Privacy Policy

1. Introduction

This Privacy Policy explains how Talk to Mirror LLC (“Mirror,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Mirror application, the website at talktomirror.com, and related services (the “Service”). By using the Service, you acknowledge this Policy. If you do not agree, do not use the Service.

2. Information We Collect

Information you provide:

• Account information: your name and email address (via your sign-in provider, such as Google or LinkedIn). You may optionally add a mobile phone number in your account settings to receive SMS updates; a phone number is not required to use the Service.
• Payment information: when you purchase, our payment processor collects your payment details and billing address. We receive limited billing information (for example, that a payment succeeded, a subscription’s status, and your billing region); we do not store your full card number.
• Before you have an account: if you begin at our guided start page, we record the answers you give to its short set of questions (for example what you are preparing for, your timeline, the type of role or audience, your level of experience, and what you find hardest), together with how you found us. These answers are stored against a random identifier held in your browser, not against your name, and they are used to set up your session and to recommend a plan. If you go on to create an account, that identifier is linked to it so your answers can tailor future sessions; if you never create an account, the answers remain unlinked to any identified person. We also record a one-way, salted hash of your IP address and your browser’s user-agent string for abuse prevention. We do not store your raw IP address in these records.
• Communications: messages you send us, for example through the contact form.
• Practice inputs: materials you choose to provide for a session. For an interview session you may provide a job description and your resume or CV, either by pasting the text or by selecting or dragging in a file (PDF, Word, or plain-text). Files you provide are processed entirely within your browser to extract their text; the file itself is not uploaded to or stored on our servers. Only the extracted text is transmitted to us, and only to tailor that session’s interviewer and coaching to your target role and background.

Information generated by your use:

• Session data: the text transcript of your practice conversation, the coaching feedback generated for you, per-session skill scores, and longitudinal progress reports. Your live microphone audio is streamed to our real-time voice provider to power the spoken conversation and is processed transiently to do so; Mirror does not record or store audio files of your sessions. We keep the resulting transcript and coaching, not an audio recording.
• Usage and device data: product-analytics events, log data, approximate location derived from IP address, browser and device information, and similar technical data.
• Voice: We process your voice only to run and transcribe your live session. We do not create a voiceprint, a voice-recognition template, or any other biometric identifier from your audio, and we do not use your voice or audio to identify or authenticate you.
• Optional camera coaching (off by default): If you turn on camera coaching, your camera feed is analyzed entirely on your device to estimate eye contact and head position during your session. Your video never leaves your device: no video, images, face templates, or other biometric identifiers are transmitted to us or to anyone else, stored, or used to identify you. Only derived, non-identifying numbers (for example, your eye-contact percentage and how many times you looked away) are saved with your session results. We ask for your explicit consent before your first camera session, and you can turn the camera off at any time.
• Recording consent: Before your first session, we ask you to consent to the recording, transcription, and real-time processing of your session by us and our service providers, as described in this Policy. If you decline, you will not be able to run a live session.
• Please share only what you need for practice: because your session content is processed to generate coaching, we encourage you not to volunteer sensitive personal information (such as health, financial-account, or government-identifier details) that is not necessary for the conversation you are rehearsing.

3. How We Use Information

• To provide the Service: run practice sessions, generate coaching and progress reports, and maintain your history.
• To prevent abuse: enforce trial and usage limits, and detect fraud or misuse.
• To operate payments and manage subscriptions.
• To improve the Service: understand usage, debug, and enhance features, models, and coaching quality (including using de-identified or aggregated data).
• We do not use information that identifies you to train third-party or general-purpose AI models, and our agreements with our AI providers prohibit them from using your content to train their own models. Only de-identified or aggregated data may be used to improve the Service.
• To communicate with you: send service, security, and transactional messages, and respond to your requests.
• To maintain safety, security, and legal compliance, and to enforce our Terms.

Aggregated and de-identified data. We may create aggregated or de-identified data that cannot reasonably be used to identify you, and we may use and publish that data for lawful purposes, including product improvement, research, and public reporting (for example, anonymized statistics about how users improve across sessions). We do not attempt to re-identify de-identified data, and we require the same of our service providers.

