Privacy Policy

At Miran World, protecting your personal data is our priority.

This Privacy Policy explains how Miran World, operating under the brand name Kactus AI (“Application”), collects, uses, and protects your personal data when you use our services. This policy aligns with India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and, where applicable, the General Data Protection Regulation (GDPR) for users in the European Union.

Who is the Data Controller?

The data controller is Miran World, a company incorporated under the laws of India (“Kactus AI”, which expressions shall be interchangeably used and shall mean and include its successors, liquidators, receivers, and permitted assigns) with registered address: A-120 Freedom Fighter Enclave, Neb Sarai, New Delhi – 110068, India (hereinafter “Us” or “We”).

What Personal Data We Collect

Personal data means information that identifies an individual directly or indirectly, in particular by reference to an identifier such as a name.

We may collect the following personal data:
• Identification data (e.g., full name, email, and postal addresses)
• Login data (e.g., logs, IP address)
• Economic and financial details (e.g., bank details)
• Images, texts, and photographs

The user acknowledges and accepts that content of a personal or confidential nature is downloaded, stored, and processed under their sole responsibility. The company shall not be held liable in any way in this respect.

Legal Basis, Purpose, and Retention Period

We use your data to deliver services offered through our Application, such as analyzing and processing images, transferring them between devices, and storing photos in our cloud to enhance our services.

• When you create an account: This is part of fulfilling a contract that you are a party to.
• When you don’t have an account: It is in our legitimate interest to offer you our services.

Personal data is kept as long as your account exists. If you do not create an account, images, photographs, and texts are stored for two years, and personal data may be archived for evidentiary purposes for five years.

We also use your data to manage orders and customer relationships. Some transaction records (not including your bank details) are kept for evidence purposes for five years. Your credit card data is maintained by our payment service provider; CVV2 values are never stored.

Customer and prospect contact data are retained for up to three years from the last interaction, unless you withdraw consent earlier.

Who Will Have Access to Your Data

Access to your personal data is limited to:
• Staff of our company
• Our processors: web hosting, cloud, payment, and mailing providers
• Our payment partners, who carry out their own processing as described in their privacy policy
• Public and private organizations, only when required to comply with legal obligations

International Data Transfers

Your personal data is hosted on Digital Ocean servers in Bangalore, India. As part of our operations, data may be transferred outside India. Such transfers are secured through the following safeguards:
• Transfers to countries recognized as ensuring adequate protection under GDPR Article 45
• Transfers under appropriate safeguards per GDPR Article 46, such as Standard Contractual Clauses, Binding Corporate Rules, or approved certification mechanisms
• Any other mechanisms described in Chapter V of the GDPR

Your Rights

Under the DPDP Act and the GDPR, you have the following rights:
• Right to be informed
• Right of access
• Right to rectification
• Right to restriction of processing
• Right to erasure (Right to be forgotten)
• Right to withdraw consent
• Right to data portability
• Right to object
• Right to file a complaint with a competent authority
• Right to define instructions for the handling of your data after your death

You can exercise these rights by writing to us at hello@miran.world. We may ask for additional information to verify your identity before fulfilling your request.

Security Measures

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes encryption, limited access control, secure storage, and periodic security audits.

Cookies

To optimize our web presence, we use cookies. These cookies help us improve access to our website and understand user interests. We use cookies for:
• Conducting research and diagnostics to improve content, products, and services
• Preventing fraudulent activity
• Improving security

You can disable cookies in your browser settings at any time.

Contact Information

For any data privacy matters, please contact us at:
Email: hello@miran.world
Address: A-120 Freedom Fighter Enclave, Neb Sarai, New Delhi – 110068, India

Modifications

We reserve the right to update this Privacy Policy at any time to align with regulatory, legal, editorial, or technical developments. Changes become effective as of the date the updated policy is enacted. We encourage you to review the most recent version regularly. Significant alterations will be communicated to you.


Effective Date: 13 November 2025