Legal
Privacy Policy
Last updated: 1 June 2026
Mirage Recruiting GmbH (“Mirage“, “we“, “us“) operates the platform available at mirage-smoky.vercel.app. This Privacy Policy explains how we collect, use, store, and protect your personal data, and what rights you have under the General Data Protection Regulation (GDPR) and applicable German data-protection law.
1. Data Controller
The data controller for all personal data processed through this platform is Mirage Recruiting GmbH. If you have any questions about your data, contact our Data Protection Officer at privacy@mirage.io.
2. Personal Data We Collect
We collect data you provide directly (name, email, work history, skills, CV), data generated through platform use (skill assessment results, interview session transcripts, application status, academy progress), technical data (IP address, browser type, session identifiers), and communication data (support requests, newsletter opt-in).
3. Legal Basis for Processing
We process your data on the following legal bases: performance of a contract (Art. 6(1)(b) GDPR) for account management and service delivery; legitimate interests (Art. 6(1)(f) GDPR) for platform security and fraud prevention; your consent (Art. 6(1)(a) GDPR) for marketing communications and optional analytics; and compliance with a legal obligation (Art. 6(1)(c) GDPR) for tax and audit purposes.
4. How We Use Your Data
We use your data to provide and improve the Mirage platform, match candidates to relevant roles, generate AI-assisted skill and career assessments, deliver personalised academy learning content, facilitate mentor sessions, send transactional communications, and comply with legal obligations. We do not sell personal data to third parties.
5. AI-Assisted Processing
Mirage uses AI models (including Google Gemini Live and Anthropic Claude) to conduct structured voice interviews, generate evaluation summaries, and produce career insights. Interview transcripts are processed to generate synthesis reports. Raw audio is not stored beyond the session. AI-generated scores are never surfaced to candidates. You may request a copy of your evaluation report via the platform settings.
6. Data Sharing
We share data with: employers (only after you submit an application or enable recruiter visibility), service providers acting as processors under GDPR-compliant Data Processing Agreements (cloud infrastructure, AI model APIs, email delivery, analytics), and competent authorities when required by law. All processors are contractually bound to process data only on our instructions.
7. International Data Transfers
Some processors operate outside the EEA (for example, cloud and AI model APIs). Where such transfers occur, we rely on the EU Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of protection.
8. Data Retention
We retain account data for the duration of your active account plus 3 years for audit purposes. Interview session data and evaluation reports are retained for 24 months. Newsletter consent records are retained until withdrawal. You may request early deletion at any time via the preference centre.
9. Your Rights
Under the GDPR you have the right to access, rectify, or erase your personal data; restrict or object to processing; data portability; and to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise any right, contact privacy@mirage.io. You also have the right to lodge a complaint with the supervisory authority in your EU member state.
11. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction. These include encryption in transit and at rest, access controls, and regular security assessments.
12. Changes to This Policy
We may update this policy periodically. Material changes will be communicated via email or in-platform notification at least 30 days before they take effect. Continued use after the effective date constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions, contact: Mirage Recruiting GmbH, Data Protection Officer, privacy@mirage.io.