Mulyra is a job aggregator and salary intelligence platform built by Aevora Labs LLC. We are committed to your privacy and to being transparent about the data we collect. You can browse job listings without creating an account. Some features (salary insights, AI matching, application tracking) require a free account.

Depending on how you use Mulyra, we may collect the following: Without an account: • Anonymous, aggregated usage analytics (pages visited, search terms, clicks) • General country/region derived from IP address (not stored) With a free account: • Email address (for authentication via Supabase) • Resume/background text (if you choose to add it) • Bookmarked jobs and application tracking data • Push notification tokens (if you opt in to alerts) Optional submissions: • Salary data you voluntarily submit through our "Contribute Your Salary" feature • Email address if you subscribe to our salary digest newsletter

When you create an account, your email address is stored securely by Supabase (supabase.com), our authentication provider. Your resume/background text, push notification preferences, and application tracking data are stored in our database hosted on Cloudflare D1. We use this data solely to provide you with personalized features such as AI resume matching, salary negotiation scripts, cover letter generation, and job alerts. We do not share your account data with employers or third parties.

If you subscribe to our weekly salary digest, we store your email address and preferred role interest. This data is used only to send you relevant salary updates. • You may unsubscribe at any time via the unsubscribe link in each email • We will never sell, rent, or share your email address with third parties • We comply with the CAN-SPAM Act and applicable anti-spam regulations

If you submit salary data through our "Contribute Your Salary" feature, the information (job title, company, salary, location, years of experience) is stored and aggregated with other submissions to improve our salary benchmarks. Your identity is never publicly visible. Submissions are associated with your user ID for deduplication only and are never displayed alongside your name or email.

We use PostHog (posthog.com) for product analytics. PostHog stores anonymous event data using your browser's localStorage. No advertising cookies are used. PostHog is SOC 2 certified and does not sell your data. You can review PostHog's privacy policy at: posthog.com/privacy

Mulyra uses Google's Gemini AI to generate resume match scores, negotiation scripts, and cover letters. When you use these features, relevant portions of your resume and the job description are sent to Google's Gemini API for processing. We do not store your data on Google's servers beyond the API request. Generated results are cached in our database to avoid repeated API calls and improve performance.

If you subscribe to Mulyra Pro, payment processing is handled by: • Stripe (stripe.com) for web subscriptions • RevenueCat (revenuecat.com) + Apple App Store / Google Play for mobile subscriptions We do not receive or store your full credit card number. Stripe and RevenueCat handle all card data and are PCI-DSS compliant. We only receive subscription status, last-4 digits, and the subscription identifier needed to grant you Pro access.

We send transactional emails (account confirmations, password resets, digest subscriptions, job alerts) via Resend (resend.com). Resend processes your email address solely to deliver messages on our behalf and does not use it for any other purpose. Resend is SOC 2 Type II certified.

Job listings on Mulyra are sourced from publicly available employer hiring portals. Salary information is extracted from job postings using AI and may be estimated. We are not affiliated with any employer listed on this platform. Always verify compensation details directly with the employer before accepting any offer. While we refresh our data regularly, listings may be outdated. A job appearing on Mulyra does not guarantee the position is currently open.

You may request deletion of your account and all associated data (resume text, application history, salary submissions, push tokens, digest subscriptions, and saved jobs) directly from your profile page or by contacting us at the email below. You may also download a copy of your personal data from the profile page using the "Download My Data" control. We will process deletion requests within 30 days. Aggregated, anonymized salary data may be retained for statistical purposes even after account deletion.

Analytics: Clear site data for mulyra.com / mulyra in your browser settings. Email digest: Click "Unsubscribe" in any digest email, or email us directly. Push notifications: Disable notifications for Mulyra in your device settings. Account deletion: Use the "Delete My Account" control on your profile page or email us at the address below.

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) grants you the following rights: Right of Access (Article 15): Request a copy of your personal data. Use the "Download My Data" button on your profile page. Right to Rectification (Article 16): Correct inaccurate personal data. Edit your profile directly, or contact [email protected]. Right to Erasure (Article 17): Request deletion of your personal data. Use the "Delete My Account" button on your profile page. Right to Restriction (Article 18): Request that we limit processing of your data. Contact [email protected]. Right to Data Portability (Article 20): Receive your data in a machine-readable format (JSON). Use "Download My Data". Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing. Contact [email protected]. Right to Lodge a Complaint: You may file a complaint with your local data protection authority. For EU residents, find yours at edpb.europa.eu. Our lawful basis for processing is consent (analytics, marketing emails) and contract performance (providing the Service you signed up for). We do not engage in automated decision-making that produces legal effects. International data transfers (Article 46): Aevora Labs LLC is based in the United States. When we transfer personal data from the EEA or UK to the US, we rely on the EU Standard Contractual Clauses (SCCs) adopted by the European Commission (Decision 2021/914) as the lawful transfer mechanism under GDPR Article 46(2)(c). Our key sub-processors that process EEA/UK personal data also rely on SCCs or, where applicable, an EU adequacy decision or the UK International Data Transfer Agreement (IDTA). You may request a copy of our SCC documentation by contacting [email protected].

