Privacy

What we may store

Depending on what you choose to use, this can include:

• Account details (for example email and display name).
• Journey information you create (labels, milestones, status you record).
• Costs and payment notes you enter in reporting currency and originals you choose to keep.
• Contacts and people you add.
• Notes and questions.
• Documents you upload to your private vault.
• Technical logs needed to run and secure the service.

Why we store it

To provide the private journey dashboard you signed up for: show your data back to you and the partners you invite, send transactional emails when enabled, and keep the service safe.

What we do not do

• We do not sell your personal data.
• We do not make your journey public by default.
• We do not run an agency marketplace or advertising profile from your content.

Limited usage analytics

We collect limited technical and usage information to operate, secure, and improve MySurrogacy. This may include page visits, approximate device information, referrer domain, account activity such as signups, and aggregate counts of product usage.

We do not use third-party advertising trackers. We do not sell personal data. We do not use journey content for advertising analytics.

Administrators may see operational information such as user accounts, visit counts, journey counts, document counts, storage usage, and feature usage counts. Private journey content such as notes, questions, document contents, and payment details is not shown in analytics views.

In limited support or security situations, administrators may need access to account-level information to operate the service. We aim to keep this access minimal and proportionate.

Infrastructure and email

The service runs on cloud infrastructure (for example AWS) in a typical hosted setup. When transactional email is enabled, messages may be sent through MailerSend using the addresses configured for the environment.

Transactional emails may use a no-reply address such as no-reply@mysurrogacy.io. They are operational messages (for example invitations or verification), not marketing lists.

Security

Accounts are private. Documents are private to your journey and not published at public URLs. The site is intended to be served over HTTPS in production.

Your choices

Update or delete data in the app where those actions exist. For questions, use the Contact page or email info@mysurrogacy.io.