Who receives your data: processors and recipients

Live list. Last updated 23 October 2026. Published at mirai.inc/legal/recipients. Page text version 5.3, 22 October 2026.

v5.3 change note: the US-person rule stated plainly; the face-comparison, image-safety and video partner rows; no affiliate named (R17). Added 22 October 2026: the AI vision checks, moderation, voice and Meta Pixel rows.

This is the live list that our Privacy Notice (section 6) and the Likeness Licence (clause 12.4 and Part 3, T4) refer to. Mirai Talent Inc. ("Mirai") is responsible for your data and stores it in the United States. Below is everyone else who receives it, what they get and where they process it.

  • Processors act only on our written instructions, under contract.
  • Generation engines may not train on your data.
  • "Face data" in the tables below means your kit references, face data or both.

The US data rule

The face of a US person never goes to an engine, face check or partner developed or run by a company based in, or controlled from, China (including Hong Kong) or another country of concern. More precisely, US users' face data is processed only by engines that meet the US data rule. An engine meets it when no company or person restricted by the US Justice Department's rule on Americans' sensitive data (28 CFR Part 202) can access the data through it, and it keeps nothing after the job. If any signal says you are in the United States or a US territory, if you tell us at sign-up that you are a US citizen or US permanent resident, or if we are unsure, we treat you as a US user. Which engines serve which users can change; this list always shows the current choice.

1. Hosting, storage and database

NameRoleWhere processedFace dataUsersSince
RenderCloud hosting and computeSingaporeStores it, encryptedAll22 October 2026
CloudinaryObject storage for kits and mediaUnited StatesStores it, encryptedAll7 April 2026
SupabaseDatabase and queuesUnited StatesStores it, encryptedAll7 April 2026
CloudinaryMedia deliveryUnited StatesDelivers media, encrypted in transitAll7 April 2026

2. Generation engines

NameDeveloperWhere processedFeatureFace dataMeets the US data ruleUsersSince
GPT Image 2OpenAIUnited StatesImagesReferences for each job onlyYesAll21 August 2026
GPT Image 2.5OpenAIUnited StatesImagesReferences for each job onlyYesAll24 September 2026
Nano Banana 2.1GoogleUnited StatesImagesReferences for each job onlyYesAll21 August 2026
Seedream 5.0 Pro EditByteDanceThrough fal.ai, United States; the developer may process it elsewhereImagesReferences for each job onlyNoNon-US users only21 August 2026
FLUX.2 [pro] EditBlack Forest LabsThrough fal.ai, United States; the developer may process it elsewhereImagesReferences for each job onlyYesAll21 August 2026
Seedance 2.5 Reference to VideoByteDanceThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only21 August 2026
Kling v3 Pro Image to VideoKuaishouThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only31 August 2026
Kling O3 Pro Reference to VideoKuaishouThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only28 September 2026
Wan 3.0 Reference to VideoAlibabaThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only23 October 2026
Wan 3.0 Image to VideoAlibabaThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only23 October 2026
Wan 3.0 Prime Image to VideoAlibabaThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only23 October 2026
Hailuo 3 Max Image to VideoMiniMaxThrough fal.ai, United States; the developer may process it elsewhereVideoReferences for each job onlyNoNon-US users only31 August 2026
fal.aiInference host that runs models for usUnited StatesHosting engines aboveFor each job onlyYesAll16 April 2026

Decentralised compute (0G). 0G decentralised compute network

  • Serves non-US users only, for video generation.
  • Not live. It is added here, with its node regions, with 30 days' notice (Terms Schedule D2) before it receives any data.
  • Its data terms will cover: no training on your data; deletion after each job; node regions listed here; a transfer basis for each region. No data terms are signed, so no face data goes to it.

