Mira Weddings is operated by Clarved Inc. We collect account information, wedding-planning content, guest information supplied by workspace members, files and photos you choose to upload, email addresses submitted for guest-photo updates, support communications, and technical information needed to secure and operate the service.

We use PostHog for product analytics such as screens visited and actions taken. These analytics help improve Mira, are not used for advertising, and do not include Google Photos image bytes, OAuth credentials, or the contents of photos selected through Google.

We use personal information only to provide, secure, support, and improve the Mira features you request. We do not sell personal information, provide it to data brokers, use it for targeted or interest-based advertising, or use it for credit, lending, or eligibility decisions.

We disclose data only to service providers that process it for Mira, such as Google Cloud and Firebase for hosting, storage, databases, and background jobs, or when required by law. Service providers may process data only to provide their contracted services; they do not receive Google Photos data for their own advertising or independent purposes.

Mira offers two separate, user-initiated Google Photos features. Wedding editors can export visible guest-gallery photos to an album that Mira creates in the editor's Google Photos account. This uses append-only permission to create the album and add those Mira photos. Mira does not browse, download, edit, or delete unrelated items in the editor's Google Photos library.

Guests can choose specific photos through the Google Photos Picker. Mira receives only the media identifiers, filenames, MIME metadata, and photo bytes for items that the guest explicitly selects. Mira cannot browse unselected items. Selected photos are copied into that wedding's private Mira gallery and are then handled like photos uploaded directly to Mira.

For exports, Mira stores access and refresh credentials, the permissions granted, and identifiers and links for the album and media Mira created. Credentials are encrypted by Google Cloud at rest, restricted to authorized service identities, and removed after the editor disconnects Google Photos or the wedding workspace is deleted. Disconnecting revokes Mira's Google authorization. Photos already exported remain in the user's Google Photos account until the user deletes them there.

For Picker imports, the short-lived access token is encrypted with AES-256-GCM while a background import is active. Plaintext tokens and Google download URLs are not stored or logged. Token fields are removed when the import completes, fails, or is canceled; partial jobs retain the encrypted token only for their short retry window. Import job records expire after 24 hours, and abandoned staging files are automatically deleted within two days.

Mira's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Raw, aggregated, anonymized, and derived Google Photos data is used only to provide or improve the visible import and export features requested by the user.

Mira does not use Google Photos data to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models. Mira does not transfer Google Photos data to third-party AI or ML services for model training.

Wedding workspaces are isolated by membership and role checks. Guest galleries use scoped, revocable links. Data is encrypted in transit and at rest, storage is private by default, production access is limited to authorized personnel and service identities, and background workers receive only the permissions required for their task.

No online service can guarantee absolute security. If you believe data has been exposed or an access link has been shared improperly, contact us so we can investigate and help rotate or revoke access.

Mira keeps wedding content while the workspace is active so the couple and invited collaborators can use it. Generated ZIP photo archives are deleted after seven days. Temporary photo staging objects are deleted after processing or within two days. Gallery photos remain until an authorized editor deletes them or the workspace is deleted.

Guest-photo update email addresses are stored only after email verification. We retain an active subscription while the wedding album remains available, or until the subscriber uses the unsubscribe link in an email. Unsubscribed records may be retained in a suppressed state as needed to honor the opt-out and prevent accidental resubscription; verification links expire after 24 hours.

Editors can disconnect Google Photos from the Guest Photos export controls. To request deletion of an account or wedding workspace, email support@clarved.com from the administrator email and identify the wedding. We will verify the request and delete or anonymize data unless retention is required for security, fraud prevention, legal compliance, or an active dispute.

Google Photos access and guest-photo email updates are optional. You can upload and download photos without connecting Google. You can cancel a Picker import, disconnect export access, revoke a guest gallery link, delete gallery photos, remove Google authorization from your Google Account settings, or unsubscribe from photo emails using the link included in every update.

You may contact us to request access, correction, export, or deletion of personal information. Privacy rights differ by location, and we will respond as required by applicable law.