [Locations of each sub-processor and AI model providers: to be confirmed.]

Services you choose to connect, such as messaging channels, store platforms (Salla, Zid, Shopify, WooCommerce), payment providers (Moyasar, Tap, Paymob, Stripe) and shipping providers (Aramex, Bosta, Mylerz, J&T), to carry out the actions you request.

Advertising and analytics partners, such as Google and Meta, for website visitors who consent to those cookies.

Authorities or other parties where the law requires it, to protect our rights and users, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.

14. International transfers

We and our service providers may process data in countries other than yours. The service is hosted on Amazon Web Services. [Hosting region: to be confirmed.]

Where the law restricts transfers, we use a lawful mechanism, such as the conditions set by Egyptian or Saudi data protection law, or the EU Standard Contractual Clauses for data from the EU, EEA or UK.

15. Data retention

We keep account and workspace data for as long as your trial or subscription is active. Customer data you process in the service is kept until you delete it or your account ends.

When your account ends, we keep your account data for 90 days, during which you can export it, and then delete it from the active service. Backups are deleted on the normal backup cycle [backup retention period: to be confirmed].

Transaction records are kept for 7 years for tax and accounting purposes. Marketing data is kept until you withdraw consent. Support requests are kept for 3 years.

We keep invoices and accounting records for as long as tax law requires, and security logs for a limited period. Website cookies last as described in the cookies policy.

16. Data security

We use access controls, separate workspaces, role-based permissions and official channel APIs to protect your data. Our security page describes these practices.

We do not claim certification to a security standard or end-to-end encryption, because we publish only claims we can support with documents. No internet-based system can guarantee absolute security, and you are responsible for keeping your login details safe.

17. Your rights

Depending on where you live, you can ask to access, correct or delete your personal data, restrict or object to its use, receive a copy in a portable format, and withdraw consent at any time.

To exercise these rights, contact us at hello@mijra.io. We may ask you to confirm your identity, and we respond within the time the applicable law requires. If your data was sent to us by a merchant that uses Mijra, we will pass your request to that merchant.

Where we rely on your consent, you can withdraw it at any time; this does not affect processing that happened before.

You may also complain to the data protection authority in your country.

18. Rights by region

Egypt: we process personal data in line with the Personal Data Protection Law (Law No. 151 of 2020) and its executive regulations, including your rights to know, access, correct and delete your data.

Saudi Arabia, the UAE and Qatar: we process personal data in line with the Saudi Personal Data Protection Law, the UAE Personal Data Protection Law and Qatar’s personal data privacy law, as they apply to us.

EU, EEA and UK: you have the rights set out in the GDPR and UK GDPR. Our GDPR page explains them and how we handle transfers.

United States: residents of states with consumer privacy laws, such as California, can ask to know, delete and correct their data. We do not sell personal information for money. Advertising cookies may count as “sharing” under some state laws; you can opt out by switching off Targeted advertising and Data sharing with Google in the cookie settings. We will not discriminate against you for using these rights.

19. Children

Mijra is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

20. Marketing communications

We may send you product updates, tips and offers related to your account. You can unsubscribe at any time with the link in each email or by contacting us.

Service messages, such as security notices, billing receipts and changes to these policies, are part of the service and are sent even if you unsubscribe from marketing.

21. Automated decision-making

Cornerz Hub does not make decisions about you that have legal or similarly significant effects based solely on automated processing.

Merchants can set up automations and AI agents that reply to their customers. Those merchants decide how the agents behave and are responsible for them, and conversations hand off to a person when an agent is unsure.

22. Changes to this policy

We may update this policy from time to time. Changes are posted on this page with a new date. If a change materially affects how we use your data, we will tell account holders by email or in the product before it takes effect.

23. Data protection contact

For privacy questions or requests, email hello@mijra.io with “Privacy” in the subject line. We have appointed a Data Protection Officer, who can be reached at dpo@mijra.io. You can also write to privacy@mijra.io, or to Cornerz Hub at 3 Makram Ebeid St, Nasr City, Cairo, Egypt.

24. Contact

Questions about this document can be sent to hello@mijra.io or through the contact page. For privacy, cookies and data protection matters, write to privacy@mijra.io.

Cornerz Hub (Cornerz Hub Ltd.), 3 Makram Ebeid St, Nasr City, Cairo, Egypt.