Privacy Policy

Mira is an analytics tool for Instagram and TikTok and an AI-assisted content generation tool. It analyzes the metrics of the Instagram and TikTok accounts that the user voluntarily connects, and uses them to produce ideas and scripts based on the user's own publishing history.

Mira is operated by Carrizo Exequiel Lautaro, a registered sole proprietor (monotributista) with AFIP/ARCA (Argentina).

For any question about this policy or about the data we process, contact exelcarrizo@gmail.com.

The data we handle comes from five different sources:

1. Account data

• Email address, obtained when signing up with email and password or through Google sign-in.
• An internal user identifier.

2. Instagram data

Obtained through Meta's official API (Instagram Graph API) after the user explicitly authorizes the connection, and only from the professional account the user chooses:

• Instagram account identifier, username and follower count.
• Posts and reels: identifier, link, caption, thumbnail and publication date.
• Metrics for each post (reach, plays, likes, comments, saves, shares) and their daily evolution.
• Aggregated, anonymous audience demographics, and historical follower counts.
• Captures of story metrics.
• A Meta access token, needed to query the API on the user's behalf.

We do not access private messages, third-party content, or personal data of the account's followers. The demographic data provided by Meta is aggregated and does not identify individuals.

3. TikTok data

Obtained through TikTok's official API (Login Kit and Display API) after the user explicitly authorizes the connection, and only from the account the user authorizes. We request these permissions (scopes), and only these:

• user.info.basic: display name and avatar, to show which account is connected.
• user.info.stats: follower, following, total likes and video counts, to chart account growth.
• video.list: public videos and their view, like, comment and share counts, to show which videos perform best.
• A TikTok access token and refresh token, needed to query the API on the user's behalf.

Mira is read-only on TikTok: it never posts, edits or deletes content on the user's account, and it does not access private messages or other users' data.

4. Data the user provides

• Sales and installment records that the user chooses to link to their content.
• Competitor accounts the user chooses to follow, and growth goals.
• Planned content and the user's own notes.

5. AI conversations

• The history of messages exchanged with the assistant.
• Vector representations of the user's own content, used for similarity search.

The data is used exclusively to provide the service to the person who supplied it: showing their metrics, comparing their content against their own history, deriving the editorial profile of their brand, and generating recommendations and scripts.

We do not sell data. We do not share it with advertisers. We do not use it for advertising or to build profiles for third-party commercial purposes. We do not train our own artificial intelligence models on users' content.

We share data only with the infrastructure providers needed to operate the service, and only to the extent each one requires it:

• Supabase: database and authentication. Hosts all the information described above.
• Vercel: hosting and execution of the web application.
• Meta Platforms: source of the Instagram data, queried through its official API.
• TikTok: source of the TikTok data, queried through its official API.
• Google (Gemini) and Anthropic (Claude): process the text of queries and the data needed to generate the assistant's answers.
• Inngest: coordinates background processes such as periodic synchronization.

We may also disclose information if an applicable law or an order from a competent authority requires it.

• Meta and TikTok access tokens are stored encrypted, never in plain text.
• The database enforces row-level security: each user can only read and write their own records, and this isolation is enforced by the database engine, not only by the application.
• All traffic travels over HTTPS.

Data is kept while the account is active. If the user disconnects Instagram and chooses a different account, the synchronized information of the previous account is deleted. When TikTok is disconnected, the stored tokens are deleted immediately and Mira stops accessing the account; the user can also revoke access from TikTok's settings. If the user deletes their account, all of their data is permanently deleted.

At any time, users can access their data from the application, correct the data they entered manually, disconnect Instagram or TikTok to stop any further collection, and request the complete deletion of their information.

The deletion procedure, including the one started from Facebook's app settings, is described in Data deletion.

The service is not directed at people under 18 and does not knowingly collect data from anyone below that age.

If this policy changes substantially, the date in the header will be updated and active users will be notified by email.