GDPR Notice

1. Data Controller

MYVA acts as the data controller for personal data collected through our service. For data processed by your AI assistant on your behalf, you act as the data controller and MYVA acts as the data processor.

2. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide the MYVA service you subscribed to
• Legitimate interest: Security monitoring, fraud prevention, and service improvement
• Consent: Optional analytics and marketing communications (you may withdraw at any time)
• Legal obligation: Compliance with applicable laws and regulations

3. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate personal data
• Right to erasure: Request deletion of your personal data ("right to be forgotten")
• Right to restriction: Request that we limit processing of your personal data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent for optional processing at any time

To exercise these rights, contact us at privacy@myva.ai. We will respond within 30 days.

4. Data Transfers

MYVA uses Cloudflare infrastructure, which may process data in multiple regions. We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses where applicable.

5. Data Retention

We retain personal data only as long as necessary for the purposes described in our Privacy Policy. When you delete your account, personal data is permanently removed within 30 days. Anonymized usage data may be retained for service improvement.

6. Data Protection Officer

For GDPR-related inquiries, contact our data protection team at dpo@myva.ai.

7. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates GDPR.

8. Data Processing Agreement

Enterprise customers may request a Data Processing Agreement (DPA) for their organization. Contact legal@myva.ai for details.