We explain what data we collect, how we use it, and your rights under US privacy laws, including CCPA/CPRA.
This document is available in English and Spanish. The English version is the legally binding version. The Spanish translation is provided for convenience only.
Under CCPA/CPRA and US privacy laws, you have the right to:
MYGIA LLC ("MYGIA," "we," "our"), is committed to protecting the privacy of individuals. This Privacy Policy describes how we collect, use, disclose, store and protect personal information of our clients, website users and business contacts.
This policy applies to all services, products and digital properties operated by MYGIA, including the mygia.online website.
This policy complies with CCPA, CPRA, COPPA, CAN-SPAM Act, TCPA and other US federal and state privacy laws. This policy is NOT subject to European GDPR or any Latin American data protection laws.
By using our Services, you agree to the practices described in this Policy.
We collect the following types of information:
We collect information through the following methods:
We use the information collected for the following purposes:
The processing of your personal information is based on the following legal bases under US law:
We do not sell your personal data to third parties. We may share information in the following circumstances:
To deliver our AI automation services, we use the following AI technology providers as data sub-processors:
GPT-4 and other models for text generation, analysis and conversational automation in AI agents.
Claude models for advanced reasoning, document analysis and enterprise content generation.
Gemini models and Vertex AI services for semantic search, visual analysis and multimodal processing.
Official WhatsApp Business API platform for automated client communications.
By using our Services, you acknowledge that your interaction data may be processed by these providers according to their own privacy policies. We recommend reviewing those policies.
California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)
If you are a California resident, you have additional rights under CCPA/CPRA. Similar rights may apply for residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA) and other states with active privacy laws.
Under US privacy laws, you have the following rights:
You may request detailed information about what categories of personal data we have collected about you, for what purpose, with whom we shared it and how long we retain it.
You may request deletion of your personal data, subject to certain legal exceptions (e.g., data necessary to fulfill a pending contractual obligation, legal retention requirements, fraud prevention).
You may request correction of inaccurate personal information we hold about you. We will take reasonable steps to update the data.
You may request a copy of your personal data in a structured, commonly used and machine-readable format.
You have the right to instruct us not to sell or share your personal data with third parties for cross-context behavioral advertising purposes.
We will not discriminate against you or deny services, charge higher prices or provide inferior service quality for exercising your privacy rights.
Under CPRA, you may limit the use and disclosure of your sensitive personal information to the purposes necessary to provide the services.
How to Exercise Your Rights
To exercise any of these rights, submit your request to:
We will respond to your verifiable request within 45 days of receipt. For complex cases, we may extend this deadline by up to 45 additional days with prior notice.
MYGIA does NOT sell personal data to third parties.
We do not engage in the sale of personal information as defined under CCPA/CPRA.
Under CCPA/CPRA, "sale" includes certain types of data exchanges, including the use of behavioral advertising cookies. Regarding this:
For users in other states with similar laws (Virginia, Colorado, Connecticut, Utah, Texas), you may also request opt-out of use of your data for personalized advertising through the same process.
We retain personal data for as long as necessary to fulfill the purposes for which it was collected.
We implement reasonable technical and organizational measures to protect your personal data.
No security system is impenetrable. We cannot guarantee the absolute security of your data, but we commit to maintaining security standards appropriate to the processing risk.
MYGIA is based in the United States of America. If you access our Services from outside the US, your data will be transferred, processed and stored in the US, where data protection laws may differ from those of your country of residence.
By using our Services, you expressly consent to the transfer of your data to the US and other countries where we operate or where our AI sub-processors operate (OpenAI, Anthropic, Google).
For clients from countries outside the US, we may implement appropriate contractual safeguards to protect your data during international transfers.
This policy does NOT serve as a transfer mechanism to or from the European Union. MYGIA does not direct its services to EU residents and is not subject to GDPR.
Our services are NOT directed to children under 13 years of age.
MYGIA does not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). Our Services are designed for businesses and adults.
If we discover we have inadvertently collected data from a child under 13, we will take immediate steps to delete that information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].
For users between 13 and 17, use of our Services requires verifiable consent from a parent or legal guardian.
Our website and Services may contain links to third-party websites, applications or services. This Privacy Policy does not apply to those third parties.
We are not responsible for the privacy practices of third-party sites or services. We recommend reading the privacy policies of any third-party site before providing your personal information.
The following third-party services may be integrated into our platforms:
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements or other operational reasons.
When we make material changes, we will notify you through:
Continued use of the Services after publication of changes will constitute your acceptance of the updated policy.
Under California Civil Code Section 1798.83 (Shine the Light), California residents may request information about the disclosure of personal data to third parties for their own direct marketing purposes. For CCPA/CPRA requests, use subject line 'California Privacy Rights'.
Under the Virginia Consumer Data Protection Act (VCDPA), Virginia residents have similar rights to those described in Section 8. Use subject line 'Virginia Privacy Rights'.
Residents of Colorado (CPA) and Connecticut (CTDPA) have similar rights under their respective privacy laws. Use subject line 'Colorado/Connecticut Privacy Rights'.
If your rights request is denied, you may appeal by sending an email with subject 'Privacy Rights Appeal'. We respond within 60 days. You may also file a complaint with the Attorney General of your state.