Myra — Effective date: [Effective date — set at publication]
Myra uses a small number of third-party services to run. This page lists them and what each one does with your data. We use no third-party advertising trackers; the limited website analytics used on ianohan.com are disclosed below. We do not sell your data or use your content to train generalised AI models.
These process data for every account.
| Service | What it does | Data it can receive | Location |
|---|---|---|---|
| Supabase | Database, file storage and authentication — the system of record for your data. | All content you store in Myra, and encrypted access credentials for accounts you connect. | European Union — AWS, London (eu-west-2). |
| Vercel | Application hosting and the scheduled jobs that keep your accounts in sync. | Your data in transit while a request or a scheduled job is processing it. Nothing is stored on Vercel. | Processing may occur outside the EU/UK; protected by Standard Contractual Clauses. |
| Anthropic | The AI processing behind triage, drafting, scheduling detection and summaries. | Only the content needed for a feature (for example a message being drafted). Under a data-processing agreement that prohibits using your data to train generalised AI models. | United States; protected by Standard Contractual Clauses. |
| Sentry | Error monitoring, when enabled, so we can find and fix faults. | Error reports only. Message content and email addresses are stripped before an event leaves Myra; request payloads are dropped entirely. | United States; protected by Standard Contractual Clauses. |
These are your own accounts. Myra accesses them only under the permission you grant, and only if you choose to connect them.
| Service | What it does | Data it can receive | Location |
|---|---|---|---|
| Your own Gmail, Calendar and Contacts, if you connect a Google account. | Your mailbox, calendar and contacts, accessed under the permission you grant. This is your account, not data shared with a third party. | Google (global). | |
| Microsoft | Your own Outlook mail, Contacts and Teams meetings, if you connect a Microsoft account. | Your Outlook mailbox, contacts and meeting details, accessed under the permission you grant. | Microsoft (global). |
| Apple (iCloud) | Your own iCloud Mail, Calendar and Contacts, if you connect them. | Your iCloud mailbox, calendar and contacts, accessed with the app-specific password you provide. | Apple (global). |
Engaged only when you use the feature they support. Cloudmersive will not receive files until its production safety-scanning service and contractual safeguards are active. PostHog loads only on the public ianohan.com advisory site, not in the authenticated Myra application.
| Service | What it does | Data it can receive | Location |
|---|---|---|---|
| PostHog | Privacy-bounded analytics for the public ianohan.com website: visits, referral sources, link and button interactions, and successful enquiry conversions. | Page URL, referring URL, browser/device information and anonymous interaction metadata. Contact-form fields and message content are excluded; IP addresses are anonymised, browser persistence is disabled and session replay is off. | European Union — PostHog Cloud EU. |
| Cloudmersive | Malware safety checks for media you upload, once production scanning is enabled. | The file bytes needed for the safety check. Cloudmersive describes its API as stateless and says file payloads are not retained after the transaction. | North America through the current public API endpoint; transfers are protected by the applicable data-processing terms. |
| Unipile | The connectivity bridge to WhatsApp and LinkedIn, if you connect them. | Messages, attachments and contact identifiers for a messaging account you connect. Nothing until you connect one. | European Union. |
| Paddle | Payments, as our merchant of record, if you subscribe to a paid plan. | Your billing email, plan and transaction records. We never receive or store your card number. | United Kingdom / European Union. |
Your data is stored in the European Union (Supabase, hosted on AWS in London, eu-west-2). Some processing necessarily occurs outside the EU and UK — in particular the AI features and the APIs of accounts you connect. Those transfers are protected by Standard Contractual Clauses. A small number of additional services may be engaged for specific tasks such as document e-signature, document conversion and audio transcription; where they are, they are disclosed here before they process your data.
We will update this page before a new subprocessor begins processing your data. Questions: privacy@getmyra.com.