Privacy Policy

When you connect Gmail, Myra reads your email metadata (sender, subject, date) and snippets temporarily in order to generate summaries. Raw email content is processed in memory and never written to disk or stored in our database.

Myra only accesses emails in your inbox and does not read Sent, Drafts, Spam, or other labels unless you explicitly search for them.

We store the following in our database:

• Your email address and display name
• Your Gmail connection status and encrypted OAuth tokens
• Summaries of your emails generated by Myra (not the raw emails themselves)
• Your preferences (tone, reply style, VIP senders)
• An audit log of when Myra accessed Gmail on your behalf

Myra's summaries are automatically deleted after 30 days. Raw email content is never stored.

• Sell your data to third parties
• Use your emails to train or improve any models
• Share your email content with other users or companies
• Store your Gmail password (we use OAuth 2.0 — Myra never sees your password)
• Access your email outside of your active session

• Disconnect anytime— Remove Myra's Gmail access from Settings at any time. This immediately revokes all access.
• View your access log— See every time Myra accessed Gmail in Settings → Privacy.
• Request data deletion— Use the “Request data deletion” button in Settings to clear all your data. We'll complete deletion within 30 days.

Myra uses the following third-party services to operate:

• Anthropic — Email processing powered by secure language models. Email snippets are sent to Anthropic's API for analysis. Your data is never used to train their models. Anthropic's data handling policy applies.
• Google — Gmail API access using OAuth 2.0.
• Supabase — Encrypted database storage for your profile and summaries.
• Resend — Transactional email delivery (welcome emails, notifications).
• Vercel — Application hosting and edge functions.

OAuth tokens are encrypted at rest using AES-256-GCM before being stored in our database. All data is transmitted over TLS. We never log or expose raw token values.

See our Security page for full details.

For privacy questions, data access requests, or deletion requests, email us at hello@frommyra.com. We respond within 2 business days.