Privacy Policy

1. Overview

Mewayz (“we,” “us,” or “our”) provides an all-in-one business platform at mewayz.com and app.mewayz.com. This policy explains what data we collect, how we use it, who we share it with, and the rights you have over it. It applies to all visitors of the marketing site and all account holders of the product.

2. Information we collect

• Account data: name, email, password hash, company name, billing country, and (if you purchase a plan) Stripe customer ID. We never see or store your card number — Stripe processes payments directly.
• Workspace data: contacts, deals, invoices, files, messages, and any other content you create in Mewayz. This data belongs to you.
• Usage data: pages visited, modules used, timestamps, IP address, user-agent, referrer. Captured by privacy-respecting analytics (Umami, Matomo, Cloudflare Insights, PostHog).
• Cookies: a small set for authentication, CSRF protection, and preferences. We do not use third-party advertising cookies.
• Support communications: emails, chat transcripts, and any attachments you send us.

3. How we use your information

• To provide the platform — authentication, billing, support, and the features you activate.
• To improve the platform — diagnostics, error tracking, performance monitoring, and product analytics on aggregated trends.
• To send essential service emails — receipts, security alerts, plan changes, and outage notices.
• To send opt-in marketing emails — only after you actively subscribe. You can unsubscribe at any time from the link in every message.
• To meet legal obligations — tax, accounting, fraud prevention, and lawful requests from authorities.

We do not sell your personal data and we do not use your workspace content to train AI models.

4. Who we share data with

We rely on a small set of vetted sub-processors:

• Stripe — payment processing.
• AWS — infrastructure hosting.
• Cloudflare — CDN, DDoS protection, network security.
• SendGrid / Postal — transactional email delivery.
• Sentry — error and performance monitoring.
• PostHog — product analytics (self-hosted).

We disclose data to other parties only when you direct us to, when required by law, or to enforce our Terms of Service.

5. Data retention

Account and workspace data is retained for the lifetime of your account. If you cancel, we keep your data in read-only mode for 30 days so you can export, then permanently delete it. Backups are encrypted and rotated on a 7-day cycle. Invoices and tax records are retained for the period required by law (typically 7 years).

6. Your rights

Subject to applicable law (including GDPR for the EU/UK and CCPA for California), you may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and personal data.
• Export your workspace data in CSV / JSON / PDF.
• Object to or restrict certain processing.
• Withdraw consent for marketing emails at any time.

To exercise any of these rights, email [email protected] from the email address on your account. We respond within 30 days.

7. Security

We use TLS 1.3 for data in transit and AES-256 for data at rest. Production access is restricted, logged, and audited. See our security overview for technical detail. No system is 100% impenetrable; if a breach affects your data, we will notify you within 72 hours of confirmation, as required.

8. International transfers

Our servers are in the United States and the European Union. If you access Mewayz from another region, your data will be transferred to, stored, and processed in those regions under Standard Contractual Clauses where required.

9. Children

Mewayz is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may revise this policy as the product or applicable law evolves. Material changes will be announced by email to active account holders at least 14 days before they take effect.

11. Contact

Privacy questions: [email protected]
General support: [email protected]