Privacy Policy

1. Introduction

Mirror Labs ("we," "us") operates the Mirror platform at usemirror.ai. This Privacy Policy explains how we collect, use, and protect your personal information. We are committed to safeguarding your privacy and handling your data transparently.

2. Information We Collect

Information you provide:

• Email address (during registration or waitlist signup)
• Country/region selection (during onboarding)
• Risk settings and trading preferences
• Watchlist selections and copy trading configurations

Information collected automatically:

• Wallet address (created via Privy on registration)
• Transaction history (trades executed through the platform)
• Device information and IP address
• Usage analytics (pages visited, features used)

Information we do NOT collect:

• Identity documents (KYC is handled entirely by MoonPay)
• Bank account or credit card numbers
• Private keys or seed phrases (your wallet is self-custodial)
• Social Security numbers or government IDs

3. How We Use Your Information

We use your information to:

• Provide and operate the copy-trading service
• Execute trades on your behalf through your smart wallet
• Enforce risk controls and trading limits you configure
• Send transactional notifications (trade confirmations, risk alerts)
• Improve the platform and develop new features
• Prevent fraud and enforce our Terms of Service
• Comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising.

4. Third-Party Services

We integrate with the following third-party services that may process your data:

• Privy — Authentication and embedded wallet creation. Processes your email and creates your wallet. Subject to Privy's privacy policy.
• MoonPay — Fiat on-ramp and KYC verification. Processes your identity documents and payment information when you fund your wallet. Subject to MoonPay's privacy policy.
• Supabase — Database hosting. Stores your account data, watchlists, and trade history. Data is encrypted at rest.
• Vercel — Website hosting. May collect standard web analytics and access logs.
• Polymarket — Prediction market protocol. Your trades are executed on-chain and are publicly visible on the Polygon blockchain.

5. Data Storage and Security

Your data is stored on secure servers hosted by Supabase with encryption at rest. We use industry-standard security practices including HTTPS encryption, row-level security policies, and access controls. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

6. Blockchain Data

Trades executed through Mirror are recorded on the Polygon blockchain. Blockchain transactions are public, permanent, and cannot be deleted. Your wallet address and transaction history are visible to anyone on the blockchain. Mirror does not control or have the ability to modify blockchain data.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for data processing
• Object to processing of your data

To exercise these rights, contact us at privacy@usemirror.ai. Note that blockchain data cannot be deleted due to the immutable nature of the technology.

8. Cookies

Mirror uses essential cookies and local storage for authentication state, region preferences, and session management. We do not use advertising cookies or third-party tracking cookies. You can clear local storage through your browser settings, though this will require you to log in again.

9. Data Retention

We retain your account data for as long as your account is active. Trade history is retained indefinitely for regulatory compliance and dispute resolution. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Waitlist data is retained until you are onboarded or request removal.

10. Children's Privacy

Mirror is not intended for anyone under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected data from a person under 18, we will delete it promptly.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States (where our hosting infrastructure is located). By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the platform or sending an email. Your continued use of the Service after changes constitutes acceptance.

13. Contact

For privacy-related questions or requests, contact us at privacy@usemirror.ai.