Legal Summary

Last updated: December 18, 2025

This summary explains the MIR API rules in clear, human language. It is not a replacement for the full API Terms of Use, but it reflects them accurately.

What MIR Is (and Isn't)

MIR provides neutral reputation signals based on verified events.

It does not judge people, assign blame, or decide who should be trusted.

You remain fully responsible for how you use MIR data on your platform.

Who This Applies To

These rules apply to approved partners who use the MIR API.

If you use the API, you agree to follow these standards and protect user privacy.

What You're Allowed to Do

You may:

• Query reputation signals to inform trust decisions
• Submit verified events that occurred on your own platform
• Let users see reputation data about themselves
• Use aggregated, anonymized data for analytics

What You're Not Allowed to Do

You may not:

• Automatically deny service based only on MIR data
• Sell or share MIR data with third parties
• Track users without their knowledge
• Build shadow profiles or re-identify anonymized data
• Harass, discriminate, or harm individuals
• Submit false, misleading, or unverified events
• Reverse-engineer MIR systems or bypass safeguards

User Consent & Privacy

You must:

• Only submit events for users who have linked their account to your platform
• Use only the data necessary for your approved purpose
• Keep MIR data secure
• Automatically delete cached MIR data within 24 hours (audit records and derived decisions exempt)
• Respect user deletion and dispute requests

Users have the right to:

• See their reputation signals
• Dispute incorrect information
• Export their data
• Request deletion

Event Quality Matters

Events you submit must be:

• Accurate — based on real, verified actions
• Relevant — related to trust and reputation
• Timely — submitted within 30 days
• Complete — include required metadata

Security Expectations

You're expected to:

• Use encrypted connections (HTTPS)
• Restrict API access internally
• Monitor for misuse
• Report security incidents involving MIR data within 48 hours

Availability & Changes

MIR aims to be reliable, but:

• Downtime can happen
• APIs may change with notice
• Access may be suspended to investigate abuse

We'll communicate material changes when possible.

Termination

You can stop using MIR at any time.

MIR may suspend or terminate access if:

• There's fraud, abuse, or a security incident
• The terms are violated
• Material business or operational needs require it

When access ends, all cached MIR data must be deleted.

Liability (Short Version)

MIR is provided "as is."

MIR:

• Does not guarantee accuracy
• Does not assess legality, morality, or trustworthiness of users
• Does not make eligibility determinations
• Is not responsible for partner decisions
• Is not liable for indirect or consequential damages

You are responsible for how MIR data is used on your platform.

Governing Law

These terms are governed by the laws of the State of Arizona, without regard to conflict of law principles.

When in Doubt

If you're unsure whether something is allowed, ask first.

legal@myinternetreputation.org
hello@myinternetreputation.org