Meshly Marketing Privacy Policy
Last updated: April 7, 2026
Applies to: meshly.ai website, newsletter signups, and outbound marketing
1. Who We Are
Meshly, Inc. ("Meshly," "we," "us") provides a revenue integrity platform for businesses. Our principal office is in California, USA.
Contact: privacy@meshly.ai
This policy covers privacy practices for the meshly.ai public website, newsletter signups, and outbound marketing activities. If you are a Meshly platform customer with connected business systems, our Platform Privacy Policy governs how we handle your platform data.
2. What We Collect
2.1 Website Visitors
| Data Category | Examples | Purpose |
|---|---|---|
| Device and browser data | IP address, browser type, operating system | Security, troubleshooting |
| Page visits | URLs visited, referrer, timestamps | Website analytics (aggregated) |
2.2 Newsletter and Marketing Signups
| Data Category | Examples | Purpose |
|---|---|---|
| Contact information | Email address, name (if provided), company (if provided) | Marketing communications (consent/opt-in) |
| Engagement data | Email opens, link clicks | Campaign optimization |
2.3 Account Registration
If you create a Meshly account, you provide your name, email, company name, and job title. Once you begin using the Meshly platform (connecting business systems, processing documents), our Platform Privacy Policy applies to that data.
2.4 Cookies and Tracking Technologies
| Type | Purpose | Technologies | Duration |
|---|---|---|---|
| Strictly necessary | Session management, authentication, security | Session cookies, CSRF tokens | Session or up to 24 hours |
| Analytics | Understanding website usage in aggregate | Page view counts, referrer data | Up to 26 months |
Meshly does not use advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not participate in ad networks or sell cookie data.
How to control cookies: You can block or delete cookies through your browser settings. Meshly honors Global Privacy Control (GPC) browser signals. Blocking strictly necessary cookies may prevent the website from functioning correctly.
3. How We Use Your Information
- Website operation — serving pages, maintaining security, troubleshooting.
- Analytics — understanding aggregate usage patterns. No individual behavioral profiles.
- Marketing communications — newsletters, product updates, event invitations to opt-in individuals.
- Legal compliance — responding to lawful requests, enforcing our terms.
We do not: sell personal information, share for cross-context behavioral advertising, use advertising cookies or retargeting pixels, purchase or rent email lists.
4. Marketing Communications
4.1 Opt-In
We send marketing communications only to individuals who have affirmatively opted in. Pre-checked consent boxes are never used.
4.2 Opt-Out
Every marketing email includes an unsubscribe link. Opt-out requests are honored within 10 business days per CAN-SPAM. Opting out of marketing does not affect transactional communications.
4.3 CAN-SPAM Compliance
All marketing emails are clearly identified as marketing, include our physical mailing address, contain a working unsubscribe mechanism, use accurate headers, and are not sent to purchased lists.
5. How We Share Your Information
5.1 Service Providers
| Provider | Service | Data Shared |
|---|---|---|
| Vercel | Frontend hosting and CDN | Website usage data, IP addresses |
| Email service provider | Newsletter delivery | Subscriber email addresses, engagement data |
All service provider agreements include CCPA/CPRA-compliant data protection terms.
5.2 Legal Requirements
We may disclose information when required by law. We will notify you before disclosure unless legally prohibited from doing so.
5.3 Business Transfers
In the event of a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.
We do not sell personal information. We have not sold personal information in the preceding 12 months.
6. Your Privacy Rights
The following rights are available under CCPA/CPRA, VCDPA, CPA, CTDPA, TDPSA, OCPA, and other state privacy laws. We extend these rights to all users regardless of state of residence.
| Right | Description |
|---|---|
| Right to Know | Request disclosure of personal information collected |
| Right to Delete | Request deletion of personal information |
| Right to Correct | Request correction of inaccurate information |
| Right to Opt Out | We don't sell or share for behavioral advertising — nothing to opt out of |
| Right to Non-Discrimination | We will not discriminate against you for exercising your rights |
How to exercise your rights: Email privacy@meshly.ai. We will verify your identity and respond within 45 days.
Authorized agents: Written authorization is required.
Global Privacy Control (GPC): Honored as a valid opt-out signal under CCPA/CPRA.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Newsletter subscriber email | Until unsubscribe + 30 days |
| Website analytics | Aggregated, 26 months |
| Marketing campaign engagement data | 2 years after last engagement |
8. Account Closure and Data Deletion
You may request closure of your account at any time, regardless of subscription tier or contract status. Account closure requests are processed within 7 business days. Personal data is permanently deleted within 30 days after closure, except where retention is required by law.
9. Children's Privacy
Our services are not directed to children under 13. We do not knowingly collect personal information from children. If we discover that we have collected personal data from a child, we will delete it promptly.
10. International Data Transfers
Personal information is processed in the United States via Google Cloud Platform.
11. Changes to This Policy
This policy is updated when our practices change. Material changes will be posted prominently on meshly.ai.
12. Contact
Meshly, Inc. — meshly.ai