Privacy Policy

1. Introduction

Teyra Inc. ("Teyra," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our membership management platform ("Platform").

This policy applies to Store operators ("Stores") who register accounts on the Platform and to members ("Members") who enroll in Store membership programs through the Platform.

2. Information We Collect

Store Account Information

• Business name, address, city, and state
• Contact email address
• Account credentials (passwords are stored in hashed form only)
• URL slug and branding preferences

Member Information

• Full name and email address
• Phone number (if provided)
• Membership tier and enrollment date
• Membership validation and check-in records

Payment and Financial Information

• Bank account details provided through Plaid for ACH payment setup
• Payment transaction records processed through Dwolla
• Billing history and platform fee records

We do not directly store full bank account numbers. Bank account linking is handled securely through Plaid's infrastructure, and payment processing is handled through Dwolla's infrastructure. Please refer to Plaid's Privacy Policy and Dwolla's Privacy Policy for details on how they handle your financial data.

Usage and Technical Data

• IP address and browser type
• Pages visited and features used
• Device information and operating system
• Date and time of access

3. How We Use Your Information

Purpose	Data Used
Providing and operating the Platform	Account info, membership data, payment data
Processing ACH payments and transfers	Financial info via Plaid and Dwolla
Communicating service updates and alerts	Email address
Preventing fraud and ensuring security	Usage data, IP address, transaction patterns
Improving Platform features and performance	Aggregated and anonymized usage data
Complying with legal obligations	As required by applicable law

4. ACH, Plaid, and Dwolla Data Handling

When you connect a bank account through our Platform:

• Plaid is used to securely authenticate and link bank accounts. Plaid accesses your bank credentials solely to verify your account and retrieve account and routing numbers. Teyra does not see or store your bank login credentials.
• Dwolla is used to initiate and process ACH transfers. Dwolla stores payment source information and processes transactions in compliance with NACHA rules and applicable financial regulations.
• Teyra stores only the minimum information necessary to display payment status, transaction history, and facilitate customer support (e.g., last four digits of an account, funding source IDs, transaction IDs).

5. Data Sharing and Disclosure

We do not sell your personal information.

We may share information only in the following circumstances:

• Service Providers. With Plaid, Dwolla, and other service providers who assist in operating the Platform, subject to contractual obligations to protect your data.
• Store-Member Relationship. Member information is shared with the Store that the Member enrolled with, as necessary for the membership program.
• Legal Requirements. When required by law, court order, subpoena, or government request.
• Safety and Fraud Prevention. When we believe disclosure is necessary to protect the rights, safety, or property of Teyra, our users, or the public.
• Business Transfers. In connection with a merger, acquisition, or sale of assets, with notice to affected users.

6. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL)
• Hashed password storage using industry-standard algorithms
• Access controls limiting data access to authorized personnel
• Regular security reviews of our infrastructure

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account termination, we may retain certain data as required by law, for legitimate business purposes (such as resolving disputes), or as outlined in our agreements. We will delete or anonymize your information upon request, subject to legal retention obligations.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing activities
• Request a portable copy of your data

To exercise any of these rights, contact us at privacy@teyra.io. We will respond within 30 days.

9. Children's Privacy

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

10. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service you access through the Platform.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Michigan. Any disputes arising under this policy shall be resolved in the state or federal courts located in Oakland County, Michigan.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform at least thirty (30) days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Teyra Inc.
Email: privacy@teyra.io
Support: support@teyra.io