Myca Collective LLC (“Myca”, “we”) runs mycacollective.com, a members-only platform for leaders in food and consumer goods, and the community portals hosted on it. This policy explains what we collect, why, who we share it with, and how you can see or delete it. Questions go to emma@mycacollective.com.
What we collect
- Your account and profile: name, email, phone number, photo, company, role, location, social profile links, and what you share about your work, skills, asks and offers.
- Membership and applications: your application answers and membership status. Payments are handled by Stripe. We see the amount and status, but never your full card number.
- Events: the events you RSVP to or attend, including attendance for online events.
- Messages: messages you send other members in the app, emails and texts you send to our addresses and numbers, and our replies.
- Content admins create: posts, drafts, spotlights and announcements written in the app, including images uploaded for them.
- Connected social accounts: see Connected social accounts below.
- Technical data: a login cookie that keeps you signed in, plus the standard server logs (IP address, browser, pages requested) that our hosting keeps for security and debugging. We don’t use advertising trackers or sell data to advertisers.
How we use it
- To run the community: the member directory, introductions, events, chat, jobs and programs.
- To review applications and manage memberships and payments.
- To send you the emails, texts and notifications you’d expect from a membership.
- To help admins draft and publish their community’s posts and announcements.
- To keep the platform secure and fix problems.
Who can see it
Other members of your community can see your directory profile. Your community’s admins can see your profile, application, membership and event activity, so they can run the community. We don’t sell your personal information.
We share data only with the services that run the platform for us, and only what each one needs:
- Supabase (database, storage and sign-in) and Vercel (hosting)
- Stripe (payments)
- Resend (email)
- Anthropic (AI drafting of posts and processing of messages sent to our addresses). Anthropic doesn’t use this data to train its models.
- Google (calendar invites, contact sync, spreadsheets, and the inboxes we read event and text requests from)
- Notion (application tracking), Slack (community notifications), Zoom and Luma (events), Inngest (scheduled jobs)
- LinkedIn, Instagram (Meta) and Substack, only when an admin connects an account and publishes to it
We may also disclose information when the law requires it.
Connected social accounts
Community admins can connect a LinkedIn profile, an Instagram professional account or a Substack account, so posts they approve can be published from Myca. When you connect one:
- What we receive: an access token from the platform, plus your account ID and name or username. We use these only to show which account is connected and to publish to it.
- What we do with it: we publish only posts an admin has reviewed and chosen to post, either right away or at a time they scheduled. We never post on our own, and we don’t read your followers, messages, other posts, comments or insights.
- What we keep: the token, account ID and username, stored on our servers and never shown in the browser. We also keep a record of each post we publish and its link.
- Removing access: click Disconnect on the Connections page and we delete the token straight away. You can also revoke access from LinkedIn or Instagram’s own settings. See Data deletion.
Our use of information received from Instagram follows Meta’s Platform Terms, and our use of LinkedIn data follows LinkedIn’s API Terms of Use.
How long we keep it
We keep your account and profile while you’re a member. If you leave or ask us to delete your account, we delete your personal information within 30 days. The exception is records we’re legally required to keep, such as payment and tax records. Tokens for connected social accounts are deleted as soon as the account is disconnected.
Your choices
- Edit your profile anytime on your profile page.
- Unsubscribe from non-essential emails with the link in each email.
- Ask us for a copy of your data, to correct it, or to delete it. Email emma@mycacollective.com, or follow the steps on Data deletion.
Depending on where you live (for example in the EU, the UK or California), you may have further rights, such as objecting to some uses of your data. Email us and we’ll respond within 30 days.
Security
Data is encrypted in transit and stored with providers that encrypt it at rest. Access is limited to the people and services that need it. No system is perfectly secure. If we learn of a breach that affects you, we’ll tell you.
Children
Myca is for professionals aged 18 and over. We don’t knowingly collect data from anyone younger.
Changes
If we change this policy, we’ll update the date at the top. If the change is significant, we’ll also let members know by email.