DRAFT TEMPLATE · v1 · needs legal review before the pilot.
Privacy Notice
Who is the controller
For individual (solo) use, Miirae Core is the controller of your personal data. For team use, the enrolling organization is the controller and Miirae Core is the processor acting on its instructions.
What we collect
- Account data: email and a hashed password.
- Session content: your interview messages, pasted text, uploaded documents, or a linked URL's text — the evidence used to generate your report.
- Derived data: the CCI report and intermediate scores.
- Operational data: timestamps, consent records, and (for team use) an audit log of privileged access.
Why we process it (lawful basis)
- Consent (Art. 6(1)(a)) for generating your report from the content you submit.
- Contract (Art. 6(1)(b)) to provide the account and Service you request.
- Legitimate interests (Art. 6(1)(f)) for security and abuse prevention.
Team visibility
By default your team administrator sees only anonymized aggregate results under an org-assigned pseudonym. A named view of your individual report is possible only if you grant "named visibility" consent, which you can revoke at any time from your account. Every named access is logged.
Retention
We keep your data until you delete it or your account is erased. Specific retention periods to be set by counsel.
Your rights
You may access, export, correct, or erase your data, and withdraw consent. Use your account to export or permanently delete your data, or contact us. You may also lodge a complaint with your supervisory authority.
Sub-processors
We use service providers for hosting, email delivery, and LLM processing of your text. A current sub-processor list is to be maintained by counsel.
Contact
privacy@your-company-domain (to be completed).