Legal
Privacy Policy
Effective Date: June 4, 2026 · MiRAjO Collective LLC · Florida, USA
MiRAjO Collective LLC ("MiRAjO," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect through MiRAjO Hub, how we use it, and your rights in relation to it.
The full MiRAjO Privacy Policy (covering all products including MiRAjO Hub) is available at www.mirajoco.org/about/privacy. The sections below highlight the provisions most relevant to Hub users and organizations.
1. Who This Applies To
This policy applies to:
- Organization administrators who manage a Hub subscription on behalf of their organization
- Members who access the Hub through their organization's subscription
- Individual members who subscribe to MiRAjO Hub directly
2. Information We Collect
Account information: Name, email address, and password when you create a Hub account.
Profile information: Industry, business stage, city, and other optional profile fields you complete.
Learning activity: Courses started and completed, lessons viewed, assessment results, and certificates earned.
Check-in survey responses: Quarterly check-ins collect business revenue range, growth stage, challenges, and program feedback. This data is used to generate impact reports for your organization and to improve the platform.
Community content: Posts, replies, direct messages, connection requests, and any photos you upload within the Hub. This content is used to power the community feed, direct messaging, and connections between members. Aggregate activity (such as how often you post, reply, or engage with others) may be used to calculate engagement points and shown in engagement analytics visible to your organization's administrators.
Usage data: Login timestamps, pages visited, and feature interactions for platform improvement and security.
3. How We Use Your Information
- To provide access to courses, assessments, and Hub features
- To track your learning progress and issue certificates
- To generate quarterly impact reports for your organization
- To send platform notifications, course updates, and announcements from your organization
- To provide org administrators with aggregate analytics about their membership
- To improve platform features and content
- To comply with legal obligations
4. Organization Administrators and Data Access
If you access Hub through an organization's subscription, your organization's administrator can see:
- Your name, email, and profile information
- Your course enrollment and completion activity
- Your check-in survey responses (in aggregate and individually)
- Your last active date on the platform
- Your community activity within your organization (e.g., post and reply counts, engagement points), shown in aggregate engagement reporting. Org admins can also see the content of posts and replies you make in your organization's community feed, since these are visible to other members of that organization. Your direct messages to other members are not visible to org admins.
Org admins cannot see your account password or payment information. Your data is never shared with other organizations on the platform.
5. Data Isolation and Security
MiRAjO Hub uses row-level security to ensure that member data is strictly isolated by organization. Members of one organization cannot access data belonging to another. The platform is hosted on Vercel and Supabase, both of which maintain SOC 2 Type II certification. All data is encrypted in transit (TLS) and at rest.
6. Third-Party Service Providers
We use the following providers to operate MiRAjO Hub:
- Supabase - database, authentication, and file storage (SOC 2 Type II)
- Vercel - web hosting and API infrastructure (SOC 2 Type II)
- Resend - transactional email delivery
- Stripe - payment processing (PCI DSS Level 1)
- Anthropic - AI-generated impact reports (data processed for report generation only; not used to train models)
- Bunny Stream - video content delivery
- Twilio - text message delivery (only for accounts that have added and confirmed a mobile number)
We do not sell your personal information to any third party.
7. Text Messages
Text messaging is optional and off by default. It is available only to people who hold an administrator or staff role in an organization on MiRAjO Hub. Ordinary members are not sent text messages.
If you choose to receive them, you add your own mobile number in your account settings, confirm it with a code we text to you, and agree to the following:
“I agree to receive text messages from this organization through MiRAjO Hub about events, reminders and updates. Message and data rates may apply. Message frequency varies. Reply STOP to cancel or HELP for help.”
We store the wording you agreed to, the date you agreed, and where you agreed it, so the record reflects what you actually saw.
Messages are operational: event reminders, activity alerts for your organization, and account notifications such as confirmation codes. Message frequency varies. Message and data rates may apply.
Reply STOP to any message to stop receiving them. This takes effect immediately and needs no other action. Reply START to begin again, or HELP for contact details. You can also remove your number at any time from your account settings.
Mobile information is never shared with or sold to any third party for marketing or promotional purposes. Your number is shared only with Twilio, the carrier network operator that delivers the message on our behalf, and is not used for any other purpose. No mobile opt-in data is shared with anyone else under any circumstances.
8. Live Sessions, Recording and Transcripts
Organizations can run live video sessions inside the Hub. The host can record these sessions, and a recorded session is also transcribed to text. When a session is being recorded you will see a notice in the room, and the room tells everyone on the way in that the session may be recorded.
What is captured when a host records: your video, your audio, your display name, anything you share on screen, and the messages sent in the session chat. A written transcript is produced from the audio.
The recording belongs to the organization that ran the session, not to MiRAjO. They decide whether to record, who may watch it afterwards, and how long to keep it. We store it on their behalf. If you want a recording removed, ask the organization that ran the session; if they ask us to delete it, we do.
Video and transcripts are processed by Daily.co, which runs the video rooms, and stored with Bunny.net. Both act on instructions from us and the organization and do not use the content for their own purposes.
If you would rather not be recorded, you do not have to join. You can leave a session at any time, and you can take part with your camera or microphone switched off.
9. Data Retention and Deletion
We retain your data for as long as your account is active. If an organization cancels its subscription, member data is retained for 90 days to allow for data export, then permanently deleted. You may request deletion of your individual account at any time by contacting info@mirajoco.org.
10. Your Rights
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Request an export of your data
- Opt out of non-essential communications at any time
To exercise any of these rights, contact us at info@mirajoco.org.
11. Contact
MiRAjO Collective LLC
100 2nd Ave S., Suite 205N #1043
St. Petersburg, FL 33701
info@mirajoco.org