Privacy Policy

Effective Date: June 22, 2026

1. Introduction

This Privacy Policy describes how MSR GROUP INC (“Misoora,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you visit our websites at misoora.com and ai.misoora.shop (and any other websites or subdomains we operate), create an account, make a purchase, use our features or otherwise interact with us.

This Policy includes our Cookie Policy (Section 7). If you are a Washington State resident and use our AI Skin Analysis feature, please also review our Consumer Health Data Privacy Policy at misoora.com/pages/wa-health-data-policy.

Please read this Privacy Policy carefully. By using our Website or services, you agree to the collection and use of information as described here. If you do not agree, please do not use the Website.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when you:

Create an account: name, email address, and, when you choose to provide, phone number, date of birth, skin type preferences.
Place an order: billing and shipping address, payment information (processed securely by our third-party payment processor – we do not store your full card number).
Use our AI Skin Analysis feature: photographs of your skin, which may include biometric facial data. See Section 6 for details.
Complete our skin quiz: answers to questions about your skin type, concerns, sensitivities, and goals.
Submit reviews, photos, videos, or other User Content.
Sign up for email or SMS communications: email address, phone number, and communication preferences.
Contact customer support: messages, attachments, and other information you choose to share.
Participate in our loyalty, referral, or affiliate programs: referral information, partner identifiers, and, for referral rewards, the email address of the person you refer. Referred friends’ email addresses are shared with our referral platform solely to track and fulfill the referral reward.

2.2 Information Collected Automatically

When you visit our Website, we and our third-party partners automatically collect:

Device and browser information: IP address, browser type and version, operating system, device identifiers.
Usage data: pages visited, time spent on pages, referring URLs, links clicked, add-to-cart actions, checkout events.
Transaction events: purchase completions, order activations, and other purchase-related actions.
Approximate location: inferred from your IP address.
UTM and referral parameters: campaign source, medium, and content tags used to attribute traffic from advertising and partner channels. Affiliate links may append a partner identifier to the URL, which is captured and associated with your session and any resulting purchase for commission attribution.
Cookies and similar tracking technologies: see Section 7 for full details.

2.3 Information from Third Parties

We may receive information about you from:

Social media platforms: engagement signals and ad interaction data shared pursuant to those platforms’ terms.
Advertising partners: audience matching data to help us show relevant ads.
Review platforms: review submissions and ratings.
Loyalty and referral platforms: points activity and referral tracking.
Affiliate and partner platforms: partner-generated referrals and associated identifiers.
Payment processors: transaction status and fraud signals.
Shipping carriers: delivery status and address validation.

3. How We Use Your Information

We use your personal information to:

Process and fulfill your orders and recurring purchases, including charging your payment method, arranging shipment, and managing returns.
Create and manage your account, including access to order history, AI analysis results, loyalty balance, and subscription management.
Provide our AI Skin Analysis feature, including analyzing uploaded photos and generating personalized cosmetic insights.
Send transactional communications: order confirmations, shipping updates, billing notices, return instructions, and other messages related to your orders and account.
Send marketing communications (with your consent where required): promotional emails and SMS, product recommendations, loyalty updates, and special offers.
Personalize your experience: tailor product recommendations based on quiz answers, purchase history, skin type, and AI analysis results.
Administer our loyalty and rewards program: track points, tiers, and referral activity.
Support affiliate and partner programs: attribute sales and process partner commissions.
Run and measure advertising campaigns on Meta, TikTok, Google, and other platforms using pixel data and server-side conversion APIs.
Analyze and improve our Website and services using web analytics tools.
Prevent fraud and abuse, and protect the security and integrity of our services.
Comply with legal obligations and enforce our Terms of Use.

4. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. We share your information only in the circumstances described below.

4.1 Service Providers

We share personal information with vendors who process it on our behalf to help us operate our business. These parties are contractually required to protect your data and use it only for the specified purpose. Key service providers include:

E-commerce platform and checkout providers
Email and SMS marketing platforms
Mirra: processes returns for eligible orders, including prepaid label generation and return tracking. For Try Before You Buy orders, your return initiation data (selected items, return reason) is shared with Mirra solely to facilitate the return and pause the pending payment authorization.

