Privacy Policy

Murmly (“Murmly”, “we”, “us”) is a private, multi-account messaging-triage dashboard operated by Shmergsons Private Limited, a company incorporated in India, registered office at Shop No. 510, Rajwado, Mapusa, North Goa, Goa, India, 403507 (“the Company”). The service is available at https://murmly.q2q.bz. For any privacy question or request, contact admin@shmergsons.com.

Murmly handles personal data in two distinct capacities:

• As a controller — for the data that identifies you as a Murmly user (your account, sign-in, and the configuration of the accounts you connect). We decide how that data is used.
• As a processor — for the message content you ingest through connected accounts (the emails, Instagram direct messages, and comments sent to you and your correspondents). You — the operator who connects an account — are the controller of that content; we process it only to display it to you and on your instructions.

• Account & identity — when you sign in with Google, we receive your name, email address, and profile image, plus the OAuth tokens and session needed to keep you signed in. If you join via an invitation or request access, we store the email address associated with that attempt.
• Connected-account configuration — for each account you connect, we store the platform, account identifiers, display name, and (for email) the IMAP host, port, and username. The credentials and access tokens needed to read that account are encrypted at rest.
• Ingested content — direct messages, comments, and emails received by your connected accounts, including sender, subject, body (text and HTML), timestamps, and the classification metadata Murmly derives (e.g. work/personal, noise/relevant).
• Technical data — basic request logs and privacy-friendly, cookieless usage analytics.

We use your data to operate the service: to authenticate you, connect and sync your accounts, display and classify your messages for triage, and keep the service secure. Under the GDPR our legal bases are:

• Performance of a contract (Art. 6(1)(b)) — to provide the dashboard you sign up for.
• Legitimate interests (Art. 6(1)(f)) — to secure, maintain, and improve the service.
• Consent (Art. 6(1)(a)) — where you connect a third-party account and authorize access to its content; you can withdraw it at any time by disconnecting the account.

We do not sell your data, use it for advertising, or share it with third parties except the sub-processors below, strictly to run the service.

Murmly’s infrastructure is operated in the United States and the European Union. Where data is transferred outside your country, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses, to protect it.

We retain ingested content only while the corresponding account stays connected. Disconnecting an account in Murmly — or submitting an Instagram data-deletion request — immediately and permanently erases that account’s stored messages, threads, and classification rules, along with the connected-account record itself, including its stored credentials and access tokens. Removing Murmly from your Instagram account revokes our access; to also erase data we already ingested, disconnect it in Murmly or send a deletion request. If you have lost access to your account, you can email admin@shmergsons.com and we will erase your data on your behalf. See our Data Deletion page. Account and identity data is deleted when you close your account, subject to any legal retention obligations.

Access credentials and tokens are encrypted at rest. Access is restricted to authenticated users, data is isolated per tenant, and connections use industry-standard transport encryption. No system is perfectly secure, but we take reasonable measures to protect your data.

We use strictly necessary cookies to keep you signed in (session cookies set by our authentication layer). We use privacy-friendly, cookieless usage analytics to understand aggregate traffic; it does not track you across sites. We do not use advertising or third-party tracking cookies.

Subject to applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal data; object to or restrict certain processing; and withdraw consent. To exercise any right, email admin@shmergsons.com. You also have the right to lodge a complaint with your local data-protection authority.

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to non-discrimination for exercising your rights. We do not sell or share your personal information. To make a request, email admin@shmergsons.com.

Murmly is a business tool not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children.

Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.

Shmergsons Private Limited — admin@shmergsons.com