MiraX — Privacy Policy

This Privacy Policy explains how JustOG, Inc. ("JustOG", "we", "us"), which operates MiraX, collects, uses, and shares personal information in connection with the MiraX website and services (the "Service"). By using the Service you agree to this Policy and the Terms of Use.

The ChatGPT Ads Pixel Helper browser extension is covered by its own, separate policy — see Pixel Helper privacy. It has no account, sends nothing to us, and is not covered here.

1. Information we collect

A. From you (our user)

Account & identity — email and profile info you provide or that comes from a sign-in provider (e.g., Google), handled by Supabase Auth.
Enquiries — what you tell us in the engagement form (what you're building, where you are today, budget range, how you heard about us).
Device & log data — IP address, browser/user-agent, and log data.
Consent & compliance records — a record of your acceptance of our terms (versions, timestamp, IP, user-agent), kept as evidence and for compliance.
Payments — processed by our payment provider (Stripe); we do not store your full card number.
Communications — messages you send us.

B. Client engagement data

For clients, the material needed to do the work: your product and market information, the questions your buyers ask, and the measurement results we produce for you. This stays yours; we do not pool it or resell it.

What we do not collect. Your account credentials, your private messages, your own business or sales data, or anything from a browser extension of ours.

2. How we use information

Provide, operate, secure, and improve the Service.
Evaluate and respond to engagement enquiries, and deliver client work.
Administer accounts and payments.
Detect, prevent, and address fraud, abuse, scraping/farming, unauthorized access, cracking, and security issues, and enforce our Terms.
Communicate with you about your account and the Service.
Comply with law and protect our and others' rights, safety, and property.

3. How we share information

Service providers / processors that run the Service for us — e.g., Supabase (database/auth), Vercel (hosting), Stripe (payments), and email delivery. They may process data only to provide services to us.
Affiliates and successors — with our corporate affiliates, and in connection with a merger, acquisition, financing, or sale of assets.
Legal, safety & enforcement — to comply with law, respond to lawful requests, enforce our Terms, and protect our intellectual property and stop unauthorized access, cracking, scraping, or misuse of the Service.

We do not sell your personal information for money.

4. Legal bases (GDPR / UK GDPR)

Where this law applies, we process personal data on these bases:

Contract — to create and run your account and provide the Service to you.
Legitimate interests — to run and secure the Service, evaluate enquiries, prevent abuse and unauthorized use, and improve what we offer — balanced against the rights of the individuals concerned.
Legal obligation — recordkeeping, tax, and responding to lawful requests.
Consent — where we specifically rely on it.

5. Discontinued creator pool

MiraX previously operated a creator-marketing product whose browser extension contributed creators' publicly available profile information to a shared pool. That product was discontinued on 2026-09-20: the extension is no longer distributed, the pool is closed to new contributions, and no data from it is shared with anyone. Residual records are being deleted. A creator may ask us to delete any remaining information about them by contacting contact@getmirax.com; we will act within a reasonable time and may retain the minimal record needed to honor the request.

6. Cookies & tracking

Our website uses only essential cookies for authentication, security, and your preferences. We do not currently use advertising or cross-site tracking cookies. If that changes, we will update this Policy and, where required, obtain your consent.

7. Data retention

We keep personal information as long as needed to provide and improve the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Records from the discontinued creator pool (§5) are retained only until deletion is complete.

8. Security

We use reasonable technical and organizational measures (e.g., encryption in transit, access controls, server-side-only access to stored data). No system is 100% secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, to withdraw consent, and to opt out of any sale/sharing of personal information. We do not sell users' personal information. To exercise rights, contact contact@getmirax.com; we will verify and respond as required by applicable law, and honor Global Privacy Control (GPC) signals where required. You may also complain to your local data-protection authority (we ask you contact us first).

10. Children

The Service is for adults (18+) and not directed to children; we do not knowingly collect their information.

11. International transfers

We are based in the United States and use providers there and elsewhere. Where we transfer personal data out of the EEA/UK/Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses or another lawful mechanism.

12. Changes

We may update this Policy; material changes will be posted with a new "Last updated" date.

13. Contact

Questions or privacy requests: contact@getmirax.com, JustOG, Inc., 2010 El Camino Real #1125, Santa Clara, CA 95050.

Last updated: 2026-09-20