Privacy policy

1. Who we are

MIRAI Foundry Pte Ltd ("MIRAI", "we", "us") is a company incorporated in Singapore. We design, build and operate business operations systems for our clients. We are the data controller for the personal data described in this policy.

Registered address and company registration number Awaiting corporate details

2. What we collect

We collect only what we need to answer an enquiry, deliver an engagement, and run our business.

Information you give us

• Enquiry and Operations Review details — your name, company, role, work email address, a description of the workflow you want to map, and your approximate company size.
• Engagement correspondence — email, meeting notes and documents you send us during an engagement.
• Recruitment — any information contained in an application you send us.

Information we collect automatically

• Technical data — IP address, browser type, device type, referring page and pages viewed. Used in aggregate to keep the site working and understand which pages are useful.

We do not buy contact lists, and we do not collect special categories of data (health, religion, biometrics) through this website.

3. Client operational data is different

When MIRAI operates a workflow for a client, that client's business data — records, documents, transactions and the personal data of their own customers and staff — passes through systems we build. For that data the client is the controller and MIRAI is a data intermediary, processing it only on the client's documented instructions under a separate services agreement.

Deployment, custody and access rules for that data are set out on the Trust page. Where MIRAI Model is used, language models run on-premise, in a private tenancy, or in an isolated MIRAI-managed tenancy — in all three, no third-party model provider receives client data.

4. How we use it, and on what basis

• To respond to your enquiry and prepare an Operations Review — because you asked us to, and because it is in our legitimate interest to answer prospective clients.
• To deliver and support an engagement — to perform our contract with you.
• To keep records required for accounting, tax and audit — to comply with legal obligations.
• To improve the website — legitimate interest, using aggregate technical data only.

We do not use the details you submit through this site for newsletters, automated marketing sequences or profiling, and we do not sell personal data.

5. Who we share it with

We share personal data only with:

• Service providers who host our site, deliver our email and keep our accounts — each bound by contract to protect it and use it only for that service.
• Professional advisers — auditors and lawyers, where required.
• Authorities — where disclosure is required by law or to protect our legal rights.

6. Transfers outside Singapore

Some service providers store data outside Singapore. Where they do, we take steps required by section 26 of the PDPA to ensure a comparable standard of protection, through contractual commitments with each provider.

7. How long we keep it

• Enquiries that do not become engagements — up to 24 months, then deleted.
• Engagement records — for the life of the engagement and 5 years afterwards, to meet Singapore accounting and tax requirements.
• Website technical logs — up to 12 months.

8. Security

Access to personal data is limited to the people who need it. Systems we build log every automated action so it can be reviewed afterwards, and important actions are held for human approval rather than executed automatically. No system is perfectly secure; if a data breach affects you and meets the notification threshold, we will notify you and the Personal Data Protection Commission as required.

9. Your rights under the PDPA

You may ask us to:

• Access the personal data we hold about you, and how it has been used or disclosed in the past year.
• Correct anything inaccurate or incomplete.
• Withdraw consent to any use of your data — we will tell you the likely consequences before it takes effect.

Write to our Data Protection Officer using the details below. We will respond within 30 days, or tell you when to expect a response. If a request concerns data we hold as an intermediary for a client, we will refer you to that client.

10. Cookies

This site uses no advertising or cross-site tracking cookies. Your colour-mode choice — Foundry Paper or Midnight Foundry — is stored in your browser's local storage so the site looks the same on your next visit. It contains no personal data and never leaves your device. Clearing your browser data removes it.

11. Changes to this policy

If we change this policy we will update the version and effective date at the top of this page. Material changes affecting how we use your data will be notified directly where we hold your contact details.

12. Contact the Data Protection Officer

Questions, requests and complaints about personal data go to our Data Protection Officer.

You also have the right to complain to the Personal Data Protection Commission of Singapore. We would ask that you raise the matter with us first.