Privacy Policy

1. Who we are

Muhr ("we", "us", "our") is an identity infrastructure platform for AI media. We operate the website at muhr.app and any associated services. When you interact with our waitlist, contact forms, or platform, you are sharing information with us.

2. What we collect

We collect the following information when you join our waitlist or use our service:

• —Email address and account type (creator or business) when you join the waitlist
• —Usage data, such as pages visited and features used, collected automatically via cookies
• —Technical data including IP address, browser type, and device information

When you upload identity assets such as face photographs or voice recordings to your Vault, we collect and process biometric personal data. This data is processed only with your explicit consent and is subject to enhanced protections under the Digital Personal Data Protection Act 2023.

Identity verification data

When you create a Talent profile, our identity verification process collects:

• —Government-issued identification documents (passport, driver's license, or national ID)
• —Personal information including legal name, date of birth, and contact information

Profile content

When you create a profile, we collect:

• —Name (or stage name), photographs, videos, and voice recordings you upload
• —Demographic information (age range, ethnicity, physical characteristics) for searchable attributes

3. How we use your data

• —To contact you about early access and product updates
• —To improve and personalise our platform
• —To analyse usage patterns and optimise the user experience
• —To comply with legal obligations

4. Data storage and security

Your data is stored securely using Supabase (PostgreSQL), hosted on infrastructure compliant with industry security standards. We do not sell your personal data to third parties.

We implement industry-standard security measures to protect your data, including:

• —Encrypted storage of Profile Content and identity assets
• —Secure transmission of payment information via Stripe Connect
• —Access controls limiting who can view sensitive identity verification data

5. Your rights

You have the right to:

• —Access the personal data we hold about you
• —Request correction or deletion of your data
• —Withdraw consent to marketing communications at any time
• —Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at contact@muhr.app.

6. Cookies

We use cookies to understand how our site is used and to remember your preferences. See our Cookie Policy for full details.

7. Changes to this policy

We may update this policy as our service evolves. We will notify waitlist members of any material changes by email. Continued use of our service after changes are posted constitutes acceptance.

8. Contact

For any privacy-related questions, contact contact@muhr.app.

9. Data protection

Your use of the Platform is subject to this Privacy Policy, which describes in detail how we collect, use, store, and protect your personal data. By using the Platform, you consent to our data practices as described in this Privacy Policy and in this Section 9.

9.1 Applicability of Indian data protection law

If you are located in India, or your personal data is processed in connection with offering services to you in India, our processing of your personal data is governed by the Digital Personal Data Protection Act, 2023 and the rules made under it ("DPDP Law"), and by the Information Technology Act, 2000 and its rules to the extent applicable. Nothing in this Privacy Policy limits or waives any right you have, or any obligation Muhr has, under the DPDP Law.

9.2 Personal data we collect

We collect and process the following personal data: your government-issued identification document, legal name (and stage name, if provided), date of birth, contact details, photographs, videos, voice recordings, other Likeness materials, demographic information you provide, and payment-related information necessary to pay you.

9.3 Consent to processing

By creating an account and using the Platform, you consent to Muhr collecting, storing, using, and processing your personal data for the following purposes: verifying your identity, displaying your profile to potential buyers, facilitating licensing transactions, processing payments, operating and improving the Platform, and complying with law. We process your personal data only for these specified purposes.

9.4 Sensitive data

You acknowledge that some data you provide — such as your government-issued identification and biometric-type Likeness data (photographs, video, and voice) — is sensitive in nature. You consent to its collection and processing for identity verification and Platform operation, and we apply enhanced security measures to protect it.

9.5 Your rights as a data principal

Under applicable Indian data protection law, you have the right to:

• —Access a summary of the personal data we hold about you
• —Request correction or updating of inaccurate or incomplete data
• —Request erasure of your personal data where the purpose has been fulfilled or you withdraw consent
• —Nominate another individual to exercise your rights in the event of your death or incapacity
• —Readily withdraw your consent

To exercise these rights, contact our Grievance Officer (Section 9.11). We will respond within the timelines required by applicable law.

9.6 Withdrawal of consent

You may withdraw your consent to the processing of your personal data at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent that is necessary to operate your account, we may be unable to continue providing the Platform to you, and we will cease processing and erase the relevant personal data, subject to legal retention requirements.

9.7 Data retention and erasure

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, or to resolve disputes. Identity-verification data is retained for seven (7) years after account closure or your last successful identity verification, whichever is later, unless a longer period is required by law. When the applicable retention period ends, or upon a valid erasure request or account deactivation, we will delete or anonymize your personal data, subject to backup retention cycles and legal requirements.

9.8 Security

We implement reasonable security safeguards to protect your personal data, including encrypted storage of Profile Content and identity-verification data, secure transmission of payment information, access controls limiting who can view sensitive identity-verification data, and logging and monitoring of access.

9.9 Cross-border transfer

Your personal data may be stored or processed on servers and by service providers (including payment processors) located outside India. We transfer personal data outside India only in compliance with applicable law and applicable government restrictions on transfers to specified countries.

9.10 Personal data breach

In the event of a personal data breach, we will notify the Data Protection Board of India and affected users in the manner and within the timelines required by applicable law, and take reasonable steps to mitigate harm.

9.11 Grievance officer

If you have any complaint or grievance regarding the processing of your personal data, you may contact our Grievance Officer:

• —Name: Krish Agarwal
• —Email: contact@muhr.app
• —Address: Mumbai, MH

We will acknowledge your grievance and respond within the period prescribed under applicable law. If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India.