Who we are
Mira provides AI styling conversations and virtual try-on experiences for fashion storefronts, together with a workspace for authorized staff to manage client catalogues and integrations. Mira is operated by Meritt Dev Limited, registered in England and Wales (company number 16581026), at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, referred to as “we” in this policy. Contact us about privacy at [email protected].
This policy covers Mira’s workspace, customer experience and embedded widget. The store you visit has its own privacy policy for its website, customer accounts, orders and payments. Its use of Mira may also be governed by its agreement with us.
Information we process
- Workspace accounts: your name, email address, profile image where supplied, authentication identifiers, staff role and session information. Clerk provides authentication. If you choose Google sign-in, Google supplies the identity information you authorize, such as your Google account identifier, email address, name and profile image. Mira uses this to authenticate you and manage workspace access. Google sign-in does not give Mira access to your Gmail messages, Drive files or contacts.
- Try-on photos: images you choose to upload, image dimensions and format, processing information such as image masks, and the generated try-on images. Your photo may include your face, body, clothing and background. Only upload images you are entitled to use.
- Conversations and selections: messages, styling requests, selected products and variants, generated responses, and the history needed to continue a conversation. If a voice feature is available and you choose to use it, microphone audio and transcripts are processed to provide that feature.
- Visitor and activity information: a visitor or storefront-provided user identifier, session and generation identifiers, timestamps, product interactions, generation status, errors and service-usage information. Infrastructure and authentication providers may also process device, browser, network and security information when serving requests.
- Client administration: business and storefront details, catalogue data, integration credentials and configuration supplied by authorized client administrators.
Why we use it
We use this information to authenticate users, apply staff permissions, provide styling and virtual try-on, maintain conversation history, operate client integrations, diagnose failures, moderate uploads, prevent abuse, and support users and clients. We also record generation usage and operational performance to run the service.
AI-generated images are previews, not measurements or guarantees of fit. Generating an image requires processing the photo and instructions you supply.
Service providers and access
We use service providers to operate Mira, including Clerk for authentication, Google for optional sign-in, OpenAI for AI responses, image generation and moderation, Amazon Web Services for image storage, MongoDB Atlas for application records, and hosting and network providers for serving the application. Relevant photos, prompts, messages and product information are sent to AI providers when needed to fulfill your request. Google sign-in information is used for account access rather than as an input to try-on generation.
Authorized Mira staff can access operational records and generated results to administer the service and investigate problems. A storefront may supply its own customer identifier to associate your Mira session with its customer account.
We may disclose information when required by applicable law or necessary to protect the service and its users. We do not sell personal information. Mira does not use your uploaded photos, conversations or Google sign-in information for targeted advertising.
Storage and retention
Uploaded photos are scheduled for deletion after approximately 24 hours unless a longer-retention option is offered and you explicitly choose it. Background processing can affect the exact deletion time. Where available, deleting a photo revokes future access through Mira and requests deletion of its stored image and mask.
Deleting or expiring an uploaded photo does not automatically delete generated images, conversation history, generation records or operational logs. These records currently have no automatic expiry in Mira. These records are retained to provide history, support and operational records until removed through an applicable deletion process. You can request deletion by emailing [email protected]. We retain information only as long as reasonably necessary for these purposes or legal obligations. Choosing Download creates a copy on your device; that copy is under your control.
Service providers and backups may retain information under their own applicable retention schedules. We will explain any applicable retention exception when responding to a deletion request.
Cookies and browser storage
Clerk uses authentication mechanisms to maintain workspace sessions. Mira’s widget uses browser local storage to keep a visitor identifier and token so returning visitors can continue their experience. Visitor tokens expire after 30 days and may be renewed. Clearing browser storage may disconnect your browser from its previous Mira history; it does not itself delete records already stored by Mira. The storefront’s own cookies are covered by its policy.
Your choices and requests
You can choose not to upload a photo or use an optional microphone feature. You can revoke Google access through your Google account settings. Revoking Google access does not itself delete your Mira account or its existing records. To request access, correction or deletion, contact [email protected] and identify the storefront and account or session involved. We may need to verify your identity before acting on a request. Applicable rights and exceptions depend on your location.
Where applicable, you may also request restriction or portability, object to processing, and complain to your local data protection authority, including the UK Information Commissioner’s Office. We process information to provide requested services, pursue legitimate interests in security and support, comply with legal obligations, and obtain consent where required.
Security and international processing
Mira uses access controls, encrypted connections and time-limited image URLs. No system can guarantee absolute security. Our providers may process information in countries other than your own. Where required, international processing is subject to applicable data protection safeguards.
Children
Mira is intended for users aged 16 and over. If you believe a child has provided personal information, contact [email protected] so we can investigate and remove it where appropriate.
Changes
We will update this policy when our practices change and show the effective date on the published version. For material changes, we may also provide notice through the service or by email where appropriate.