Privacy Policy
The Mirror Protocol ("we," "us"), operated by Boris Kerjner, creates private self-knowledge documents from the details you provide. This policy explains what we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to this policy and to our Terms of Service.
Who this is for
The Service is intended for adults 18 and older. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
Information we collect
- Contact details such as name and email, and (optionally) a phone number you choose to provide.
- Birth details needed to generate your chart inputs, such as date, time, and place of birth.
- Your written intake answers and the generated document, audio, or chat history.
- For the Sales Codex, call transcripts you are authorized to share, together with call context such as date, stage, role, and general deal importance. The named buyer is referred to by a first name and last initial, and direct contact details such as email addresses, phone numbers and links are removed before storage. Other people mentioned in passing during a call are not systematically de-identified, so please avoid uploading calls containing especially sensitive third-party information.
- Purchase and access-token records from Stripe checkout events (we do not store full card numbers; payment card details are handled by Stripe).
- Basic first-party analytics events — such as page views, CTA clicks, checkout starts, and delivery status — stored with a random session identifier in your browser's local storage, used to understand conversion and product performance.
- Marketing attribution parameters that may be present in the link you arrived through (for example UTM tags or a click identifier such as fbclid), used to understand which campaigns work.
- A record of the emails we send you — the type of email, its subject, when it was sent, and whether it was opened. See Email delivery & open tracking below.
- The disclosed email permission captured when you request a free Glimpse, including the version, source and time of submission, so we can honor it and demonstrate what you agreed to.
How we use it
- To generate, store, and deliver your Glimpse or Dossier and any related audio, companion, or document.
- To send access links, PDF links, order updates, and support messages.
- To confirm that what you paid for actually reached you, and to follow up personally if it appears it did not.
- To prevent abuse, troubleshoot failed jobs, and avoid duplicate paid generations.
- To measure and improve our pages, offers, and product flow using aggregate analytics.
- When disclosed at the intake you submit, to send personalized educational insights and relevant Dossier invitations based on your Glimpse. You can withdraw this permission from any marketing email.
Email delivery & open tracking
Emails we send you contain a small, invisible image (commonly called a tracking pixel). When your email program loads images, it requests that image from our server, which tells us the message was opened and when. We record the email type, its subject, the time it was sent, and the time and number of opens. We do not use this to track you across other websites, we do not attach it to advertising profiles, and we do not share it.
We use it for one practical reason: these are paid, individually-crafted documents, and an email that silently fails to arrive means someone paid and received nothing. Open records let us notice that and reach out personally rather than assume everything worked.
If you would rather not be counted, turning off automatic image loading in your email program prevents the pixel from ever loading — your Dossier, links, and access are completely unaffected. You may also ask us to stop recording opens for your address, or to delete the records we hold, by writing to the contact address below. Note that open records are inherently approximate: some email providers pre-load images automatically, and others block them entirely.
Our disclosed free-Glimpse follow-up sequence, abandoned-checkout reminders, and the guided journey included with a paid Dossier may also record link clicks. Every commercial automated email carries an unsubscribe link that stops future messages.
Cookies, local storage & tracking
We use your browser's local storage to keep a random session identifier, portal progress, and access information so the app works and the experience is continuous. For paid Dossiers, portal progress and reflections are also saved securely on our systems so they remain available when you use your private portal link on another device. We use lightweight first-party analytics rather than invasive third-party tracking on our own pages. If you reach us through an advertising platform, that platform may set its own identifiers under its own policies; you can manage these in your browser and platform settings.
Advertising
We may advertise the Service on platforms such as ChatGPT Ads and Meta (Facebook / Instagram). When you visit or click an ad, those platforms may receive a page view or generic funnel event and may pass us an attribution parameter—such as OpenAI's oppref, a Meta click identifier or a UTM value—so we can understand which campaign and ad led to a Glimpse or purchase. When the intake disclosure includes advertising measurement and you submit it, a one-way hash of your email may also be used for platform matching; the platform does not receive the readable email from that event. We do not sell your personal information, and we do not send birth details, intake answers, Glimpse text or private access identifiers to advertising platforms. This site and its offers are not affiliated with, endorsed by, administered by or sponsored by OpenAI, ChatGPT, Meta or any other advertising platform.
