Privacy Policy

1. Introduction

Myna Systems Inc ("Myna," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we handle personal information when you visit https://www.myna.cx, use https://app.myna.cx, interact with our sales and support channels, or configure AI agents and messaging workflows through our platform.

This Policy should be read together with our Terms of Use, including the Data Processing Agreement in Section 14 of those Terms.

2. Scope and roles

Myna acts in different roles depending on the data involved:

• Controller: for account registration, billing, marketing communications, website analytics, and other data we collect to operate our business and provide the Services to customers.
• Processor: for End User conversation content, contact records, and other Customer Data you submit through your Account. In that context, you are the controller and we process data on your instructions as described in our DPA.

This Policy primarily describes Myna's activities as a controller. If you are an End User interacting with a business that uses Myna, contact that business directly for requests about how your data is handled in their workflows.

3. Information we collect

Information you provide

• account and profile details such as name, email, phone number, company, and billing address;
• payment information processed by our payment provider (we do not store full card numbers);
• support requests, survey responses, and communications with our team;
• configuration data such as prompts, knowledge bases, routing rules, and channel settings;
• Customer Data you or your End Users submit through connected channels and integrations.

Information collected automatically

• device, browser, and log data such as IP address, timestamps, pages viewed, and referral URLs;
• product usage events, performance diagnostics, and security signals;
• cookie and similar technology data as described in Section 8.

Information from third parties

• authentication or CRM data when you connect third-party accounts;
• carrier, messaging, and deliverability metadata from communication providers;
• business contact information from partners, events, or publicly available sources where permitted.

4. How we use information

We use personal information to:

• provide, operate, maintain, and secure the Services;
• authenticate users, prevent fraud, and enforce our Terms;
• process subscriptions, credits, invoices, and account communications;
• deliver AI-assisted responses, routing, analytics, and support workflows you configure;
• provide customer support and respond to inquiries;
• send service notices, product updates, and—with your consent where required—marketing messages;
• analyze usage to improve reliability, performance, and product design;
• comply with law, respond to lawful requests, and protect rights, safety, and property.

We do not sell personal information as defined by applicable U.S. state privacy laws. We do not use Customer Data to train public foundation models unless you opt in to a separate program clearly described in-product.

5. Legal bases for processing (EEA, UK, and Switzerland)

If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases:

• Contract: to provide the Services and perform our agreement with you.
• Legitimate interests: to secure the Services, improve products, and communicate about your Account, balanced against your rights.
• Consent: for optional marketing, certain analytics, and other processing where consent is required.
• Legal obligation: to comply with applicable laws and regulatory requests.

You may withdraw consent at any time without affecting prior processing.

6. How we share information

We may share personal information with:

• service providers that help us host, deliver, bill, support, and secure the Services;
• communication carriers and channel partners needed to send or receive messages you configure;
• professional advisers, auditors, and authorities when required by law or to protect rights;
• successors in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy;
• other parties with your direction or consent.

We require service providers to handle personal information under appropriate contractual safeguards.

7. Subprocessors

We use trusted vendors to operate the Services. Categories of subprocessors may include cloud hosting, payment processing, email and SMS delivery, customer support tooling, analytics, security monitoring, and AI model providers. Representative vendors include:

We may update subprocessors from time to time. Business customers may request notice of material subprocessor changes as described in our DPA.

8. Cookies and similar technologies

We use cookies, local storage, pixels, and similar technologies to operate our websites and app, remember preferences, measure performance, and—where permitted—support marketing. Some cookies are essential; others require consent depending on your jurisdiction.

You can manage non-essential cookies through our cookie preferences controls where available, or through your browser settings. Disabling certain cookies may affect site functionality.

9. Data retention

We retain personal information only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Typical retention periods include:

• Account data: for the life of your Account and up to 90 days after closure, unless export or legal hold requires longer retention.
• Customer Data in workspaces: according to your Account settings and plan, generally deleted or anonymized within 90 days after termination unless you export it sooner.
• Billing records: as required for tax, accounting, and audit obligations.
• Security logs: typically up to 12 months, unless needed to investigate incidents.
• Marketing preferences: until you unsubscribe or request deletion, plus a suppression record to honor your choice.

10. Security and breach notification

We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, monitoring, and vendor review. No method of transmission or storage is completely secure.

If we become aware of a personal data breach affecting your Account, we will notify you without undue delay where required by law and provide information about steps we are taking in response.

11. Your privacy rights

General rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to certain processing, or to receive a portable copy of your information. You may also withdraw consent where processing is based on consent.

To exercise rights related to your Myna Account, contact admin@usemyna.com. We may verify your request before responding.

California and U.S. state privacy rights

If you are a California resident, you may have rights under the CCPA/CPRA and similar state laws, including the right to know categories of personal information collected, sources, purposes, disclosures, and retention; to access specific pieces; to delete; to correct; to opt out of sale or sharing for cross-context behavioral advertising; and to limit use of sensitive personal information where applicable.

We do not sell personal information. We do not use sensitive personal information for purposes other than those permitted by law. We will not discriminate against you for exercising privacy rights.

Authorized agents may submit requests on your behalf with proof of authorization. Appeals of denied requests may be submitted to the same contact address with "Privacy Appeal" in the subject line.

EEA, UK, and Swiss rights

You may lodge a complaint with your local supervisory authority. Our lead contact for EEA/UK data protection inquiries is admin@usemyna.com.

12. International transfers

Myna is based in the United States. If you access the Services from other regions, your information may be transferred to, stored in, and processed in the U.S. and other countries where we or our subprocessors operate.

Where required, we use appropriate safeguards such as Standard Contractual Clauses and supplementary measures for cross-border transfers. Business customers may request a copy of relevant transfer mechanisms through our DPA process.

13. Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact admin@usemyna.com and we will take appropriate steps to delete it.

14. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email, in-product notice, or by posting an updated version with a revised "Last updated" date. Continued use after the effective date constitutes acceptance where permitted by law.

15. Contact us

Privacy questions and requests may be sent to:

Myna Systems Inc
131 Continental Drive, Suite 305
Newark, DE 19713
Email: admin@usemyna.com
Phone: +1 (833) 400-MYNA