Legal
Subprocessors
Effective Last updated
This page lists every third party involved in running Myna and what each one does. Subprocessors are providers that process personal data on our behalf to deliver the Service. The list is deliberately short — Myna uses no analytics, advertising, or tracking vendors — and this page is updated whenever it changes.
Subprocessors
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Railway | Cloud hosting: runs the application, the PostgreSQL database, and S3-compatible object storage for uploaded assets and data exports. | All Service data: account profiles, sessions, customer content, asset files, audit records, billing state. | Railway-selected deployment and operational regions; contact support for current details. |
| Resend | Transactional email delivery from [email protected]: organization invitations, and notifications to whoever filed a bug report when it arrives, receives a public reply, needs a retest, or is resolved. | Recipient email address, organization name, inviter name; for report notifications, the project name, report number and title, the public message that prompted it, and the reporter's private link. | Provider infrastructure and operational regions; international-transfer safeguards apply where required. |
Other third parties
Two further services are part of using Myna but act as independent controllers rather than as our subprocessors — you have a direct relationship with them:
| Provider | Role | Data involved |
|---|---|---|
| Polar | Merchant of record for paid subscriptions: checkout, payment collection, taxes, invoices, refunds, and the customer portal. | Billing email, organization identifier, subscription and payment details. Card data goes to Polar and its payment processors only — never to Myna. |
| GitHub | Sign-in identity provider (OAuth). Myna has no password authentication. | GitHub user ID, username, display name, email, avatar URL, shared with Myna when you authorize sign-in. |
Customer-configured webhook endpoints also receive event data, but those destinations are chosen and controlled by each customer, not by Myna.
Changes to this list
Before adding a subprocessor or materially changing one’s role, we will update this page and provide at least 30 days’ notice by email to organization owners or through a prominent dashboard notice. Questions or objections: [email protected]. See also the Privacy Policy.