Payment processors: process payment card transactions on our behalf.
AI analysis provider: processes uploaded skin photos to generate AI analysis results on our behalf.
Review, loyalty, and referral platforms: review collection and display, loyalty program management, and referral attribution.
Affiliate and partner tracking platforms: attribute sales and process partner commissions.
Customer support platforms: support chat and help desk ticketing.
Site optimization tools: post-purchase flows, social proof widgets, and on-site conversion optimization.
Cookie consent management providers: manage cookie preferences and regulatory compliance.
Shipping carriers (UPS, USPS, FedEx, and others): order and return fulfillment.
Analytics providers: website analytics and performance measurement.

4.2 Advertising Partners

We share certain data with advertising platforms to run and measure campaigns:

Meta (Facebook/Instagram): we use Meta Pixel and the Conversions API (server-side) to track ad performance and run retargeting campaigns.
TikTok: we use TikTok Pixel and the Events API (server-side) for campaign measurement and retargeting.
Google: for search and display advertising and conversion tracking.

These platforms may use the data for their own purposes under their own privacy policies. You may opt out of interest-based advertising as described in Sections 7 and 10.

4.3 Third-Party Marketplaces

If you purchase our products through Amazon or other third-party platforms, those platforms receive and process your information under their own privacy policies.

4.4 Legal Requirements and Business Transfers

We may disclose your information: (a) when required by law, subpoena, or governmental authority; (b) to protect the rights, property, or safety of Misoora, our users, or the public; (c) in connection with a merger, acquisition, or sale of assets, in which case your information may be transferred to the successor entity.

5. Third-Party Links and Services

Our Website may contain links to third-party websites, including our Amazon storefront and social media profiles. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

6. Biometric Data and AI Skin Analysis

Our AI Skin Analysis feature allows you to upload photographs of your skin to receive personalized cosmetic insights. When you use this feature, we and our AI processing partner collect and process photographs that may contain facial images and derive biometric data including skin texture, tone, pore visibility, and similar cosmetic markers.

Purpose

Biometric data derived from your photos is used solely to provide AI-generated cosmetic analysis and personalized product recommendations. We do not use your facial images for identity verification, advertising targeting, or sale to third parties.

Retention

Biometric data and uploaded photos are retained only as long as necessary to provide the service, and in no event longer than 3 years from collection or your last interaction with us, whichever comes first.

Your Rights

You may request deletion of your uploaded photos and derived biometric data at any time by contacting us at info@misoora.com. Verified deletion requests will be processed within the time required by applicable law.

Illinois Residents – BIPA Notice

If you are an Illinois resident, use of the AI Skin Analysis feature involves collection of biometric identifiers and/or biometric information as defined under the Illinois Biometric Information Privacy Act (BIPA). By enabling the AI feature, you provide your written, informed consent to the collection and use of such biometric data as described in this Privacy Policy. Your biometric data will not be sold, leased, traded, or otherwise disclosed without your consent except as required by applicable law.

Washington Residents – My Health MY Data Act

If you are a Washington State resident, skin analysis data derived from your photos may constitute “consumer health data” under the Washington My Health MY Data Act (MHMDA). We collect this data only with your consent, which you provide when you choose to use the AI Skin Analysis feature. You may withdraw your consent and request deletion of your consumer health data at any time by contacting us at info@misoora.com. We do not sell consumer health data to third parties. Deletion requests will be processed within the time required by applicable law.

7. Cookies and Tracking Technologies

This section serves as our Cookie Policy. We use cookies, pixel tags, web beacons, and similar technologies to operate our services, analyze usage, and deliver relevant advertising.

7.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the site to remember information about your visit and track activity over time and across sites.

7.2 Types of Cookies We Use

Strictly Necessary Cookies

Essential for the Website to function. These enable session management, shopping cart, account login, and checkout security. They cannot be disabled.

Functional Cookies

Remember your preferences and personalize your experience, such as your selected currency, region, recently viewed products, or cookie consent choices.

Analytics Cookies

Help us understand how visitors interact with our Website by collecting aggregated data on page views, traffic sources, and user journeys. Provider: Google Analytics 4 (GA4). Data may be processed on servers in the United States.

Marketing and Advertising Cookies

Used to deliver relevant ads, measure ad campaign performance, and build custom audiences for retargeting. These cookies may track your activity across other websites. Providers: Meta Pixel, TikTok Pixel, Google Ads. We also use server-side conversion APIs (Meta CAPI, TikTok Events API) that transmit event data directly from our servers.

