Terms of Service

Myna is a hosted, agent-native platform for content management and bug reporting, operated by Tiago Mouta, operating as Myna in Portugal (“Myna”, “we”, “us”). “The Service” means the website at myna.sh, the dashboard at app.myna.sh, the API and asset delivery at api.myna.sh, and the official CLI, SDK, and MCP server packages.

By creating an account or using the Service you agree to these terms. If you use the Service on behalf of a company or other organization, you represent that you have authority to bind that organization, and “you” refers to it.

You must be at least 18 years old to use the Service. The Service is intended for developers and businesses, not for children.

Sign-in is exclusively through GitHub OAuth; there are no Myna passwords. You are responsible for securing the GitHub account you sign in with (we strongly recommend two-factor authentication), for all activity under your Myna sessions and API keys, and for keeping your account email reachable. If you believe your account has been compromised, revoke your sessions and API keys from the dashboard and contact us at [email protected].

Work in Myna happens inside organizations, which are the ownership, billing, and usage boundary. Projects, content, assets, API keys, and webhooks belong to an organization. Members hold one of four roles — owner, admin, editor, or viewer — with different permissions.

You are responsible for who you invite to your organizations and for the actions of your members within them. Invitations are sent by email and expire after 7 days.

The Service is designed to be used by both people and software agents through the API, CLI, SDK, and MCP server. Access for automation is granted through API keys, which can be scoped to specific permissions and projects and can be set to expire. Key secrets are shown once at creation and are stored only as hashes; we cannot recover them.

All activity performed with your sessions or API keys — whether by a person, a script, or an AI agent — is your activity under these terms. You are responsible for the agents you connect, for reviewing the changes they produce, and for revoking keys that are no longer needed. Agent actions are attributed in revision history and audit logs.

You retain all rights to the content, schemas, and assets you store in the Service, and to the reports, attachments, and board configuration in your projects (together, “Customer Content”). You grant us a worldwide, non-exclusive license to host, store, reproduce, process, adapt (for example, to generate previews or serve cached copies), and transmit Customer Content solely as needed to provide and secure the Service. This license ends when the content is deleted from the Service, subject to the retention periods described in the Privacy Policy.

You are responsible for Customer Content: for having the rights to store and publish it, for its lawfulness, and for any personal data it contains. We do not review content before publication.

Myna Feedback lets people who are not your Myna users — your own users, customers, and testers (“End Users”) — submit reports into your projects. As between you and us, you are the controller of everything an End User submits, including any email address they give for a reply, and we process it only as your processor to provide the Service. You are responsible for giving End Users any notice and obtaining any consent or other legal basis required, for responding to their requests to access, correct, or delete what they sent, and for anything you choose to publish. We will give you reasonable assistance with such requests, and if an End User contacts us directly we will refer them to you and tell you they did.

Publishing is always an explicit action. Content and assets you publish become publicly retrievable through the public content API and the asset delivery domain, and published assets are served with long-lived cache headers, so copies may persist in browser and intermediary caches after unpublication. Draft content and previews are private: previews are accessible only through revocable, expiring preview links you create.

Reports are private to your project. Myna serves no page for the people who file them: a reporter reads their own report back inside your application, authenticated by an identity your systems sign, and sees only the public half of it — the title, the body, and the replies you marked public. Internal notes, attachments, other reporters’ reports, and the environment your application attached never travel. Publishing any of it elsewhere is your decision and your responsibility, including for the personal data it contains.

The Service offers a Free plan and a paid Pro plan (€9/month or €90/year). Current entitlements for each plan are listed on the pricing section and in the dashboard.

Payments are processed by Polar as our merchant of record. Polar sells the subscription to you, and handles checkout, payment collection, applicable taxes, invoices and receipts, refunds, and its customer portal, under Polar’s own terms. We never receive or store your card details. We share your organization identifier and billing email with Polar to link your subscription; see the Privacy Policy.

