Mira privacy policy

At a glance

• What we collect: account and contact details, the work you submit, the coding-agent sessions behind it, IP addresses, and platform usage data.
• Why we collect it: to operate and secure the Platform, review submissions, and improve our services.
• How we share it: with service providers who help us operate the Platform. We do not sell your personal information.
• Your rights: you may request access to, correction of, or deletion of your personal information, subject to applicable exceptions. See "Your rights and choices" below.

Scope and definitions

Personal information means information that identifies, relates to, or could reasonably be linked to you, directly or indirectly.

Work Product means code, datasets, annotations, reviews, comments, and other content you submit through the Platform. Your agreement with Datacurve governs Work Product. This Policy applies to any personal information it contains.

This Policy applies to personal information we process in connection with your use of the Platform. It does not apply to information that has been de-identified or aggregated in a manner that no longer identifies you.

Information we collect

a. Information you provide

• Account details: your name and email address.
• Payment account: the Shipd account your earnings are paid to, when one is linked.
• Communications: messages you send us, including support requests and feedback.

b. Information collected automatically

• IP address and general location derived from IP.
• Session and behavioral data: how you interact with the Platform, including pages visited, features used, activity patterns, clicks and scrolling, and recordings of your sessions that hide all text and everything you type.
• Browser information: browser type and operating system, page load performance, and errors the Platform hits in your browser.

c. Coding-agent sessions

When you run mira submit, the Mira CLI reads the session records that coding agents (such as Claude Code, Codex, Cursor, Gemini CLI, Grok, Muse Code, OpenCode and Antigravity) keep on your computer, for the sessions that ran in that submission's folder after you created it with mira new, and for any session that made a commit in that folder, wherever it started. For each, it uploads what happened after you accepted the notice on this when signing in to the CLI: the session's prompts, the agent's replies, its tool calls and their results, the models used, and which of your commits the agent made, after removing credentials it recognizes on your computer. It uploads no other sessions, and nothing from before you accept.

d. Information from sign-in providers

If you sign in with Shipd, Shipd shares your name, email address, profile picture and Shipd user ID with us, as you authorize on its consent screen. We use your Shipd user ID to pay your earnings to that Shipd account. We do not receive your Shipd password.

e. Discord

If you link a Discord account, we store its Discord user ID. Mira's Discord bot uses it to give you the roles your membership, tier and badges earn in a pipeline's Discord server, to add your linked account to that server using the guilds.join permission you grant when you link it, to open a private channel or check-in thread for you there, and to answer the /mira command. The bot does not read your messages.

How we use information

We use personal information to:

• Operate and deliver the Platform, including managing your account and processing and reviewing your submissions.
• Secure the Platform, including detecting and preventing fraud, unauthorized access, and misuse of the Platform.
• Improve the Platform using aggregated or de-identified usage data to understand how the Platform is used and to develop new features.
• Evaluate your submissions, including which parts a coding agent produced and how you worked with it. This evaluation can inform which work we offer you.
• Communicate with you, including responding to support requests and sending service-related notices.

We do not use your personal information, such as your name, email address and account data, to train AI models or build generalized data products. Work Product you submit is used under your agreement with Datacurve, including as AI training data.

How we share information

We share personal information only as necessary:

• Service providers: third parties who help us operate the Platform, including hosting and authentication. Each service provider processes your data only as instructed and subject to confidentiality obligations.
• Payment providers: Shipd, to pay you for accepted work. We share the details needed to send payment, such as your email address and earnings.
• Legal and compliance: when required to respond to lawful legal process, comply with applicable laws, enforce our agreements, or protect the rights or safety of Datacurve, its users, or others.
• Corporate transactions: in connection with a merger, acquisition, or sale of all or substantially all of our assets, provided any successor entity is bound by this Policy.

We do not sell your personal information.

Data retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, including:

• Account information: for the duration of your account and as required for legal compliance.
• Coding-agent sessions: for as long as the submission they belong to, or until you ask us to delete them or delete your account.
• IP logs and session data: in accordance with our standard log retention practices and applicable legal requirements.
• Communications and support records: for a reasonable period to resolve disputes and improve our services.

After applicable retention periods, personal information is deleted or de-identified. We may retain aggregated or de-identified data indefinitely.

Data security

We implement administrative, technical, and physical measures designed to protect your personal information from unauthorized access, loss, misuse, or disclosure. No system is completely secure. In the event of a data incident affecting your personal information, we will notify you as required by applicable law.

International transfers

Datacurve operates primarily in the United States, and your personal information may be processed and stored in the United States or other jurisdictions where our service providers operate. If you are located outside the United States, including in the European Union or European Economic Area, your information may be transferred to and processed in jurisdictions with different data protection laws. By using the Platform, you consent to these transfers.

Your rights and choices

We extend privacy rights to all Platform users consistent with applicable law. Depending on where you are located, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to the exceptions described below.
• Receive a portable copy of your personal information.
• Object to or restrict certain processing activities.

To submit a request, contact us at the email address below. We will respond within the timeframe required by applicable law.

Deleting your account. You can also delete your account yourself under Settings. It deletes your name, email, picture, coding-agent sessions, CLI tokens, notifications and settings, memberships, reactions and unpublished comment drafts at once, and signs you out. Your payout records, which tax and accounting law require us to keep, and the work you submitted and comments you published stay, without your name. If we owe you earnings and you have no Shipd account, which we pay them to and find by your email, you can delete your account once you create one.

Exceptions to deletion. We may retain certain personal information notwithstanding a deletion request where retention is necessary to comply with a legal obligation, resolve a dispute, enforce our agreements, or protect the rights or safety of Datacurve or others. Where we are unable to fulfill a deletion request in full, we will inform you of the reason.

GDPR and EEA residents. If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority. Our legal bases for processing your personal information are the performance of our agreement with you (Article 6(1)(b)), compliance with legal obligations (Article 6(1)(c)), and our legitimate interests in operating and securing the Platform (Article 6(1)(f)).

Cookies

We use cookies to keep you signed in, secure your account, remember your display preferences, and measure how the Platform is used through our analytics provider, PostHog. You can manage cookies through your browser settings; some features may not function properly if cookies are disabled.

Children's privacy

The Platform is not directed to individuals under 18, and we do not knowingly collect personal information from minors. If you believe we may have collected personal information from a person under 18, contact us at the email address below.

Changes to this policy

We may update this Policy from time to time. The updated Policy will be posted on the Platform with a revised effective date. Your continued use of the Platform after any update constitutes acceptance of the revised Policy.

Contact us

If you have questions about this Policy or wish to exercise your privacy rights, contact us by email at [email protected]. For data deletion or other privacy rights requests, include "Privacy Rights Request" in the subject line and provide enough detail for us to identify your account.