Your privacy is important to us
Privacy Policy
Last Updated on 2 October, 2026
Mirats Insights Private Limited
CIN U73200UP2021PTC153917
D-U-N-S 91-346-0752
8001, 8th Floor, NIBR Corporate Park, 1 Aerocity, Sakinaka, Andheri East, Mumbai, Maharashtra 400072, India
This Privacy Policy explains how Mirats Insights Private Limited (“we”, “us”, or “our”) uses and protects personal information when you use Mirats Rewards at https://rewards.mirats.app (the “Platform”) and the related survey and rewards services (the “Services”).
We protect your privacy and follow the data protection laws that apply to you, including the EU and UK GDPR where they apply, India’s Digital Personal Data Protection Act, and U.S. federal and state privacy laws.
This policy is written in English. A translation, if we publish one, is for convenience.
1. What information we collect
We collect different information depending on how you use the Platform. Some of it you give us, some is collected automatically, and in limited cases we receive it from survey or reward partners.
A. Information you give us
- Account data: your name, email address, password, and country. We use this to create and manage your account.
- Profile data: date of birth, gender, and answers you choose to give about education, work, household, or income. We use this to match you with surveys.
- Optional sensitive profile data: a survey or profile question may ask about race or ethnicity, health, religion, political opinions, or similar topics. You can skip these. If you answer, we use the answer only to match you with relevant research.
- Phone data: if you add a mobile number, we use it to send a verification code and, where you agree, survey or reward messages.
- Reward data: the payout method you choose, such as a gift card or PayPal, and the name or email that method needs. We use this to send rewards.
- Verification data: one-time codes, and any extra proof we ask for before a payout if we need to confirm the account is yours. We do not collect facial scans or other biometric templates.
- Support data: messages you send through the contact form, help requests, or the Do Not Sell page.
B. Information collected automatically
- Technical data: IP address, browser, device type, operating system, language, and the time of the visit. We use this to run the Platform, set a language, and detect suspicious or automated activity. We do not read the other apps installed on your device.
- Usage data: pages you open, surveys you start, finish, or leave, eligibility results, and reward activity. We use this to operate the Services, calculate rewards, and fix problems.
- Advertising data: campaign identifiers and click identifiers in the link you opened, such as utm parameters, gclid, fbclid, rdt_cid, and twclid.
C. Information you can choose to turn on
Measurement and advertising cookies run only after you accept them in countries that require a choice. You can reject them, and you can change that choice later. Details are in the Cookie Policy.
D. Information from others
- Sign-in: if you register or sign in through our authentication service, that service may share the account details needed to open your membership.
- Survey partners: when you join a study they host, they may share eligibility or completion status so we can credit your account. Your answers on their site are controlled by that partner.
- Reward partners: a gift-card or payment partner may confirm that a reward was issued.
E. California categories
| CCPA category | Information described above |
|---|---|
| Identifiers, such as name, email, phone, device identifier, or IP address | Account data, phone data, usage data, reward data |
| Protected classifications, such as age, gender, race or ethnicity, or political opinions | Profile data, optional sensitive profile data |
| Commercial information, such as survey participation and rewards | Usage data, reward data |
| Internet or network activity | Usage data, advertising data |
| Approximate location from an IP address | Technical data |
| Sensitive personal information you choose to provide | Optional sensitive profile data |
| Information you send us | Support data |
2. How and why we use your information
| Purpose | Why | Information used |
|---|---|---|
| Create and manage your account, show surveys, and give you access to the Services | Contract with you | Account, profile, phone, reward, verification, support, and usage data |
| Match you with surveys and tasks | Contract, and consent where the law requires it | Account, profile, optional sensitive profile, and usage data |
| Send service messages, and marketing where you have agreed or the law allows it | Contract, legitimate interest, or consent | Account and usage data |
| Measure visits and advertising | Consent where required, otherwise legitimate interest | Usage and advertising data |
| Diagnose and fix problems with the Services | Contract | Account, profile, usage, and support data |
| Verify identity and prevent fraud, duplicate accounts, and misuse | Legitimate interest, and consent where required | Account, profile, phone, verification, usage, and support data |
| Pay a reward | Contract | Account, reward, and verification data |
| Tax, accounting, and other legal duties | Legal obligation | Account, profile, reward, verification, support, and usage data |
| Respond to a court, regulator, or law-enforcement request | Legal obligation, or legitimate interest in assisting with a serious crime | The categories needed to respond |
| Share limited, pseudonymised information with survey partners so they can run a study | Legitimate interest in providing the Services | Account, profile, optional sensitive profile, and usage data |
| Establish or defend a legal claim | Legitimate interest | The categories needed for the claim |
4. International transfers
Mirats Rewards is operated from India and the United States, and some providers are in other countries. Your information may be stored where data-protection laws differ from those where you live.
