Who we are
Mythika is a business solutions studio operated by Ramy Sentawos in Egypt. Contact ramy@mythika.agency about your information.
What we collect
A project brief may contain company name, work email, website, goals, timing, your preferred follow-up route and optionally your name, job title and phone. An account collects your name, company, job title, phone, email and authentication credentials. We do not store your password in Mythika website code; authentication is handled by Supabase. To limit abuse, the controlled intake function stores a one-way hash of your internet address, mixed with a secret and the date, so it changes every day and cannot be turned back into your address.
Why and how we use it
We use request information to assess the work, respond, scope services and keep a record of the conversation. An optional account lets a verified user view requests associated with their email. Mythika’s systems may use request context to prepare internal analysis and route follow-up; human approval is required before client-facing work or external action. Marketing email requires a separate unchecked consent choice. We do not sell your information or use it for third-party advertising.
Who processes it
Website hosting and security are provided through Cloudflare; account authentication and website request storage use Supabase. Email, Facebook and Instagram process information when you choose those contact channels. The business-context intake also collects optional answers about services, customers, goals, constraints and budget when you choose to provide them. They are stored with the request for scoping and delivery. Private client-link answers join the agreed project context. The optional Experience Lab public-page reader sends the public URL you choose to Jina AI for extraction when you click Read; that tool does not submit a Mythika brief or store your URL in the Mythika lead database. AI tools may also help draft or research work under human review. Do not send sensitive personal or patient information through the brief.
Security and retention
Website requests are accepted through a controlled server function, not direct public database writes. Account access requires email verification. No online system can be guaranteed perfectly secure. We retain information as needed for the request, contractual duties and applicable records; automatic deletion and backup expiry must be verified before a fixed retention period can be promised.
Your choices
You may request access, correction, a copy, withdrawal of marketing consent or deletion at ramy@mythika.agency. See data deletion. Some financial records may need to be retained by law.
Changes
Material changes will update the review date and, for active clients where relevant, be communicated directly.