Privacy Policy

Effective Date: October 11, 2026

1. Introduction

This Privacy Policy explains how Mikiri Security, LLC (“Mikiri Security”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you visit or use:

• https://mikiri.ai;
• https://docs.mikiri.ai;
• or any other website or service operated by us under the *.mikiri.ai domain that links to this Privacy Policy.

Collectively, these websites and services are referred to as the “Websites”.

Mikiri Security, LLC is the data controller responsible for the processing described in this Privacy Policy.

We process personal data in accordance with the Law of the Republic of Armenia “On Protection of Personal Data” dated May 18, 2015 No. HO-49-N and other applicable Armenian legislation.

Where the EU General Data Protection Regulation (“GDPR”), UK GDPR, or another data protection law applies to our processing, we comply with its applicable requirements.

2. Current Availability of Features

As of the Effective Date:

• The evaluation request form described in this Privacy Policy is available on https://mikiri.ai.
• Google Analytics is enabled on https://mikiri.ai.
• Google Ads conversion measurement is enabled for a successful evaluation request on https://mikiri.ai.
• https://mikiri.ai and https://docs.mikiri.ai include a language selector. It can show the English page in Arabic, Armenian, French, German, or Spanish. On https://mikiri.ai the Google Translate script loads only after that language is chosen and Functional cookies are allowed. If the choice is already saved and Functional cookies stay allowed, the script loads when a later page opens. English remains the original text and does not load the script.
• We do not send evaluation form fields, such as name, email address, company name, or telephone number, to Google.
• Google Analytics runs only after Analytics is allowed in the cookie banner. The Google Ads tag loads only after Advertisement cookies are allowed. The Google Ads conversion event is sent only after Advertisement cookies are allowed and an evaluation request is successfully submitted.
• We do not use Google Ads remarketing.
• We do not use Enhanced Conversions.
• We do not use Google Consent Mode.

The relevant provisions below explain how personal data is processed through the evaluation request form, Google Analytics, Google Ads conversion measurement, and the language selector.

3. Personal Data We Collect

3.1. Information Collected Automatically

When you visit the Websites, our servers and security systems may automatically process technical information such as:

• IP address;
• date and time of a request;
• requested page or resource;
• referring page, where available;
• browser type and version;
• operating system and device information;
• user-agent information;
• request status and diagnostic information;
• information relating to security events, errors, or suspected abuse.

We use this information to operate and secure the Websites, diagnose technical problems, prevent abuse, and maintain appropriate operational records.

3.2. Information You Provide Directly

You may provide personal data when you contact us by email or through another available communication channel.

Depending on the nature of your communication, this information may include:

• first and last name;
• business email address;
• telephone number;
• company name and position;
• the contents of your message;
• information relating to your organization or business inquiry;
• any other information you voluntarily provide.

Please do not send sensitive personal data unless it is strictly necessary for your inquiry.

4. Contact Form

An evaluation request form is available on https://mikiri.ai.

The form currently collects:

• first name and last name;
• business email address;
• company name;
• confirmation that you have read this Privacy Policy and agree to the processing of the request.

The form does not currently ask for a telephone number, job title, subject, or a free-text message. If those fields, or other fields, are added later, the form may also collect:

• telephone number;
• job title or position;
• the subject and contents of the inquiry;
• any other information voluntarily entered into the form.

Technical information associated with a submission may also be processed, including:

• IP address;
• browser and user-agent information;
• submission date and time;
• the page from which the form was submitted;
• information required to detect spam, automated submissions, or abuse.

Contact form submissions are transmitted to and stored in our business email systems. They are not written to a website database. A copy of the confirmation may be sent to the business email address entered in the form.

A successful submission also sends an event to Google Ads and an event to Google Analytics showing that a request was submitted. Those events do not include the contents of the form fields.

We will use contact form data to:

• Respond to your inquiry.
• Provide requested information about Mikiri Security products and services.
• Arrange product demonstrations, evaluations, pilots, or business discussions.
• Manage and follow up on prospective or existing business relationships.
• Maintain records of business communications.
• Detect and prevent spam, fraud, abuse, and security incidents.
• Comply with applicable legal obligations.
• Establish, exercise, or defend legal claims where necessary.

