# Privacy & Compliance

Source: https://docs.mira.day/en/docs/match-quality-and-trust/privacy-policy

> How Mira collects, uses, and protects candidate and user data, and the privacy regulations it meets.



This page summarizes how Mira handles data and the privacy regulations it's built to meet. It's a summary for quick reference, the full, authoritative policy lives at [mira.day/privacy](https://www.mira.day/privacy).

***

What we collect [#what-we-collect]

| Data type                              | Purpose                                                                                                                                    |
| -------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
| **Account information**                | Name, email, company, role, to create and manage your account.                                                                             |
| **Usage data**                         | Tasks created, searches performed, features used, to operate and improve the product.                                                      |
| **Candidate data you upload**          | Résumés and candidate information you import, to power your own searches.                                                                  |
| **Candidate data from public sources** | Public résumés and candidate data that Mira searches, filters, and processes under applicable lawful bases to provide recruiting services. |

How we use your data [#how-we-use-your-data]

* To provide and improve the Mira platform.
* To refine matching quality over time based on your usage.
* To communicate about your account and product updates.
* To meet legal obligations.

What we don't do [#what-we-dont-do]

* We don't sell your personal data.
* We don't share your private candidate data with other users.
* We don't use your candidate or user data to train AI models, and our third-party AI providers are contractually prohibited from retaining your data for training.
* We don't make hiring decisions automatically, results are for your review, with a human in the loop.
* We don't track your browsing outside of the Mira platform.

Regulations and your rights [#regulations-and-your-rights]

The full policy at [mira.day/privacy](https://www.mira.day/privacy) is written to meet the GDPR and UK GDPR (with the UK Data Protection Act 2018), the CCPA/CPRA and other US state privacy laws (Virginia, Colorado, Connecticut, and Texas), and the EU AI Act. It also lists the retention period for each category of data.

Candidates, including people who are not Mira users, can request access to or deletion of their data through the contact listed in the full policy. Verified deletion requests are answered within 30 days, and deleted candidates are added to a permanent opt-out list so their data isn't processed again.

What's next [#whats-next]

* [What Mira Can & Can't Do](/en/docs/match-quality-and-trust/what-mira-can-and-cant-do): the human-in-the-loop limits behind these commitments.
* [Where Candidates Come From](/en/docs/match-quality-and-trust/where-candidates-come-from): the public data Mira processes.