We may change prices or plan entitlements with at least 30 days’ notice by email or in the dashboard. Changes apply from your next billing period.

Plans include allowances for projects, members, storage, asset bandwidth, public API requests, and webhook endpoints. Creating resources beyond a hard allowance (projects, members) is prevented; uploads are blocked while you are over your storage allowance. Request and bandwidth allowances are soft: at 80% we warn you, at 100% the Service keeps working with a prominent warning, and sustained use above 120% may be throttled.

We apply limits conservatively: we do not take your published content or assets offline merely because you exceeded an allowance. Deliberate circumvention of metering or limits is a violation of the Acceptable Use Policy.

If a Pro payment fails, you keep full access with warnings for 7 days; from day 8 you cannot create new projects or upload new assets; from day 15 your organization is reduced to Free entitlements. If you cancel, Pro remains active until the end of the paid period and then the organization moves to the Free plan.

After a downgrade, resources above Free allowances remain readable and already-published content and assets stay online; you just cannot create new constrained resources. We never delete Customer Content solely because of a downgrade or a failed payment. Refunds are described in the Refund and Cancellation Policy.

Your use of the Service must comply with the Acceptable Use Policy, which is part of these terms. It covers prohibited content, prohibited conduct, rules for agents and automation, and how we enforce it.

We may suspend or restrict access to an account, organization, or specific content if we reasonably believe these terms or the Acceptable Use Policy are being violated, to comply with law, or to protect the Service and its users. Where practical we act narrowly (for example, removing specific content or throttling) rather than taking published sites offline, and we will notify you unless prohibited.

You can stop using the Service at any time. Deleting an organization from the dashboard starts a 30-day recovery window, after which the organization and its projects, content, assets, and keys are permanently deleted. You can export your organization’s data from the dashboard before deleting it.

We may terminate this agreement with at least 30 days’ notice, or immediately for material breach. Sections that by their nature should survive termination (including content licenses during wind-down, disclaimers, liability limits, and dispute terms) survive.

The Service interoperates with services we do not control: GitHub for sign-in, Polar for billing, the MCP clients and coding agents you choose to connect, and the endpoints you configure to receive webhooks. Your use of those services is governed by their own terms, and we are not responsible for them. Webhook deliveries are signed so your endpoints can verify authenticity; keeping your receiving endpoints secure is your responsibility.

The infrastructure and processors we use to run the Service are listed on the Subprocessors page.

The Service, including its software, design, documentation, and the Myna name and logo, is owned by us or our licensors and is protected by intellectual property law. We grant you a limited, non-exclusive, non-transferable right to use the Service under these terms. Published Myna packages (CLI, SDK, MCP server) are licensed under the terms distributed with each package. You may not copy, modify, or reverse engineer the Service except where law permits.

We work to keep the Service reliable, but it is provided without a guaranteed service level or SLA. We may change, add, or remove features. If a change materially reduces the Service’s core functionality, we will give reasonable advance notice.

The Service is provided “as is” and “as available”. To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or secure, or that content produced by agents you connect will be accurate or fit for your purposes.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, or data. Our total liability under these terms is capped at the amounts you paid for the Service in the 12 months before the claim, or €100 if you used only the Free plan. Nothing in these terms limits liability that cannot be limited by law, including liability for fraud, willful misconduct, gross negligence, or death or personal injury caused by negligence.

If you use the Service for business purposes, you will defend and indemnify us against third-party claims arising from your Customer Content, your violation of these terms, or your violation of law, including reasonable legal fees. This indemnity applies only to business users and does not limit mandatory consumer rights.

These terms are governed by Portuguese law. The courts of Portugal have jurisdiction, subject to any mandatory consumer protections and jurisdiction rights applicable in the country where you live.

We may update these terms. For material changes we will give at least 30 days’ notice by email or a prominent dashboard notice before the change takes effect. Continuing to use the Service after the effective date constitutes acceptance. The current version is always at myna.sh/terms.

Questions about these terms: [email protected].