Submitting a contact form will not constitute consent to receive marketing communications.

If we request consent for marketing communications, it will be requested separately. Such consent will be optional and will not be required to submit a business inquiry.

5. Google Analytics and Google Ads Conversion Measurement

On https://mikiri.ai we use Google Analytics, through Site Kit by Google, to understand how the site is used. The Google Analytics library is not included in the page. It is added only after Analytics is allowed in the cookie banner. If that choice is already saved, the library loads when the page opens. If you allow Analytics during the visit, it loads after that choice. If you reject Analytics, or have not made a choice, it does not load. When it runs, it may process IP address, page URL, referring URL, browser and device information, the date and time of the visit, cookie identifiers, and interactions such as page views, scrolling, and clicks on outbound or contact links.

We use Google Ads conversion measurement to understand whether an advertisement is followed by a successful evaluation request on https://mikiri.ai. The Google Ads tag is not included in the page. It is added only after Advertisement cookies are allowed in the cookie banner. If that choice is already saved, the tag loads when the page opens. If you allow Advertisement cookies during the visit, it loads after that choice. If you reject Advertisement cookies, or have not made a choice, it does not load. The conversion event is sent only after the form is successfully submitted, and only when Advertisement cookies are allowed. It is not sent merely because a page was opened.

Google tags and related technologies may process:

• IP address;
• page URL and referring URL;
• browser and device information;
• date and time of a visit or conversion;
• advertising click identifiers, such as GCLID, GBRAID, or WBRAID, where available;
• information indicating that a conversion event occurred;
• cookie or similar technology identifiers, where permitted.

This processing is used to:

• attribute Website actions to advertising campaigns;
• measure campaign performance;
• produce conversion statistics;
• detect invalid traffic, fraud, and abuse.

Information may be transmitted to Google LLC and its affiliates as part of Google Ads conversion measurement. Google may process this information in accordance with its own terms and privacy documentation:

• How Google uses information from sites or apps that use its services
• Google Privacy Policy
• Google Advertising Technologies

5.1. Features We Do Not Use

We do not use:

• Google Ads remarketing;
• Website visitor audience lists;
• interest-based advertising based on visits to the Websites;
• Enhanced Conversions;
• Customer Match based on contact form submissions;
• transmission of contact form fields, such as names, email addresses, company names, or telephone numbers, to Google;
• Google Consent Mode.

If our use of Google advertising services changes, we will update this Privacy Policy before enabling the relevant functionality.

5.2. No Automated Decision-Making

We do not use Google Ads conversion measurement to make decisions that produce legal or similarly significant effects concerning individual Website visitors.

6. Cookies and Similar Technologies

The Websites may use cookies and similar technologies.

6.1. Strictly Necessary Technologies

Strictly necessary technologies may be used to:

• operate the Websites;
• maintain security;
• prevent abuse;
• remember privacy choices;
• provide essential Website functionality.

https://mikiri.ai and https://docs.mikiri.ai each show a cookie banner. It asks you to accept, reject, or customize non-essential cookies. You can change that choice later from the banner. Your choice is stored in a first-party cookie named mikiri-consent for up to 12 months. That cookie is kept for the website where you made the choice and is not sent to a separate consent service. A choice saved on one website is not applied to the other.

Google Analytics and the Google Ads tag are used only on https://mikiri.ai, and only after the matching category is allowed there. Allowing Analytics or Advertisement on https://docs.mikiri.ai does not load those tags. They are not used on that site.

Where permitted by applicable law, strictly necessary technologies may be used without consent because they are necessary for the requested service or the operation of the Websites.

