Privacy Policy

We collect the following categories of information to provide and improve our services:

• Account Information: Name, email address, and password when you create an account. Business details including your brand name, website domain, competitor names, and custom questions/prompts you want measured. Support messages you send to us.
• Service Generated Data: Prompt sets, audit runs, captured AI response texts, extracted brand mentions and citations, visibility scores, reports, and recommended actions.
• Payment & Billing Information: Subscription plan and billing status. We do not store or transmit payment card details on our servers; card details are handled directly by Stripe. We only receive a payment customer reference, your plan details, and transaction confirmation.
• Technical & Error Data: Error logs recorded when system issues occur, including the specific error, referring page, browser type, and IP address. We do not run advertising, profiling, or behavioral analytics tools.

We use your information to:

• Run audits, produce visibility reports, and display performance results.
• Create and maintain your account and keep you securely logged in.
• Process subscription payments, manage account billing, and issue payment notices.
• Send transactional emails, such as password resets, run completion updates, and monitoring alerts.
• Diagnose technical errors and improve system reliability and performance.
• Respond to customer support inquiries.
• Comply with legal and accounting requirements.

We do not sell your personal information, nor do we share it with third parties for their marketing or advertising purposes.

To identify sources behind AI answers and analyze submitted domains, Myrah retrieves publicly available web pages using third-party retrieval infrastructure.

• We fetch only pages that are publicly accessible. We do not sign in to services or access content behind paywalls or logins.
• We transmit only the target URL or domain to the retrieval service.
• Returned public page content and metadata are stored to provide supporting evidence for your audit results.

We work with trusted third-party service providers to host, operate, and maintain Myrah under strict data processing agreements. Key subprocessors include:

Third-party service providers only handle data necessary to perform their respective functions on our behalf.

To measure brand visibility and generate outputs, Myrah queries third-party AI models (including OpenAI, Anthropic, Google Gemini, and Perplexity).

• What is shared: The prompt text you configure, which generally contains your brand name, competitor names, and industry keywords.
• What is NEVER shared: Your personal name, email address, account credentials, payment details, or subscription identifiers.

We interact with AI providers via business and API tiers where data is not used to train AI models by default. Myrah does not use your data to train AI models.

If you are located in the European Economic Area (EEA) or the United Kingdom, our lawful bases for processing your data include:

• Performance of a Contract: Processing required to provide the Myrah service, manage accounts, run audits, and process payments.
• Legitimate Interests: Maintaining platform security, diagnosing errors, and preventing system abuse.
• Legal Obligation: Compliance with tax, financial reporting, and statutory obligations.
• Consent: Specific processing where your consent has been explicitly granted and not withdrawn.

Depending on your location (including the EEA, UK, and California), you may hold statutory rights regarding your personal data, including the right to:

• Access personal data held about you and receive portable copies.
• Correct inaccurate or incomplete information.
• Request deletion of your personal details.
• Object to or restrict specific processing activities.
• Exercise rights without receiving discriminatory treatment or downgraded service.

To exercise your rights, contact us at privacy@myrah.ai from your registered email address. Requests are processed within 30 days free of charge.

We use strictly necessary cookies and local storage required to operate the platform:

• Maintaining your authenticated session.
• Remembering user preferences (such as light or dark display mode).
• Protecting forms against Cross-Site Request Forgery (CSRF).

We do not use advertising pixels, cross-site trackers, or non-essential behavioral analytics tools (such as Google Analytics).

• Account & Audit Data: Retained for the lifetime of your active account so you can compare audit metrics across historical runs. Canceling a paid subscription stops future billing but retains existing history until account deletion is requested.
• Account Deletion Requests: You can request full account deletion by emailing support@myrah.ai. Your account, prompt sets, audit history, and reports will be removed within 30 days.
• Exceptions: Invoices and financial records are retained for statutory tax periods. Diagnostic error logs are automatically cleared after a short retention window.

We implement technical and organizational security controls to protect platform data:

• Encryption of data in transit using TLS.
• Encryption of database and stored assets at rest.
• Database row-level security ensuring strict account isolation.
• Payment handling offloaded directly to PCI-compliant gateways.

If a security incident affecting your personal data occurs, we will notify affected users and appropriate regulators without undue delay.

Myrah is operated from the United States, where data is stored and processed. For users in the UK or EEA, international data transfers to our infrastructure or subprocessors are safeguarded using Standard Contractual Clauses (SCCs) and equivalent lawful transfer mechanisms.

Myrah is a business service and is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we identify that a minor has provided us with personal information, we will delete it promptly.

We may update this Privacy Policy to reflect platform changes, legal requirements, or updated subprocessors. If material changes occur affecting your rights or data usage, we will notify account holders via email prior to the changes taking effect.

If you have any questions, concerns, or privacy requests, please contact us at: privacy@myrah.ai