How we handle your career data.
Mira is built around resumes, job descriptions, and interview transcripts. This page is the plain-English version of how we handle them. The full legal terms live in the Terms of Service.
Last updated · May 2026
The short version
- Your resume, job descriptions, and transcripts are private to your account.
- We do not sell your data and we do not train models on your content.
- You can delete any session, resume, or your whole account from settings.
1. What we collect
We collect only what we need to run the product and improve your prep experience.
- Account info — your email, name, a password hash (never your raw password), and basic preferences.
- Resumes & job descriptions you upload or paste, plus the structured analysis we generate from them (skills, scope, fit score, gap list).
- Interview sessions — metadata, voice-call transcripts, scoring rubrics, and feedback reports generated from your mocks.
- Product analytics — page views, anonymous usage events, and crash/error reports. We never send raw resume or JD content to analytics tools.
- Technical metadata — IP address, user agent, and timestamps for security, fraud prevention, and rate-limiting.
2. What we do not do
- We do not sell your personal data or your career history.
- We do not send raw resume or JD content to third-party analytics, ad-tech, or marketing tools.
- We do not impersonate human recruiters. Mira is an AI recruiter for practice only.
- We do not guarantee interview outcomes or job offers.
- We do not share your content with employers, recruiters, or hiring platforms.
3. AI & model training
Your content is sent to AI providers strictly to generate youranalysis, plan, and feedback. We do not use your resumes, job descriptions, transcripts, or feedback reports to train, fine-tune, or improve any AI model — ours or our providers’. Where supported, we explicitly opt out of provider-side training and zero-day retention.
4. Sub-processors & third parties
We rely on a short list of vetted providers to deliver the service. Each one only sees the data it strictly needs.
- Cloud hosting & database — application hosting and a managed Postgres database for account data, resumes, JDs, transcripts, and reports.
- AI provider — large-language-model inference for parsing, fit scoring, interview-plan generation, and feedback. Sees the resume / JD / transcript content needed for that specific call.
- Voice provider — real-time voice infrastructure for the mock interview call and post-call transcript. Audio is processed for the duration of the call and a transcript is returned to us.
- Authentication & email — sign-in, password resets, and transactional email.
- Error monitoring & analytics — privacy-respecting product analytics and crash reporting. Configured to scrub raw resume / JD / transcript content.
Email shaheryar@wetalkstartups.com for the current sub-processor list.
5. Voice calls
Your microphone audio is streamed to our voice provider for real-time conversation with the AI recruiter. After the call we receive a transcript, which we store alongside the session and use to generate your feedback report. You can delete the session at any time, which removes the transcript and report from our primary store.
The microphone is only active for the duration of the call. Closing the call stops the stream.
6. Security
- Data is transmitted over TLS / HTTPS in transit.
- Database storage is encrypted at rest by our managed database provider.
- Passwords are stored as bcrypt hashes — we never see or store the raw password.
- Provider API keys (AI, voice) are stored server-side only and never shipped to the browser.
- Access to production systems is restricted to a small number of WeTalkStartups maintainers.
No system is perfectly secure. If you suspect a vulnerability, please email shaheryar@wetalkstartups.com.
7. Data retention
- Resumes, JDs, sessions, transcripts, and reports are retained for as long as your account exists, so you can revisit and compare past prep.
- Deleted items are removed from our primary store immediately. Encrypted backups roll over within 30 days.
- Account deletion removes your profile and all associated content within 30 days, except where we’re required to retain limited records (e.g. fraud / abuse, tax, or legal obligations).
- Aggregate, non-identifying analytics (e.g. counts of mock interviews per role category) may be retained indefinitely.
8. Your rights
Depending on where you live, you may have rights to access, correct, export, restrict, or delete the personal data we hold about you, and to object to certain processing. You can:
- Update your name and email from Settings.
- Delete an individual interview session, resume, or your entire account from Settings.
- Email shaheryar@wetalkstartups.com to request an export, lodge a complaint, or exercise any other right.
We do not discriminate against users who exercise their privacy rights.
9. Cookies & sessions
We use a small number of strictly-necessary cookies for sign-in, CSRF protection, and session management. We may also use a first-party analytics cookie that does not track you across other sites. We do not run third-party advertising trackers.
10. International users
Mira is operated by WeTalkStartups. Your data may be processed in countries other than the one you live in, including regions where our providers operate. We rely on appropriate safeguards (e.g. standard contractual clauses) where required by law.
11. Children
Mira is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated by email or via an in-product notice before they take effect. The “Last updated” date at the top of this page always reflects the current version.
13. Deletion
From your settings, you can delete an individual interview session, a resume, or your entire account. Deletion is immediate and removes data from our primary store. Backups roll over within 30 days.
Manage your data14. Contact
Questions, privacy requests, data exports, or deletion — reach the WeTalkStartups team directly. We respond to verified requests within 30 days.
shaheryar@wetalkstartups.com