6.2. Advertising and Measurement Technologies

Google Analytics and Google Ads conversion measurement on https://mikiri.ai use cookies and similar identifiers. The Google Analytics library is not included in the page. It is added only after Analytics is allowed in the cookie banner. If that choice is already saved, the library loads when the page opens. If you allow Analytics during the visit, it loads after that choice. If you reject Analytics, or have not made a choice, Google Analytics does not run. The Google Ads tag is not included in the page. It is added only after Advertisement cookies are allowed in the cookie banner. If that choice is already saved, the tag loads when the page opens. If you allow Advertisement cookies during the visit, it loads after that choice. If you reject Advertisement cookies, or have not made a choice, the Google Ads tag does not run. The conversion event is sent only after an evaluation request is successfully submitted, and only when Advertisement cookies are allowed. We do not use Google Consent Mode.

A choice saved in the cookie banner is what allows the matching tag to run. Rejecting Analytics keeps Google Analytics off. Rejecting Advertisement cookies keeps the Google Ads conversion event off.

Visitors will be able to:

• accept or reject non-essential technologies;
• make a choice without being forced to accept advertising technologies;
• customize their cookie preferences;
• change or withdraw their choice later.

Withdrawing consent will not affect the lawfulness of processing performed before consent was withdrawn.

You may also configure your browser to delete or block cookies. Blocking strictly necessary technologies may affect the availability, security, or functionality of the Websites.

6.3. Language Selection

https://mikiri.ai and https://docs.mikiri.ai each include a language selector for Arabic, Armenian, French, German, and Spanish. English is the original text.

The Google Translate script is not included in the page. On https://mikiri.ai it loads only after you choose Arabic, Armenian, French, German, or Spanish and Functional cookies are allowed. If those cookies are not allowed, the selector says that they are required and does not load the script or store a language. If a choice is already saved and Functional cookies stay allowed, the script loads when you open a later page, so the same language can be shown. If you have not chosen a language, or you last chose English, the script does not load. The selector does not choose a language from your browser settings.

Choosing one of those languages sends the page content to Google so that a translated version can be shown. Google may process that page content together with technical information such as IP address and browser information. When Functional cookies are allowed, the selected language may be stored in a googtrans cookie and in your browser’s local storage. Choosing English clears that stored language and shows the original text. Turning Functional cookies off clears that stored language as well.

7. Purposes and Legal Bases

Depending on the circumstances and applicable law, we process personal data for the following purposes and on the following legal bases.

7.1. Website Operation and Security

We process technical and security data to operate the Websites, diagnose errors, protect our systems, and prevent abuse.

The legal basis may be our legitimate interests in maintaining secure and reliable Websites or compliance with applicable legal obligations.

7.2. Responding to Inquiries

We process contact information and correspondence to respond to requests and conduct business discussions.

The legal basis may be:

• taking steps at your request before entering into a contract;
• performing a contract;
• our legitimate interests in managing business inquiries and relationships;
• consent, where required.

7.3. Advertising Measurement

We use Google Analytics and Google Ads conversion measurement to understand how https://mikiri.ai is used and to record that an evaluation request was submitted.

Where applicable law requires consent, the legal basis is your choice in the cookie banner: Analytics for Google Analytics, and Advertisement for the Google Ads conversion event. Where applicable law does not require consent, the legal basis is our legitimate interest in understanding use of the site and the effectiveness of advertising. In either case, the tags run only after the matching banner choice.

7.4. Marketing Communications

Submitting an inquiry does not automatically subscribe you to marketing communications.

Where consent is required, we will send marketing communications only after receiving separate consent. You may withdraw that consent or object to direct marketing at any time.

7.5. Legal Compliance and Claims

We may process personal data to comply with legal obligations and to establish, exercise, or defend legal claims.

8. How We Share Personal Data

We do not sell personal data.

We may disclose personal data to:

• hosting and infrastructure providers;
• business email providers;
• security, monitoring, and anti-spam providers;
• professional advisers, including legal and accounting advisers;
• Google LLC and its affiliates, for Google Analytics, Google Ads conversion measurement, and Google Translate;
• competent public authorities where disclosure is required by law;
• a purchaser, successor, or other relevant party in connection with a merger, reorganization, acquisition, or sale of business assets.

Service providers acting on our behalf are permitted to process personal data only for the relevant services and subject to appropriate data protection obligations.

