Privacy Policy
Last Updated: February 2026
HeyMyra Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our services.
1. Information We Collect
We may collect personal information that you voluntarily provide to us, including but not limited to:
- Name
- Email address
- Phone number
- Account information and usage data
Information Collected from Third-Party Platforms (Meta/Facebook/Instagram)
When our clients connect their Facebook Pages or Instagram Professional accounts to Myra, we access and process data via the Meta Graph API to provide our automated messaging services. This "End-User Data" includes:
- Messaging Content: The text, media, and timestamps of direct messages sent to our clients' connected Instagram and Facebook Messenger accounts.
- Profile Metadata: Basic public profile information of the individuals interacting with our clients, such as their social media handle, name, and profile picture URL.
- Engagement Data: Comments, story replies, and mentions on connected Instagram and Facebook accounts.
Note on Media Files: For media files (such as images or videos) received via Instagram or Facebook messaging, we do not permanently store these files on our servers. We securely process them in real-time and render them directly via Meta's native content delivery networks (CDNs) in compliance with Meta's Developer Data Use Policy.
2. How We Use Your Information
We use the information we collect to provide, maintain, and improve our services. Specifically regarding SMS/Text Messaging, we use your phone number for the following purposes:
- To send you login verification codes (2FA) or security alerts.
- To provide customer support and respond to your inquiries.
- To send you important service updates, account notifications, or billing alerts.
- To communicate with you regarding your use of the Myra platform.
Processing of End-User Data (Via Meta/Facebook)
We act as a Data Processor for the End-User Data collected from Meta platforms. We process this data strictly for the following purposes:
- To operate our AI agents to automatically read, route, and respond to direct messages and comments on behalf of our clients.
- To provide our clients with a secure dashboard to view their conversation history and manage their leads.
We do not use this Meta-derived End-User Data for our own marketing purposes, we do not sell or share it with third-party advertisers, and we do not use your proprietary lead data to train our general AI models.
3. Data Sharing and Disclosure
We respect your privacy. We do not sell, rent, loan, trade, or lease any personal information collected, including phone numbers, to any third party.
SMS Consent and Phone Numbers: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We may share information with trusted third-party service providers (such as SMS delivery platforms) strictly for the purpose of delivering our services to you. These providers are contractually obligated to keep your information confidential and use it only for the purposes for which we disclose it to them.
4. Data Security
We implement a variety of security measures to maintain the safety of your personal information. However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.
- Account Data: Retained for the duration of your active account, plus up to 30 days after account closure for backup and recovery purposes.
- Meta/Instagram End-User Data: Message content and conversation history are retained for as long as our client maintains an active account, or until the end-user or client requests deletion.
- Billing and Transaction Records: Retained for up to 7 years as required by applicable tax and accounting laws.
- Analytics Data: Aggregated, anonymized analytics may be retained indefinitely for service improvement purposes.
Upon request for data deletion, we will remove your personal data within 30 days, except where retention is required by law.
6. Data Deletion Rights for Meta/Instagram Users
If you are an end-user who has interacted with a Myra AI agent via a client's Instagram or Facebook account and you wish to have your data removed from our systems, you have the right to request full data deletion. Please visit our Data Deletion Page for step-by-step instructions on how to submit a deletion request.
7. International Data Transfers
Myra is operated from the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located.
By using our services, you consent to the transfer of your information to the United States. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy and applicable data protection laws, including GDPR for users in the European Economic Area (EEA).
8. Third-Party Services
We use trusted third-party service providers to help us operate our platform. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your data. Our key service providers include:
- Cloud Infrastructure: For secure data storage and application hosting.
- Meta Platforms (Facebook/Instagram): For accessing messaging and engagement data via the Graph API.
- Payment Processors: For secure handling of billing and subscription payments.
- SMS/Communication Providers: For delivering verification codes and service notifications.
- Analytics Services: For understanding platform usage and improving our services.
We do not sell your personal information to any third parties.
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our platform. For detailed information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.
10. Children's Privacy
Myra is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.
If we become aware that we have inadvertently collected personal data from a child under the applicable age, we will take steps to delete such information as soon as possible. If you believe that a child has provided us with their personal information, please contact us immediately at contact@heymyra.ai.
11. Contact Us
If you have any questions regarding this Privacy Policy, please contact us at:
HeyMyra Inc.
A Delaware Corporation
Email: contact@heymyra.ai
