What we process

• —Account email, name, and profile fields you provide
• —Business metadata, vault files, digital form drafts, and PFS data
• —Advisor chat threads and derived document indexes for RAG
• —Usage, audit, and security events

Where it lives

• —Authentication: Supabase (email, OAuth, session tokens)
• —Application data: Neon Postgres
• —Uploaded files: Neon Object Storage (or configured S3-compatible storage)
• —Email: Resend when configured for vault review and consult notices
• —AI: OpenAI when configured for Advisor and embeddings

How we use it

To operate your workspace, compute readiness metrics, power the MYBA Advisor on your data, schedule consults you request, and send transactional messages you opt into (document review, booking confirmations). We do not sell your personal information.

Your choices

You may update profile and business settings in the app, export advisor threads where enabled, and request account deletion through your MYBA administrator. Vault documents you delete are removed per our retention procedures on the storage backend.