Who we share it with
We share information only with service providers who help us run the Service, and only to the extent needed for their role: Stripe (payments), Resend (email delivery), BodyGraph and geocoding services (chart inputs), hosting, and AI model providers (generation). We may disclose information if required by law or to protect against fraud or abuse. We do not sell your personal information.
Your companion conversations
Your conversations with your private Codex Counsel (such as Mirror Counsel, Sales Counsel, or Vocation Counsel) are confidential to you. No other customer can see them, and we do not share or sell them. They are stored securely on our own systems so your companion can remember your context and continue the reflection over time, and our AI provider processes them solely to generate your responses — they are not used to train AI models. You can request deletion of your conversation history at any time by emailing mirror@boriskerjner.com.
Audio Dossier narration
When Audio Dossier narration is available, the words from your completed Dossier are sent in bounded sections to our configured speech-generation provider solely to create the narration. The voice is AI-generated and is disclosed as such in the player. Each section is then stored privately with your Dossier so it does not need to be generated again every time you listen. Narration files are included in the same deletion protections as the written Dossier.
Sales Codex transcripts & team purchases
While a Sales Codex intake is unfinished, written answers may be saved as a private draft for up to 30 days so the participant can safely resume. The draft does not contain raw transcript text or original filenames, and consent choices are never restored as pre-checked. A completed intake replaces and removes its unfinished draft.
Sales transcripts are used only to create the rep's evidence-grounded Dossier and to provide transcript reviews the rep requests. They are processed by our configured AI model provider for those purposes. We do not use buyer disclosures to diagnose, score, or profile the buyer, and we do not use transcript content to substantiate product, medical, therapeutic, income, or performance claims.
Every Sales Codex also produces a separate, clearly labelled Coaching Dossier which is delivered to The Mirror Protocol's operator, and — on a team purchase — to the purchasing manager. It contains only observable strengths, coaching conditions, practice support and role-relevant guidance. The rep's written intake, feared self-meaning, private reflections, transcript text, deal-stake answers, Counsel conversations and amendments are never included in it. This boundary is shown to the rep before they begin.
A rep may request deletion of all Sales Codex data. A buyer whose conversation appears in a transcript may also request deletion by identifying the rep's Dossier and the buyer token shown there (for example, “Mark H.”); we may ask for enough information to locate the correct record without retaining new contact details.
Your portal reflections
Lines you keep, days you mark complete, and notes you write inside a paid Dossier are private account content. We store them so your portal can continue across devices and so your guided journey can reflect your progress. They are not sold, shared with other customers, or used for advertising. They are included in an access or export request and removed when you request deletion.
Retention
By default, readings, purchase entitlements, guided-journey records, portal reflections, chat history, and delivery records are retained so you can re-open your document and so we can provide support. You can request export or deletion at any time. If a legal, tax, fraud-prevention, or payment-dispute reason requires retaining a minimal record, we may keep only what is necessary for that purpose.
Your rights — access, export & deletion
You can request a copy of your data, correction of it, or its deletion at any time. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to certain processing and the right not to be discriminated against for exercising your rights. To make a request, email mirror@boriskerjner.com from the email address used for your Glimpse or Dossier. We will respond within a reasonable time.
Security
We take reasonable measures to protect your information, including limiting access and using reputable service providers. No method of transmission or storage is perfectly secure, but we work to keep your details safe and used only for the purposes above.
International
Our providers may process information in countries other than yours. Where we transfer information, we rely on providers that offer appropriate protections.
Important note
The Mirror Protocol is a self-knowledge and reflection product offered for educational and entertainment purposes. It is not therapy, medical care, legal advice, financial advice, diagnosis, or a substitute for qualified professional support.
Changes
We may update this policy from time to time. The "last updated" date above reflects the current version.
Contact
Questions or requests: mirror@boriskerjner.com.