← TalkMirror

Privacy Policy

Version 1.0 · Effective 2026-08-02

This policy describes how TalkMirror handles data today. Bracketed items such as [OPERATOR], [CONTACT_EMAIL], and [HOSTING_REGION] are placeholders to be completed before public launch. This page is not legal advice.

Who is responsible

[OPERATOR] is responsible for the personal data processed through TalkMirror (the “Service”) and acts as the data controller. For any privacy question or request, contact [CONTACT_EMAIL].

What we collect

  • Account data: your email address, an optional display name, and account timestamps (created, last login, onboarding).
  • Content you provide: the conversations you upload as text, chat exports, screenshots, PDFs, documents, or audio — which frequently contain other people’s messages and personal data — together with the participant labels you assign, the AI-generated analysis, and any follow-up questions and answers.
  • Security and technical data: one-time sign-in codes (stored only as a hash), and, for sign-in and consent events, your IP address and browser user-agent, used for security, rate-limiting, and keeping a record of consent.

Why we use it and our legal bases

We use account and content data to provide the Service (to perform our contract with you) and for security and abuse prevention (our legitimate interests). Where your uploaded content contains other people’s data, we rely on your confirmation that you have the right to provide it. Where the law requires consent for certain data, that consent is your responsibility to obtain from the people concerned.

AI providers and international transfers

To generate an analysis and answer follow-up questions, the conversation you provide is sent to third-party AI providers acting as our processors. This may involve transferring data internationally, using appropriate safeguards where required. Our current infrastructure is hosted in [HOSTING_REGION]. A current list of subprocessors is available on request at [CONTACT_EMAIL].

Retention

Your investigations remain available in your account until deleted. One-time codes expire shortly after they are issued. Security and consent records are kept as long as needed for their purpose. Specific retention periods are being finalized and will be stated here ([RETENTION_PERIODS]).

Your rights

Depending on where you live (including under the GDPR, UK GDPR, PIPEDA, the Australian Privacy Principles, and US state laws), you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To make a request, contact [CONTACT_EMAIL]. If someone’s data appears in a conversation another person uploaded, they can also contact us at that address to ask us to review and act on it.

Cookies

TalkMirror uses a single essential cookie to keep you signed in. We do not use advertising, analytics, or other non-essential cookies, so there is no cookie banner.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect their data.

Changes and contact

We may update this policy; the version and effective date at the top will change. For any question or to exercise a right, contact [CONTACT_EMAIL].