YOUR MOMENTS DESERVE CARE

Your privacy at Mira.

Pre-launch policy draft. Live media processing and public sharing are closed until the operator completes this policy and approves the provider’s data terms.

Accounts

We store your email address, display name, account status, credit balance, and transaction history. Google sign-in uses verified identity information; we do not receive your Google password. Email sign-in links are short-lived and single use.

Photos, GIFs, and videos

This public preview does not sign in, upload, generate, charge, or share. Nothing is sent or saved. When the studio is open, media is stored privately for up to 30 days, and you can delete it sooner. Live processing sends selected media to a third-party processing provider; its name, processing region, retention period, and contractual privacy terms must be published here before live processing opens.

Sharing and deletion

Your creations are private until you deliberately create a share link. Anyone with that link may view the shared result. Revoking a share disables further access through that page. A previously issued temporary media URL can remain valid for up to five minutes. Deleting a creation schedules stored files and provider copies for removal; failed deletions are retried.

Payments and security

Stripe handles payment details. Mira records order identifiers and credits, but does not store card numbers. Essential cookies maintain sign-in and protect OAuth login. Cloudflare Turnstile can process technical device information to prevent automated abuse. We do not add advertising trackers or persist uploaded media in application logs.

Training and biometric data

Mira does not use your uploads to train models. Live processing will only be enabled with a reviewed provider whose contract defines permitted use, retention, and deletion. Faces detected in a task are used for that task’s mapping, not to establish a person’s identity.

Before public launch

The operator must publish its legal identity and contact address, the actual processing provider, processing locations, retention and backup periods for account records, applicable legal basis and rights request procedure, and the final content policy. Until then this document is a draft, not a claim of completed regulatory review.