Privacy Policy

1. Who is responsible for the data

The owner and operator of the personal data is the operator of the MİİİM Global platform, “MİİİM GLOBAL” Limited Liability Company (taxpayer ID (VÖEN) 1103125111; registered address: Aliyar Gulbabayev, house 85, Sahil settlement, Garadagh district, Baku AZ1083, Republic of Azerbaijan). Contact address for all privacy-related requests: info@miiimglobal.com.

2. What data we collect

• Account data: name, email address, password (only in an irreversibly encrypted form), the phone number and city you provide at registration, interface language, time zone and two-step sign-in settings.
• Company and profile data: company name, address, fields of activity, catalogue, certificates and the contact persons you add to the profile (name, position, email, phone, WhatsApp, LinkedIn). When you publish the profile, this data is visible to everyone.
• Files you upload: images, PDF documents and 3D models. Every file is scanned for viruses on upload. Hidden metadata (for example, the location where a photo was taken) is removed from publicly displayed images.
• Correspondence: messages, quotes, meeting proposals, attachments and tender applications. These are seen only by the parties to the correspondence and, where a dispute or complaint is being investigated, by the platform’s administrators.
• Your activity on the platform: products and profiles you have saved, profiles you follow, saved searches, notification preferences and your subscription to browser (push) notifications.
• Statistics: profile views and the number of times a profile appears in search. These counters do not store the visitor’s IP address, browser or cookie. If your browser sends a “Do Not Track” or “Global Privacy Control” signal, the counter records nothing. The visitor’s country and city are determined from the IP address using an offline database on the server (DB-IP); the IP address is neither stored nor sent to any other service.
• Company that viewed a profile: when a signed-in member views another company’s profile or sees it in search results, the viewing company and user are retained for 180 days. The profile owner, if this feature is included in their package, sees only the company’s name. You can object to this record under “Account → Security”; when you object, your previous records are also deleted.
• Security log: important actions in the account and on the platform (sign-in, changes to settings and content, administrator decisions) are recorded. In these records, the IP address and the browser, operating system and device type are retained for 30 days.
• Payments: order, amount, payment status and receipt. You enter your card details on the page of the payment provider (Epoint); we neither see nor store the card number.
• Contact form and newsletter: your name, email and message. Newsletter subscriptions are confirmed by email and can be cancelled at any time.

3. Why we use the data and on what basis

• Creating the account and operating profiles, the catalogue, search, messaging, tenders and packages — performance of the contract concluded with the user.
• Security, prevention of fraud and abuse, and audit — legitimate interest and obligations established by law.
• Preparing relevant opportunities, recommendations and notifications — performance of the contract; you choose the frequency and types of notifications yourself.
• Showing the company that viewed a profile — legitimate interest (building B2B relationships); you have the right to object.
• Newsletter and browser notifications — your consent; you may withdraw your consent at any time.
• Payments and accounting — performance of the contract and obligations established by law.

We request only the data that is necessary for the stated purposes. Name, email and password are mandatory for registration; an account cannot be created without them. Providing other data (phone, city, profile and contact persons) is voluntary; if it is not provided, the related features work in a limited way.

We do not sell your data and do not pass it to third parties for advertising purposes. The platform has no advertising or tracking cookies.

4. To whom the data is transferred

We use the following service providers to operate the platform. They process the data only on our instructions and only for this service.

• Hostinger — server (Germany, European Union) and corporate email.
• Cloudflare — domain names (DNS) and storage of backups. Backups are encrypted on the server and stored within the European Union.
• OpenRouter and the artificial intelligence model providers selected through it — only when the relevant AI feature is active. Requests are sent only to providers that do not retain data (zero data retention), and use of the data for model training is prohibited. What is sent: published profile data, public tender texts, search queries and the image you upload for image search (the image is not stored). More details: the “How artificial intelligence is used” page.
• Epoint — acceptance of payments.
• Browser notification services (Google, Mozilla, Microsoft, Apple) — only if you have subscribed to push notifications; the content of the notification is sent encrypted.
• Public authorities — only when required by law.

5. Transfer of data abroad

The server and backups are located outside the territory of the Republic of Azerbaijan, in the European Union (Germany); the legislation of the European Union ensures a high level of personal data protection. Artificial intelligence providers may be located in other countries (including the United States of America); only public data and search queries are sent to them, on the condition that the data is not retained and is not used for training. In accordance with Article 14 of the Law “On Personal Data”, you give separate consent during registration to the transfer of data to these countries. We ensure the security of transferred data through contractual and technical measures.

6. How long the data is retained

• Account: for as long as the account is active. 30 days after the account is closed, personal data is deleted or anonymised.
• IP address and device data in the security log: 30 days.
• Records of companies that viewed a profile: 180 days.
• Sign-in session: 7 days; email confirmation link: 24 hours; password reset link: 30 minutes.
• Backups: up to 30 days. During this period, deleted data may remain in encrypted backups and is used only for restoration.
• Payment records: for the period required by law.
• Messages, profiles and other content: for as long as the account is active or until you delete them.

When the purpose of processing has been achieved and there is no longer a need to retain the data, it is immediately destroyed or anonymised.

7. Your rights

In accordance with Article 7 of the Law “On Personal Data”, you have the following rights:

• To be informed: to learn which of your data is processed, on what legal basis, for what purpose and for how long, the source of the data and who has access to it.
• To obtain your data: under “Account → Security” you can download all of your personal data as a file.
• To rectify: you edit your account and profile data yourself; in other cases, write to info@miiimglobal.com.
• Erasure: send an account deletion request from “Account → Security”. When the request is approved, the account is closed immediately and personal data is deleted 30 days later. A closed account cannot be restored.
• To object and to demand that processing be stopped: except where processing is mandatory by law, you may object to the collection and processing of your data; in particular, you can immediately object to being shown as a company that viewed a profile under “Account → Security”.
• To object to automated decisions: decisions that produce legal effects concerning you are never taken on the platform solely by automated means; the results of artificial intelligence and rules are recommendations.
• To withdraw consent: you may opt out of the newsletter, browser notifications and notification types at any time.
• To lodge a complaint: if you believe your rights have been violated, you may apply to the Ministry of Digital Development and Transport of the Republic of Azerbaijan or to a court, and claim compensation for the damage caused.

You can send a request from your account on the platform, to info@miiimglobal.com or in writing; we may ask for additional information to verify your identity. We respond to requests free of charge within 7 working days; if coordination with a third party is required, this period may be extended by no more than 7 working days. If a request is refused, a reasoned response is given within 5 working days.

8. Security

We take organisational and technical measures to protect personal data against unlawful or accidental access, alteration, disclosure and destruction. All connections are encrypted with HTTPS. Passwords are stored in an irreversible form, two-step sign-in is available, uploaded files are scanned for viruses, backups are encrypted and administrator actions are recorded in a log. No system is entirely risk-free; if you discover a security problem, write to info@miiimglobal.com.

9. Age limit

The platform is not intended for persons under 18 years of age.

10. Cookies

The platform uses only cookies that are necessary for it to work. The list and retention periods are on the “Cookie policy” page.

11. Changes

When the policy changes, the new version is published on this page and its date is updated. When the purposes of processing, the list of data or the recipients to whom data is transferred change, we obtain your new consent.

This policy is published in Azerbaijani, English, Turkish and Russian; in case of any discrepancy between the texts, the Azerbaijani text prevails.

12. Contact

info@miiimglobal.com