4. How We Share Information

We do not sell your personal information. We share it only as follows:

• Service providers (subprocessors) that perform functions on our behalf, described in Section 5, under obligations to protect it.
• Legal and safety: when required by law or legal process, or to protect the rights, safety, and property of Mirror, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your direction or consent.

5. Service Providers (Subprocessors)

We rely on the following categories of providers to operate the Service.

• Authentication and accounts: sign-in identity providers and our database and account platform.
• Real-time conversation: an AI voice-conversation provider and a photorealistic avatar-rendering provider.
• Coaching and analysis: AI model providers that generate your coaching, scores, and progress reports.
• Text messaging: an SMS provider, used only if you opt in to phone updates.
• Payments: a payment processor. We do not store your full card details.
• Hosting and delivery: backend hosting, site and network delivery, and email-routing providers.
• Product analytics: a product-analytics provider.
• Contact form: a form-processing provider.

What our avatar provider receives. Our avatar provider renders the visual avatar only. The only data sent to it is the synthetic audio generated by the AI so the avatar’s lips can move in sync. Your own voice, your words, your transcript, your name, and your account identity are never sent to the avatar provider.

6. Data Retention

We keep your information for as long as your account is active and as needed to provide the Service, then for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described in Section 8. Job descriptions and resumes you provide for an interview session are used only to prepare and coach that session; we do not store this text in your account or session records afterward. As with your conversations, it is processed by our AI service providers described in Section 5 to run and evaluate the session.

Specific periods. We do not store audio recordings of your sessions. We retain your transcripts, coaching, skill scores, and progress reports for as long as your account is active so we can show your history and measure your progress. When you delete your account, we delete or de-identify your transcripts, coaching, skill scores, progress reports, and profile information within thirty (30) days, and any residual copies in encrypted backups are purged within ninety (90) days, except where the law requires longer retention (for example, payment and tax records). De-identified or aggregated data that can no longer reasonably be linked to you may be retained.

7. Security

We take reasonable measures to protect your information. For example, we keep service credentials on our servers rather than in your browser, and we transmit data over encrypted connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing, and to withdraw consent. To make a request, contact us through talktomirror.com/contact; we will respond as required by applicable law and may need to verify your identity.

How to reach us, and how quickly. You can make a privacy request at privacy@talktomirror.com or through talktomirror.com/contact. We will acknowledge and respond within the time required by applicable law (generally within 30 to 45 days) and may need to verify your identity first.

Sensitive information. Some information we process, such as coaching feedback that touches on your emotional state, may be treated as “sensitive personal information” under California law. Where that requirement applies to us, California residents may direct us to limit the use of such information, and we will provide a “Limit the Use of My Sensitive Personal Information” option.

Account deletion. You can delete your account and its associated personal information at any time from your account page, or by contacting us through talktomirror.com/contact. When you delete your account, we will delete or de-identify your personal information on the schedule described in Section 6, except for limited information we are permitted or required to retain for legal, security, tax, and financial-record purposes.

• California residents (CCPA/CPRA): you have rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information. We do not sell your personal information. You will not be discriminated against for exercising these rights.
• EU/UK/EEA residents (GDPR/UK GDPR): you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority. Our legal bases include performance of a contract, our legitimate interests in operating and improving the Service, consent where required, and compliance with law.

Consumer health data (Washington and Nevada). Mirror is not a health service and does not seek health information; however, statements you volunteer during sessions could reveal information about your emotional wellbeing that some state laws treat as consumer health data. Our separate Consumer Health Data Privacy Notice, published at talktomirror.com/health-data and linked from our homepage, explains the categories we may collect, our purposes, our sources, what we share and with whom, and how to exercise your rights of access, withdrawal of consent, deletion, and appeal.

9. Children’s Privacy

The Service is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

10. International Users

We operate in the United States, and your information is processed and stored in the United States and other countries where our providers operate. Those countries may have data-protection laws different from your own. By using the Service, you understand your information may be transferred to and processed in the United States.

11. Cookies and Analytics

We use cookies and similar technologies for essential functions (such as keeping you signed in) and for product analytics to understand and improve usage. You can control cookies through your browser settings, though some features may not work without them.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice where appropriate. Your continued use after changes take effect constitutes acknowledgment of the updated Policy.

13. Contact

Questions or requests about your privacy? Contact Talk to Mirror LLC through the contact form at talktomirror.com/contact.