Mulyra does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration. Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to opt out of the "sale" of your personal information. Because we do not sell your data, there is nothing to opt out of. However, if you believe any of our data practices constitute a "sale" under CCPA, you may contact us at [email protected] to exercise your rights. Your CCPA rights include: • Right to know what personal data we collect and how it is used • Right to delete your personal data • Right to opt out of the sale of personal data • Right to non-discrimination for exercising your privacy rights

If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Aevora Labs LLC complies with PIPEDA's ten fair information principles, as described below. 1. Accountability Aevora Labs LLC is responsible for all personal information under its control. We have designated a privacy contact who is accountable for our compliance with these principles. You may reach our privacy contact at [email protected]. 2. Identifying Purposes We identify and document the purposes for which we collect personal information before or at the time of collection. The purposes for each category of data we collect are described in the "What We Collect" section of this policy. 3. Consent We obtain your meaningful consent before or at the time we collect your personal information, and we use or disclose it only for the purposes you have consented to. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by adjusting your preferences in your account settings or by contacting us at [email protected]. Withdrawal of consent may limit your ability to use certain features of the Service. 4. Limiting Collection We collect only the personal information that is necessary for the purposes identified. We do not collect information indiscriminately. Our collection practices are described in the "What We Collect" section of this policy. 5. Limiting Use, Disclosure, and Retention We use and disclose your personal information only for the purposes for which it was collected, except with your consent or as required by law. We retain personal information only as long as necessary to fulfil those purposes. Retention windows are described in the "Data Retention & Deletion" section of this policy. 6. Accuracy We make reasonable efforts to ensure that the personal information we hold is accurate, complete, and up to date as required for the purposes for which it is used. You may request correction of inaccurate information through your account settings or by contacting us at [email protected]. 7. Safeguards We protect your personal information with security safeguards appropriate to the sensitivity of the information. These safeguards include encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. Our sub-processors — including Supabase, Cloudflare, Stripe, Resend, RevenueCat, PostHog, Sentry, and Google (Gemini AI) — maintain their own industry-standard security programmes. 8. Openness We make information about our policies and practices relating to the management of personal information readily available. This Privacy Policy describes our practices in full. If you have questions not addressed here, please contact us at [email protected]. 9. Individual Access Upon written request, we will inform you of the existence, use, and disclosure of your personal information and give you access to that information. You may submit an access request through your account's Privacy Dashboard ("Download My Data") or by emailing [email protected]. We will respond within 30 days of receiving a verifiable request. If we are unable to provide access to certain information, we will explain the reasons why. 10. Challenging Compliance You may direct any challenge concerning our compliance with PIPEDA to our privacy contact at [email protected]. We will investigate all complaints and respond in writing. If a complaint is not resolved to your satisfaction, you may escalate it to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca. Canada's Consumer Privacy Protection Act (Bill C-27 / CPPA) Canada's Consumer Privacy Protection Act (Bill C-27) is currently before Parliament. We monitor its progress and are prepared to comply with its requirements upon enactment. Our existing data rights infrastructure — including account-level access, correction, deletion, and portability controls — already satisfies the core individual rights proposed under the CPPA. Salary Submission Consent (Canadian Users) When you submit salary data as a Canadian user, you consent to its collection, aggregation, and display in anonymised form on Mulyra in accordance with PIPEDA Principle 3 (Consent). You may withdraw this consent at any time by deleting your submission from your account settings or by contacting [email protected].

Mulyra is intended for users who are 13 years of age or older (or 16 in the EEA/UK where required by applicable national law under GDPR Article 8). We do not knowingly collect personal information from children under 13. If we discover that a user under 13 has provided us with personal information, we will delete that information within 30 days and terminate the associated account. If you are a parent or guardian and believe your child under 13 has created a Mulyra account or submitted personal data, please contact us immediately at [email protected] and we will take prompt action.

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date at the top of this page. Material changes will be communicated via the app or email if you have an account.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: Privacy & data matters: [email protected] Product support: [email protected]