3. Face match and moderation

NameRoleWhere processedFace dataSince
Amazon Web Services (Amazon Rekognition)Cloud face-comparison service for the two required face checks: your selfie, head turn and photos against each other, and outputs against your kit. Never searches across other peopleUnited StatesYes18 October 2026
Google Cloud (Cloud Vision SafeSearch)Image-safety checks against our Community Standards, including whether a face is present. Compares no facesUnited StatesContent to check19 October 2026
Anthropic (Claude)AI vision and language model: scores how closely content made of you looks like your own kit, checks frames for quality and safety, and reads prompts and reference uploads to help make what you ask. Compares only with your own kit and may not train on your dataUnited StatesYes22 April 2026
Hive (visual moderation)Checks uploads and every output for unsafe content and child sexual abuse material, including AI-made material. Compares no facesUnited StatesContent to check27 May 2026
Hive (CSAM Detection)Matches content against known abuse hashesUnited StatesHashes onlyNot yet in use

Our video partner

NameRoleWhere processedFace dataUsersSince
BytePlusOur video partner: a short live face check, and a face reference it keeps to make video of you for Mirai. Our processor, on our written instructions. For the records the law requires it to keep, it decides for itself, under its own privacy noticeMalaysiaPart of the face-data box, where offered. Deleted within 30 days of withdrawal, of your face sign-up not being approved, or of closing your accountNever US persons, unknown US status or Argentine residents18 October 2026

Voice, only if you add it

NameRoleWhere processedFace dataSince
ElevenLabsMakes your voice for content of you from the voice sample you add with its own consent (Licence 12.3). Gets that sample and the lines to speakUnited StatesNone17 July 2026

4. The partner model

None at launch. A partner multimodal model that makes content, checks content and scores competition entries is named here, with its country, before it receives any data (30 days' notice, Terms Schedule D2). For US users, only if it meets the US data rule.

5. Payments and payouts

NameRoleWhere processedWhat it gets
A Partner App operator (named on request)Partner App payments, in USDC (Terms §0.1A)Where the operator is based, named on requestPurchase details. The operator is a controller under its own notice, not our processor. Payments are recorded on a public blockchain
StripeOne-off card payments on the webUnited StatesPurchase details. We receive only the card brand and last four digits. Stripe is a controller for its own legal duties and our processor otherwise
A public blockchain (USDC)USDC payouts on a public blockchainNo single country: a public network

Payout, tax and wallet-screening providers are added here, with their countries, before any payout runs. Support and appeals are handled by our own team, by email and in the app; no separate support provider receives your data.

6. Analytics, email and support

NameRoleWhere processedWhat it gets
SentryProduct analytics and error reports. Not used for advertisingUnited StatesDevice type, app version, feature use, a pseudonymous ID. No face data
Meta Platforms (Meta Pixel)Measuring and showing our ads, on our public marketing pages only, and only if you tap Accept in the cookie notice. Never for visitors in the United States, never where you sign up, sign in, apply, add a face or sign, and never in a Partner App. A separate controller for its own use, under its own privacy policyUnited StatesThe marketing pages you visit, device and browser details and a cookie ID. No face data
ResendEmail and pushUnited StatesContact details and messages

7. Platform Partners

Other apps that show Mirai content under a Partner Agreement. They get your card, price, rules and licence rows, never your kit.

PartnerWhere processedNamedUS: decline open untilOutside the US: Allow needed
None at launchYes

8. Training recipients

None. Mirai is not training today.

9. Affiliates

None hold your data. If we name a Mirai affiliate by notice (Terms §1.3), it never receives kits, face data or data about US persons.

10. Others who may receive data

Independent controllers we receive data from. Our identity-verification partner runs the Verified Human Check, and a Partner App operator runs the Partner App you use Mirai in, each under its own privacy notice (Privacy Notice 1.4, 3). They send us the check's result, your verification level, a code unique to you and Mirai, and your Partner App username and picture. We send them only what the check or the payment needs. The current list of these named providers is available on request at legal@mirai.inc.

Buyers of licences, the clients named on their licence records, and social platforms you connect (outputs, licence rows, your posts); insurers, advisers and auditors, under confidentiality; a company that takes over running Mirai (Privacy Notice section 12); and police, courts and child-safety bodies, including NCMEC, where the law requires.

How we announce changes

  • A new processor or engine: added here, with 30 days' notice in the app, before it receives your data (Terms Schedule D2). Moving a feature between engines already on this list is not a change (Schedule D2A).
  • A new Platform Partner: in the United States, named here and in the app 30 days ahead, with a one-tap decline. Outside the United States, it serves you only after your Allow tap.
  • Argentina: any new recipient waits for your Allow tap.
  • Training: a recipient gets your data only if it was named when you signed or after your Allow tap on a card naming it, and every run is announced 14 days ahead with a one-tap "Not this one".
  • Earlier versions of this list are at mirai.inc/legal/versions.

Questions: legal@mirai.inc.