Privacy Policy

1. Introduction

MYRA Platform ("MYRA", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our coaching marketplace platform, available at myra.app (the "Platform").

By using MYRA, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, profile photo, and role (seeker or listener).
• Profile Data: Phone number, location, bio, date of birth, and emergency contact information.
• Payment Information: We process payments through Razorpay. We do not store your credit/debit card details. Razorpay handles all payment data per PCI-DSS standards.
• Listener Applications: Professional qualifications, certifications, experience, scenario responses, social media links, and government identification documents.
• Session Content: Call recordings (when implemented), session notes, and feedback/reviews.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, session duration, and timestamps.
• Device Information: Browser type, operating system, and IP address.
• Authentication Data: Login method (Google or email) and session tokens.

3. How We Use Your Information

• To create and manage your account on the Platform.
• To connect seekers with appropriate listeners based on preferences and availability.
• To process wallet top-ups, session payments, and listener payouts.
• To verify listener identities and qualifications during the application process.
• To provide real-time voice communication services via Agora.
• To detect and prevent fraud, abuse, and safety concerns.
• To send transactional notifications (payment confirmations, session reminders).
• To improve our Platform through analytics and usage patterns.
• To comply with legal obligations and respond to lawful requests.

4. Data Sharing & Third Parties

We do not sell your personal data. We share information only in the following circumstances:

• With Listeners/Seekers: Limited profile information (name, photo) is shared to facilitate sessions.
• Service Providers: Firebase (authentication, database), Agora (voice infrastructure), Razorpay (payment processing).
• Safety & Compliance: When required by law, to protect user safety, or to enforce our Terms of Service.
• With Your Consent: When you explicitly authorize sharing for a specific purpose.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted over HTTPS (TLS 1.3 encryption).
• Firebase Authentication with secure token management.
• Payment signature verification (HMAC-SHA256) for all transactions.
• Rate limiting on API endpoints to prevent abuse.
• Role-based access control (RBAC) for data access.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 5 years for legal and accounting purposes. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

In accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) and applicable laws, you have the right to:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate personal data.
• Erasure: Request deletion of your personal data.
• Grievance Redressal: Contact our Data Protection Officer for any concerns.
• Nomination: Nominate a person to exercise your rights in case of death or incapacity.

8. Children's Privacy

Users under 18 years of age require verifiable parental or guardian consent to use the Platform. We collect only the minimum data necessary and implement additional safeguards for minor users, including mandatory emergency contact information and restricted session features.

9. Cookies & Local Storage

We use essential cookies and local storage for authentication tokens and theme preferences. We do not use third-party advertising or tracking cookies. Firebase may set its own cookies for authentication purposes.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: