MiraX — Privacy Policy
This Privacy Policy explains how JustOG, Inc. ("JustOG", "we", "us"), which operates MiraX, collects, uses, and shares personal information in connection with MiraX's software, extension, and services (the "Service"). By using the Service you agree to this Policy and the Terms of Use.
1. Information we collect
A. From you (our user)
- Account & identity — email and profile info you provide or that comes from a sign-in provider (e.g., Google), handled by Supabase Auth.
- Entitlement & usage — your license/entitlement, plan, quota usage, features used, and actions taken in the Service.
- Device & log data — IP address, browser/user-agent, and log data.
- Consent & compliance records — a record of your acceptance of our terms (versions, timestamp, IP, user-agent), kept as evidence and for compliance.
- Payments — processed by our payment provider (Stripe); we do not store your full card number.
- Communications — messages you send us.
B. Creator information contributed to the shared pool (about third parties)
- While you use MiraX in your browser, the Service observes and contributes the publicly available information of the creators you encounter — platform, handle, display name, follower count, public bio, category/region, and public contact details (e.g., an email a creator has published on their public profile) — to a shared pool we operate and make available to our users. This data comes from creators' own public profiles, not from private sources.
What we do not collect. Your account credentials, your private messages/DMs, your own business or sales data, and creators' non-public information.
2. How we use information
- Provide, operate, secure, and improve the Service and our products and models.
- Build, maintain, curate, and commercialize the shared creator pool as a core feature of the Service.
- Administer accounts, entitlements, quotas, and payments.
- Detect, prevent, and address fraud, abuse, scraping/farming, unauthorized access, cracking, and security issues, and enforce our Terms.
- Communicate with you about your account and the Service.
- Comply with law and protect our and others' rights, safety, and property.
3. How we share information
- Service providers / processors that run the Service for us — e.g., Supabase (database/auth), Vercel (hosting), Stripe (payments), and email delivery. They may process data only to provide services to us.
- Other MiraX users — the pooled creator information is made available to users through the Service; this is a core function of MiraX, not a sale of your personal data.
- Affiliates and successors — with our corporate affiliates, and in connection with a merger, acquisition, financing, or sale of assets.
- Legal, safety & enforcement — to comply with law, respond to lawful requests, enforce our Terms, and protect our intellectual property and stop unauthorized access, cracking, scraping, or misuse of the Service.
We do not sell your personal information for money.
4. Legal bases (GDPR / UK GDPR)
Where this law applies, we process personal data on these bases:
- Contract — to create and run your account and provide the Service to you.
- Legitimate interests — to operate and commercialize the shared pool, process creators' publicly available business-contact information for creator-marketing purposes, secure the Service, prevent abuse and unauthorized use, and improve our products — balanced against the rights of the individuals concerned.
- Legal obligation — recordkeeping, tax, and responding to lawful requests.
- Consent — where we specifically rely on it.
5. Creators & removal
The pool holds creators' publicly available profile information for creator-marketing discovery. A creator may request removal of their information from the pool by contacting contact@getmirax.com; we will act within a reasonable time. We may retain minimal records needed to honor the removal and for legal compliance.
6. Cookies & tracking
Our website uses only essential cookies for authentication, security, and your preferences. We do not currently use advertising or cross-site tracking cookies. If that changes, we will update this Policy and, where required, obtain your consent.
7. Data retention
We keep personal information as long as needed to provide and improve the Service, operate the pool, comply with legal obligations, resolve disputes, and enforce our agreements — which may be for the life of the pool and our products.
8. Security
We use reasonable technical and organizational measures (e.g., encryption in transit, access controls, service-role-only access to the pool). No system is 100% secure, and we cannot guarantee absolute security.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, to withdraw consent, and to opt out of any sale/sharing of personal information. We do not sell users' personal information. To exercise rights, contact contact@getmirax.com; we will verify and respond as required by applicable law, and honor Global Privacy Control (GPC) signals where required. You may also complain to your local data-protection authority (we ask you contact us first).
10. Children
The Service is for adults (18+) and not directed to children; we do not knowingly collect their information.
11. International transfers
We are based in the United States and use providers there and elsewhere. Where we transfer personal data out of the EEA/UK/Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses or another lawful mechanism.
12. Changes
We may update this Policy; material changes will be posted with a new "Last updated" date.
13. Contact
Questions or privacy requests: contact@getmirax.com, JustOG, Inc., 2010 El Camino Real #1125, Santa Clara, CA 95050.
Last updated: 2026-07-21