TRANSPARENCY · LAST UPDATED 28 AUGUST 2026

AI and data use

Mira is an AI agent. This page explains what it can do, which systems it uses, what context it receives and where human judgment remains necessary.

Seven translucent jade data nodes connected by a precise brass network

Text conversations

Text messages are sent to the configured Meta language model together with a limited recent conversation history, relevant customer context for signed-in users and descriptions of approved tools. Mira can retrieve approved customer-service knowledge and request server-side actions. The model does not receive passwords or complete card details.

Live audio

When a signed-in customer starts voice mode and grants microphone access, audio is sent to Google Gemini Live using a short-lived token. Gemini receives the same customer-service knowledge and approved tool descriptions. Audio capture pauses while secure checkout is displayed.

Memory and customer context

For a signed-in customer, Mira may receive a concise summary of recent topics, account status, verified purchases and active bookings. The active conversation follows the account across website pages and browser tabs. Tabs exchange only a refresh notice and retrieve the account-owned conversation from the server; conversation text is not broadcast between tabs. Before sign-in, continuity is limited to the current browser tab. Context supports continuity but is never treated as proof of payment, entitlement or confirmation. Those facts are checked again through protected tools.

Agent tools

Mira can search the approved product knowledge base, retrieve current product details, check the consultation calendar, create or manage a booking, verify payment status, issue a fresh download link, read a limited account summary and open a contact request form. It cannot bypass server permissions, access arbitrary databases or charge a card directly.

Consequential actions

Creating, rescheduling or cancelling a booking requires a separate customer confirmation. The server verifies authentication, ownership, availability and policy limits before making a change. Payment is completed by the customer inside Stripe, and only a signed Stripe event can establish that payment succeeded.

Knowledge boundaries

The public customer-service knowledge base explains the offer, scope, intended audience, delivery, payment and booking process. It is not a substitute for the purchased research and is not designed to reveal paid content.

Safety and human responsibility

Messages, retrieved passages and remembered context are treated as untrusted input. Tool arguments are validated and tool activity is audited. AI outputs may still be wrong or incomplete. Mira is for customer support and transaction assistance, not legal advice. Important decisions should be verified and reviewed by appropriately qualified professionals.

Minimisation and control

Only information required for the requested interaction is provided to a model or tool. Customers control whether to use voice, whether to create an account and whether to confirm an action. Payment credentials remain inside Stripe’s protected checkout environment.

Operator and technology provider

AI Nation operates the GCC Compliance Matrix service. Mudakka Consulting FZ-LLC developed the platform and is the legal contracting entity and data controller. Questions about AI processing or customer data can be sent to support@gccdatamatrix.com.