Where European or UK law requires it, we transfer personal information using an adequacy decision or Standard Contractual Clauses, including the UK addendum where it applies. We also review a provider’s security and add safeguards such as encryption or access limits where they are needed.
5. How long we keep information
We keep information only as long as we need it to provide the Services, meet a legal duty, resolve a dispute, or keep the Platform safe.
- You can ask us to delete your account. We delete or anonymise it unless a longer period below applies.
- Account and profile data are kept while the account is open, then deleted or anonymised, unless a longer period applies.
- Reward and tax records are typically kept for 7 years.
- Support, security, and fraud records may be kept longer when needed for a dispute, a legal duty, or the safety of the Platform.
6. Your rights
Depending on where you live, you can ask us to:
- provide a copy of the personal information we hold about you;
- correct information that is wrong or incomplete;
- delete information we no longer need;
- limit how we use it, in the cases the law allows;
- provide it in a portable format;
- object to processing based on legitimate interests;
- withdraw consent, including consent for marketing;
- opt out of a “sale” or “share” under U.S. state law.
We do not make automated decisions that produce legal or similarly significant effects. We process sensitive information only for the matching and legal purposes described in this policy. Because of that, a separate right to opt out of that kind of automated decision, or to limit sensitive information beyond what this policy already does, does not arise for our processing.
Email [email protected] from the address on your account. We may need to confirm it is you before we act, and we will reply within the time the law requires. You can also complain to the data protection authority where you live.
7. Children’s privacy
Mirats Rewards is not for anyone under 13. The minimum age to join is 18 in most countries. In some countries the signup form allows a lower age, and that age is never under 13. We do not knowingly keep an account for someone below the minimum for their country.
If we learn that we have collected information from someone below that age, we will delete it. If you believe a child has signed up, email [email protected].
9. Automated tools
We do not make a decision about you, without a person, that produces a legal or similarly significant effect. We do use automated tools to operate and protect the Platform. Those tools look at limited profile, activity, and device information to:
- match surveys, by comparing details such as age, gender, country, and past participation with the criteria a research partner sets;
- detect duplicate accounts, scripts, and unusual sign-in patterns;
- flag answers that look inconsistent or technically invalid;
- spread survey invitations among eligible members.
If a tool flags possible fraud or a technical problem, access or a payout may be paused for a check. Where it is appropriate, our team reviews that result.
10. How we protect information
We use technical and organisational measures to protect personal information from unauthorised access, loss, misuse, or disclosure. Those measures include encryption in transit, limited access for staff and providers who need it, and reviews of our systems. People with access are bound by confidentiality duties.
We monitor for incidents. If a breach creates a high risk to your rights, we will notify the relevant authority and, where the law requires it, contact you with what happened and what you can do.
11. Updates to this policy
We may update this policy when the Services or the law change. The current version is always on the Platform. If a change is material, we will tell you by email or on the Platform before it applies.
12. Contact us
Questions about this policy can be sent to [email protected]. The company responsible for this site is shown above.