Some recipients, including Google, may also process information under their own terms and privacy policies.

9. International Data Transfers

Personal data may be processed in Armenia and in other countries where we or our service providers operate.

These countries may have data protection laws that differ from those of your country.

Where applicable law requires safeguards for an international transfer, we use an appropriate transfer mechanism, which may include:

• an adequacy decision;
• standard contractual clauses;
• contractual and organizational safeguards;
• another transfer mechanism permitted by applicable law.

Google may process Google Analytics, Google Ads conversion, and Google Translate data in countries outside Armenia, the European Economic Area, Switzerland, or the United Kingdom, subject to Google’s applicable data transfer mechanisms.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Unless a longer period is required or permitted by law:

• server access, diagnostic, and security records may be retained for up to 12 months after collection for Website operation, security monitoring, incident investigation, abuse prevention, and the maintenance of appropriate technical records;
• email communications are retained for as long as necessary to respond to and document the relevant inquiry or business relationship;
• contact form submissions, including submissions already collected and submissions received if further fields are added to the form, may be retained for up to 36 months after the last interaction with the relevant person or organization;
• the mikiri-consent cookie that stores a privacy choice is kept for up to 12 months, and other consent records may be retained for as long as necessary to demonstrate compliance and manage the relevant privacy preference;
• Google Analytics user and event data in our Google Analytics property is retained for 14 months. Advertising measurement data is retained in accordance with our Google Ads account configuration and Google’s applicable retention policies.

Data may be retained for a longer period where necessary to:

• comply with a legal obligation;
• resolve a dispute;
• maintain an ongoing or prospective business relationship;
• establish, exercise, or defend legal claims;
• investigate fraud, abuse, or a security incident.

When personal data is no longer required, we delete or anonymize it in accordance with applicable legal and technical requirements.

11. Your Rights

Depending on applicable law and the circumstances of the processing, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to processing for direct marketing;
• withdraw consent at any time;
• receive eligible personal data in a structured, commonly used, and machine-readable format;
• request transmission of eligible personal data to another controller;
• receive information about applicable international transfer safeguards;
• lodge a complaint with a competent data protection authority.

These rights may be subject to conditions and exceptions under applicable law.

To exercise a right, contact us using the details in Section 16. We may need to verify your identity before completing a request.

We will respond within the period required by applicable law.

You may also contact the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.

Where the GDPR or UK GDPR applies, you may also lodge a complaint with the supervisory authority in your country of residence, place of work, or location of the alleged infringement.

12. Data Security

We use appropriate technical, organizational, and administrative measures designed to protect personal data against:

• unauthorized access;
• accidental or unlawful destruction;
• loss or alteration;
• unauthorized disclosure;
• misuse;
• other unlawful processing.

No method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

13. Children’s Privacy

The Websites and Mikiri Security’s products and services are intended for businesses and professional users.

They are not directed to children, and we do not knowingly collect personal data from children through the Websites.

If you believe that a child has provided personal data to us, please contact us so that we can investigate and, where appropriate, delete it.

14. Third-Party Websites

The Websites may contain links to third-party websites or services.

We are not responsible for the privacy practices, security, or content of third-party services. We recommend reviewing their privacy policies before providing personal data.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• changes to the Websites;
• changes to the evaluation request form, including fields that are not collected today;
• changes to analytics, advertising measurement, or translation tools;
• changes to our service providers;
• changes to applicable laws or regulatory guidance;
• changes to our data processing practices.

The updated version will be published on this page with a revised Effective Date.

Where required by law, we will provide additional notice or request consent before a material change takes effect.

16. Contact Information

For questions about this Privacy Policy, our processing of personal data, or the exercise of data protection rights, contact:

Mikiri Security, LLC Registered address: 1 Amiryan Street, Yerevan 0010, Republic of Armenia Privacy inquiries: privacy@mikiri.ai General inquiries: info@mikiri.ai

Submitting an inquiry or using the Websites does not by itself constitute consent to non-essential cookies, advertising measurement, or marketing communications. Where consent is required, it will be requested separately through the relevant interface.