Privacy Policy

Last updated: 12 October 2026

This policy explains what data Miza collects when you use the Miza point-of-sale and management platform at getmizaa.com, why we use it, who we share it with, and the rights you have. We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

1. Our role

For your account (your name, email and subscription), Miza decides how the data is used.

For the data your business enters into Miza — your sales, stock, staff and customers — your business owns it and decides how it is used. Miza processes it on your behalf only to provide the service. If a customer or employee of a business asks about their data, the business answers them, and we help the business do so.

2. What we collect

Account data: your name, email address and password (stored only as a secure hash; we cannot see it).
Business data: business name, type, branches, tax registration number (TRN) if you add it, and settings.
Operating data you enter: sales and invoices, menu and prices, raw materials, purchases, stock, expenses, day closings and reports.
Staff data: names, roles and branches. Staff PINs are stored only as a secure hash. POS device accounts use an email and password that the owner sets.
Your customers’ data, if you use the stamp card: phone number, an optional name, stamps and visits.
Payment data: payments are processed by Stripe. We never receive or store your card number; we keep only the Stripe customer and subscription references and the subscription status.
Technical data: the cookies listed below, an activity log of changes inside your business (who did what and when), and standard server logs such as IP address and browser type, used for security.

3. Why we use it

We do not sell personal data, and we do not use your business data or your customers’ data for advertising.

To run the service: sign-in, selling, reports and everything you use in Miza.
To manage your subscription, free trial and billing.
To keep accounts secure, prevent misuse and investigate problems.
To send service messages, such as email confirmation, password reset and subscription notices.
To provide support when you ask for it.

4. Who we share it with

Only with the providers we need to run the service, under agreements that require them to protect it:

Supabase: database, file storage and sign-in.
Vercel: website hosting.
Stripe: subscription payments.
Government authorities, only when the law requires it.

5. Where data is stored

These providers run cloud servers that may be located outside the UAE. When data is transferred outside the UAE, we rely on providers that apply recognised data-protection safeguards, as the law allows.

6. Cookies

Miza uses only the cookies it needs to work. There are no advertising or tracking cookies, and no analytics tools.

Sign-in cookies, which keep you logged in.
mz_biz: the business you selected.
mz_device: links a POS device to its business and branch.
mz_lang: your interface language.
mz_side: whether the side menu is collapsed.

7. How we protect data

Encrypted connections (HTTPS) for all traffic.
Each business’s data is isolated at the database level, so one business can never see another’s data.
Passwords and PINs are stored as secure hashes.
Roles control what each team member can see and do, and important changes are recorded in the activity log.
Financial records are never permanently deleted from inside the app, to protect the accuracy of your accounts.

8. How long we keep it

We keep your data for as long as your account exists, including after your subscription ends, so you can return and find it as it was.

You can ask us to delete your account and your business data. We will delete it, except for what the law requires us to keep, such as tax and accounting records, which are kept for the period the law sets.

9. Your rights

To use any of these rights, contact us using the details below. If you are a customer or employee of a business that uses Miza, contact that business first.

To know what data we hold about you and get a copy.
To correct inaccurate data.
To ask us to delete your data, within the limits of the law.
To object to or restrict certain processing.
To take your data with you: you can export your reports to Excel at any time.

10. Age

Miza is a service for businesses. It is not intended for anyone under 18.

11. Changes to this policy

We may update this policy. If a change is significant, we will tell account owners inside the app or by email before it takes effect.