Privacy Policy

1. Who We Are

Miurata Solutions LLC ("Miurata", "we", "our") is a limited liability company organized under the laws of the State of Florida, USA. This Privacy Policy describes how we collect, use, and protect information when you visit miurata.com or interact with our software platforms — including RemindLedger™, CentroPago™, Acreditto™, Trust-On-Payment™, ContractTrigger™, and our facilitator services Capital-On-Demand™ and Pay-On-Trigger™.

Each individual product may publish a product-specific privacy notice that supplements this corporate policy where applicable.

Contact: [email protected]

2. Information We Collect

2.1 Information you provide

• Account data: Name, email, company, role, and password (hashed with bcrypt)
• Business data: Customer or supplier names, contacts, invoice amounts, and payment records you enter into our platforms
• Payment method: Credit/debit card data processed by our payment processor (Stripe). We never store full card numbers.
• Communications: Inquiries, support tickets, and feedback you send us

2.2 Information collected automatically

• Usage data: Pages visited, features used, timestamps, and actions taken within our applications
• Device and browser data: IP address, browser type, operating system, and device identifiers
• Log data: Server logs for security and troubleshooting (retained 90 days)

2.3 Bank connection and payment notification data

When you authorize bank connectivity in our payment reconciliation products (RemindLedger™, CentroPago™), we may collect bank transaction data through verified read-only bank connections, payment notification emails you forward, or bank statement files you upload. We may collect:

• Payment amount, date, and sender/reference number
• ACH trace numbers, Zelle transaction IDs, or wire reference numbers
• Account metadata, transaction descriptions, and provider-issued tokens needed to maintain the read-only connection

We do not initiate transfers, store online banking passwords, or access unrelated inbox content.

3. How We Use Your Information

• To provide, maintain, and improve our services
• To match incoming payment notifications to open invoices in your account
• To send payment reminders to your customers on your behalf, only when you instruct us to do so
• To generate financial reports, aging summaries, and cash flow forecasts based on your data
• For Capital-On-Demand™ and Pay-On-Trigger™: with your explicit consent, to share specific data with licensed lender partners who may offer financing to you. Lenders own all credit decisions, underwriting, and disbursement.
• To send service-related notifications and product updates
• To detect fraud, abuse, and security incidents
• To comply with legal obligations

We do not use your data to train AI/ML models sold to third parties. We may use aggregate, anonymized data to improve our own algorithms.

4. Information Sharing

We share your information only in the following circumstances:

• Service providers: Cloud hosting, email delivery, payment processing. These providers are contractually bound to protect your data and may only process it as instructed.
• Bank connectivity providers: When you authorize a bank connection, approved providers process bank account metadata, access tokens, and transaction data solely to maintain the read-only connection.
• Licensed lender partners (Capital-On-Demand™ / Pay-On-Trigger™ only): Only with your explicit consent. Miurata is a facilitator only and is not a party to any financing agreement; lenders own all credit decisions and disbursement.
• Legal requirements: Subpoena, court order, or to protect rights, property, or safety.
• Business transfers: In a merger, acquisition, or sale of assets. We will notify you before your data is transferred.

We do not sell, rent, or share your personal data with advertisers, data brokers, or marketing firms.

5. Data Retention

• Account and business data: retained for 30 days after account cancellation, then purged
• Financial transaction records: retained up to 7 years to comply with accounting and tax regulations
• Backup snapshots: purged within 90 days of deletion

6. Security

We implement industry-standard security measures including TLS 1.3 for data in transit, AES-256 encryption for sensitive data at rest, bcrypt password hashing, role-based access controls, and regular security audits. However, no method of transmission over the internet or electronic storage is 100% secure.

7. Your Rights

All Users

• Access: Request a copy of personal data we hold about you
• Correction: Correct inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data, subject to legal retention requirements
• Portability: Export your data in a machine-readable format (JSON)
• Opt-out of marketing: Unsubscribe at any time using the unsubscribe link in marketing emails

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights:

• Right to Know what personal information we collect
• Right to Delete your personal information, subject to exceptions
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising
• Right to Non-Discrimination for exercising these rights
• Right to Correct inaccurate personal information
• Right to Limit Use of Sensitive Personal Information

To exercise your rights, email [email protected] with subject "Privacy Request — [Right]". We respond within 45 days.

Canadian Residents (PIPEDA)

You have the right to access your personal information and challenge its accuracy. Our Privacy Officer can be reached at [email protected].

EU / EEA / UK Residents (GDPR / UK GDPR)

Lawful basis for processing is consent or legitimate interest. You have rights of access, rectification, erasure, restriction, portability, and objection. You may lodge complaints with your supervisory authority.

8. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: Required for authentication and session management. Cannot be disabled.
• Analytics cookies: Used to understand how users interact with our services (anonymized). You may opt out.

We do not use advertising or tracking cookies. We do not use third-party ad networks.

9. International Data Transfers

Miurata services are hosted on servers located in the United States. If you access our services from outside the United States, your data may be transferred to and processed in the United States. By using the services, you consent to this transfer. We implement appropriate safeguards (standard contractual clauses) for cross-border transfers.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email at least 14 days before material changes take effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact and Data Requests

For privacy questions, requests, or concerns: