Privacy
Privacy Policy
Last updated: October 7, 2026
Who we are
This website is run by Mihan AI, operated by Alireza Bahrami (“Mihan AI”, “we”). For any privacy question, email info@mihanai.com.
What we collect
- Contact form: your name, work email and message, plus your company, website and budget if you add them.
- Booking page: your name, email, the time you choose, your time zone, and your answers to the booking questions.
- Website analytics: anonymous, aggregated visit statistics with no cookies and no personal profiles (see “Cookies and analytics”).
- Emails: anything you send us by email.
Why we use it, and our legal basis (GDPR / UK GDPR)
- To reply to you and to prepare a proposal you asked for. This is a step you requested before a contract (Art. 6(1)(b)).
- To deliver a project after you become a client. This is performance of a contract (Art. 6(1)(b)).
- To understand how the site is used, in aggregate, and to keep it secure. This is our legitimate interest (Art. 6(1)(f)).
- To meet accounting and tax obligations. This is a legal obligation (Art. 6(1)(c)).
We never sell your data and never use it for advertising.
Who processes it for us
We use a small number of service providers, only to run our business: Google Workspace (email and calendar), Vercel (hosting for our booking page and client system), Supabase (database), Telegram (internal notifications), Anthropic (AI processing) and our web hosting providers. Each one processes data only on our instructions.
International transfers
Some providers process data outside your country. Where required, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep it
- Enquiries that don't become projects: deleted 12 months after our last contact.
- Client records: kept for the length of the contract, plus as long as accounting law requires.
- Analytics data: aggregated only.
Client data in our builds
When we build or run automations for a client, we process their customers' data only on that client's instructions, as a processor. We sign a Data Processing Agreement (DPA) on request.
Your rights
You can ask to see, correct, delete or export your data, to restrict or object to its use, or to withdraw consent. Email info@mihanai.com and we will reply within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.
Cookies and analytics
This site uses no advertising trackers and no analytics cookies. Our analytics (Umami, self-hosted on our own server) counts visits without cookies or personal identifiers.
Security
Access to personal data is limited to the people who need it. Our automations get only the access they need.
Changes
If we change this policy, we will update the date at the top.