Privacy
Last updated: June 24, 2026
Myra is designed to hold as little data as possible. Raw email content is never stored. Below is a complete summary of every data type we hold and how long we keep it.
| Data type | Retention | Notes |
|---|---|---|
| Raw email content | Never stored | Processed in memory only during active API call |
| Email summaries | 30 days | Auto-deleted after 30 days |
| Email metadata (sender, subject) | Never stored | Only used in-memory during processing |
| Gmail OAuth tokens | Until disconnected | AES-256-GCM encrypted at rest |
| Audit log entries | 90 days | Records of when Myra accessed Gmail |
| Display name & preferences | Until account deleted | Deleted on request within 30 days |
| Email address | Until account deleted | Required for authentication |
| Referral codes | Until account deleted |
You can request deletion of all your data at any time from Settings. We will process your request within 30 days. For questions, contact hello@frommyra.com.