Third-Party Service Cookies

Set by our service providers to deliver their functionality on our Website, such as live chat, email tracking, reviews, social proof, and consent management tools.

7.3 Managing Your Cookie Preferences

You can control cookies through your browser settings. Note that disabling certain cookies may limit Website functionality.

8. Email and SMS Communications

We send the following types of communications:

Transactional messages: order confirmations, shipping updates, billing notices, return instructions, and other messages related to your orders and account. Sent based on your order or account activity and do not require separate opt-in.
Marketing messages: promotional offers, product recommendations, loyalty program updates, and flash sales. These require your prior consent.

You may opt out of marketing emails at any time by clicking the “Unsubscribe” link in any email. You may opt out of SMS by replying STOP to any text message. Standard message and data rates may apply. Opting out of marketing does not affect transactional messages.

9. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with our legal and regulatory obligations (including applicable tax and accounting requirements), resolve disputes, and enforce our agreements. The appropriate retention period depends on the nature of the data, the purpose for which it was collected, and applicable legal requirements.

When personal information is no longer needed for these purposes, we delete or anonymize it in accordance with our internal data management practices.

AI skin analysis photos and biometric data are retained for no longer than 3 years from the date of collection or your last interaction with the AI feature, whichever is earlier. You may request deletion of this data at any time as described in Section 10, and we will comply within the timeframe required by applicable law.

You may request deletion of your personal information at any time as described in Section 10 (Your Privacy Rights).

10. Your Privacy Rights

10.1 General Rights

Depending on your jurisdiction, you may have the right to:

Access: request a copy of the personal information we hold about you.
Correction: request correction of inaccurate or incomplete information.
Deletion: request deletion of your personal information, subject to certain legal exceptions.
Portability: receive your data in a machine-readable format.
Opt-Out: opt out of certain uses of your data, including targeted advertising and sale or sharing of personal information.
Non-Discrimination: we will not discriminate against you for exercising your privacy rights.

To submit a privacy request, contact us at info@misoora.com with the subject line “Privacy Request,” including your name, email address, and description of your request. We will respond within 45 days, with an extension of up to an additional 45 days where reasonably necessary, or as otherwise required by applicable law.

10.2 California Residents – CCPA/CPRA

California residents have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: request disclosure of the categories and specific pieces of personal information we collect, use, and disclose.
Right to Delete: request deletion of your personal information, subject to certain exceptions.
Right to Correct: request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing: we do not sell personal information for monetary consideration. However, our use of advertising cookies and server-side conversion APIs may constitute “sharing” personal information for cross-context behavioral advertising under California law. You may opt out via the “Do Not Sell or Share My Personal Information” link in our website footer.
Right to Limit Use of Sensitive Personal Information: we use sensitive personal information (including biometric data from the AI feature) only to provide the requested service. No additional request is required to limit its use.
Right to Non-Discrimination: we will not treat you differently for exercising your CCPA rights.

We will verify your identity before processing deletion or access requests. Authorized agents may submit requests on your behalf with written authorization.

10.3 Other State Residents

Residents of Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive privacy laws have similar rights to access, correct, delete, and opt out of certain processing, including targeted advertising. Contact us using the information in Section 15 to submit a request.

11. Children’s Privacy

Our Website is intended for users 18 years of age and older. We do not knowingly collect personal information from individuals under the age of 18. If we learn that we have inadvertently collected information from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, please contact us at info@misoora.com.

12. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit, access controls, and secure third-party payment processing. No method of data transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at info@misoora.com.

13. International Users

Our Website is operated in the United States. If you access our Website from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. You acknowledge that your information may be processed in the United States, where data protection laws may differ from those in your jurisdiction.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective Date” at the top of this page and post the updated policy on our Website. Where required by law, we may provide additional notice. Your continued use of the Website after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

For questions, concerns, or to submit a privacy request, please contact us:

MSR GROUP INC

30 N Gould St, Ste 4000, Sheridan, WY 82801, United States

Email: info@misoora.com

Website: misoora.com

For privacy-specific requests, include “Privacy Request” in the subject line. We will respond within 45 days.