Privacy & Compliance
How MiraDay collects, uses, and protects candidate and user data, and the privacy regulations it meets.
This page summarizes how MiraDay handles data and the privacy regulations it's built to meet. It's a summary for quick reference. The full, authoritative policy lives at mira.day/privacy.
What we collect
| Data type | Purpose |
|---|---|
| Account information | Name, email, company, role, to create and manage your account. |
| Usage data | Channels created, searches performed, features used, to operate and improve the product. |
| Candidate data you upload | Résumés and candidate information you import, to power your own searches. |
| Candidate data from public sources and data providers | Public résumés and candidate data, plus professional contact data licensed from data providers, that Mira searches, filters, and processes under applicable lawful bases to provide recruiting services. |
| Mira Browser Extension data | While the extension is active: the content of pages you visit (including pages you're signed in to), screenshots, URLs and navigation, form inputs (password fields are masked), operation logs, and session cookies, to carry out the tasks you ask for. |
How we use your data
- To provide and improve the MiraDay platform.
- To refine matching quality over time based on your usage.
- To communicate about your account and product updates.
- To meet legal obligations.
What we don't do
- We don't sell your personal data.
- We don't share your private candidate data with other users.
- We don't use your candidate or user data to train AI models, and our third-party AI providers are contractually prohibited from retaining your data for training.
- We don't make hiring decisions automatically. Results are for your review, with a human in the loop.
Regulations and your rights
The full policy at mira.day/privacy is written to meet the GDPR and UK GDPR (with the UK Data Protection Act 2018), the CCPA/CPRA and other US state privacy laws (Virginia, Colorado, Connecticut, and Texas), and the EU AI Act. It also lists the retention period for each category of data.
Candidates, including people who are not MiraDay users, can request access to or deletion of their data through the contact listed in the full policy. Verified deletion requests are answered within 30 days, and deleted candidates are added to a permanent opt-out list so their data isn't processed again.
What's next
- What MiraDay Can & Can't Do: the human-in-the-loop limits behind these commitments.
- Where Candidates Come From: the public data Mira processes.