Privacy Policy

1. Who we are

Mirwal ("Mirwal", "we", "us") is an upcoming Pakistan-focused, AI-assisted shopping marketplace that has not launched yet. This website currently provides information about Mirwal, a waitlist and early-community membership, a referral programme and a contact form.

2. Information we collect

When you join the waitlist:

First name, email address, WhatsApp number (with country calling code), city and country (required); last name (optional)
Shopping categories you're interested in (optional)
What you'd like Mirwal to find for you, in your own words (optional). Please don't include sensitive personal information in this answer.
Your confirmation that you've read this Privacy Policy, and when
A referral code, if someone invited you (optional)
Campaign tags from the link you used (for example "utm_source=instagram"), if present
Your marketing preference: whether you opted in, and when you opted in or out
The date and time you joined

What we create for you: a Mirwal ID, a referral code, a certificate number and a private member link. We store only a scrambled (hashed) version of the private link's secret, so we can't read it back.

When you use the contact form: your name, email, optional phone number, subject and message.

Technical information: to prevent spam and referral abuse, we store a keyed one-way hash of the IP address used to join (not the IP address itself). Our server may also briefly process IP addresses to deliver the site and apply rate limits.

We do not ask for payment details, passwords or government ID numbers.

3. How we use your information

Launch and membership updates: to tell you when Mirwal launches and send important information about your waitlist membership.
Marketing, only with consent: if you opt in, we may send offers, early-access invitations and other marketing messages by email and WhatsApp. Marketing consent is optional and recorded separately from joining.
Referrals: to credit members who invite friends and to detect duplicate or self-referrals.
Replying to you: to respond to messages sent through the contact form.
Planning: to understand, in aggregate, which cities, categories, products and needs matter to shoppers, so we can shape Mirwal's launch. Your answers do not start a product search or purchase.
Security: to prevent spam, abuse and fraud.

We never sell your personal information, and we don't send marketing messages unless you opt in.

4. How referral tracking works

Each member gets a personal referral link (for example mirwal.pk/join?ref=MW-ABC123).
If a friend opens your link, the code is kept in their browser for that visit and pre-filled in the form. The referral is recorded only after the server accepts their signup.
We record which member referred which new member, the referral code, the date and a status (valid, under review or rejected). Duplicate signups, self-referrals and suspicious patterns are not counted.
Members can see only the number of their accepted referrals, never the names or contact details of the people they referred.
Any rewards apply only if Mirwal officially announces a campaign with its terms.

5. Your certificate and public verification

Your Founding Member certificate shows your name, Mirwal ID, registration date, referral code and certificate number. It never shows your email address or phone number.

Each certificate has a public verification page. It shows only your first name and last initial, your Mirwal ID, the month you joined and the certificate number. Verification pages are not listed in search engines.

6. Your private member link and this device

Your member page is protected by a private link. If you open it on a device, the link's secret is saved in that browser's local storage so you can return easily. Use "Forget this device" on the member page to remove it. Don't share your private link.

7. Your choices and rights

Opt out anytime: switch off marketing on your member page, use the unsubscribe link in any email, reply "STOP" on WhatsApp, or contact us.
Access and correction: ask what information we hold about you and ask us to correct it.
Deletion: ask us to delete your membership. This also deletes referral records linked to you, and your certificate will no longer verify.
Withdrawing consent does not affect messages sent before you withdrew it.

Send requests to hello@mirwal.pk from the email address you signed up with, so we can confirm it's you.

8. How we store and protect your information

Information is stored in a secured database on our server. Access is limited to authorised Mirwal team members through a password-protected admin area with hashed passwords, session expiry and request protection. We use HTTPS, access controls, rate limiting and spam protection. No system is completely secure, but we review our safeguards regularly.

9. Sharing your information

We do not sell or rent your information. We may share it only with:

Service providers who help us run the website or send messages (for example hosting, email or WhatsApp messaging services), only as needed to provide those services;
Authorities, where required by law.

10. How long we keep information

We keep waitlist, referral and contact information only as long as needed for the purposes above: until Mirwal launches and a reasonable period afterwards, or until you ask us to delete it. We review stored data at least once a year.

11. Cookies and local storage

Public pages use no advertising or tracking cookies, and fonts and images are served from our own server. Your browser may store your referral attribution (for one visit) and your private member link (until you choose "Forget this device"). The private admin area uses a strictly necessary session cookie for authorised staff.

12. Third-party links

Social media and WhatsApp links take you to other platforms, whose own privacy policies apply. Opening a social profile from our site doesn't tell us whether you follow it.

13. Children

The waitlist is intended for people aged 18 or over. If you believe a child has given us their information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy as Mirwal develops. We'll update the date above and let members know about significant changes.