Privacy Policy

1. Overview & Commitment

At Mindset Mirror, your trust and emotional safety are our primary commitment. When business partners and couples evaluate their communication and risk tolerances, privacy is non-negotiable. This Privacy Policy details how we collect, store, safeguard, and process your personal information and assessment submissions.

2. Information We Collect

• Account & Contact Data: Email address, mobile phone number, and display names provided during registration, OTP verification, or invitation creation.
• Assessment Responses: Answers to structured questionnaires, Likert-scale ratings, and scenario selections submitted during evaluation sessions.
• Payment & Transaction Records: Transaction IDs, credit pack purchases, payment timestamps, and subscription statuses provided by Razorpay. (Note: We never access or store raw debit/credit card numbers or CVV codes).
• Technical Logs: IP address, browser type, device information, and interaction timestamps required to prevent fraud and maintain security.

3. Two-Party Confidentiality Guarantee

4. AI Processing & Google Gemini Protocol

Mindset Mirror leverages the Google Gemini API to analyze dimensional variance and formulate actionable discussion agreements. To protect your identity:

• Data Sanitization: Before submitting data to the AI model, prompts are scrubbed of phone numbers, emails, passwords, and billing details.
• Zero Foundation Model Training: Under our enterprise API tier agreements with Google Cloud, your submitted inputs are not used to train or refine public Gemini AI models.

5. Payment Security (Razorpay)

Payment processing is executed through Razorpay Software Private Limited. Razorpay is certified PCI-DSS Level 1 compliant (Payment Card Industry Data Security Standard) and uses industry-leading 256-bit encryption. All financial interactions adhere to the Reserve Bank of India (RBI) payment security directives.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal information or assessment data to advertising networks, data brokers, or third parties. We share data solely with trusted operational sub-processors:

• Razorpay: Payment processing and invoice generation.
• Amazon Web Services (SES): Transactional verification emails and partner invitation delivery.
• Google Cloud (Gemini): Structured report synthesis.

7. Data Retention & Your Rights

You maintain full control over your data. At any time, you may:

• Request an electronic copy of your assessment reports.
• Request the complete deletion of your account and raw assessment history (“Right to be Forgotten”).
• Opt out of non-essential email notifications.

8. Grievance Officer & Inquiries

In accordance with the Information Technology Act 2000 and the Digital Personal Data Protection Act (DPDP), for privacy concerns or data erasure requests, please contact our Grievance Desk:

Grievance Officer: Privacy & Compliance Desk
Email: hello@miamora.in
Response Time: Within 24-48 business hours