Privacy policy
This notice explains how Meshez handles account and project information when you use the website, desktop app and API.
What we collect and why
We store your name, email address, password hash, account settings and authentication records to provide and secure your account. If you enable two-factor authentication, we store an encrypted authenticator secret and hashed recovery codes. We process project overviews, boards, tasks, comments, chats and attachments to deliver the workspace you request.
We store team/business memberships, invitations, permissions and contribution records to provide collaboration and business administration. Session records include a device/browser description and sign-in timestamps. The service records aggregate daily page-view and email-delivery counts. We record account-level dates for first workspace visits, successful API access checks, first API-created boards and later return visits to improve onboarding; administrator reporting shows aggregate counts. These milestones contain no prompts or project content. Feedback you choose to send is visible with your account email to site administrators and expires after 90 days, with periodic cleanup; account deletion also removes it. In-app notification entries expire after 30 days. Preferences are saved to your account; notification entries and preferences are removed on account deletion. Backup retention is separate. Hosting, security and email systems may process IP addresses, request metadata and delivery logs for operation and abuse prevention.
Who can see your work
Other Meshez users cannot access your Personal workspace through the app or API. Team members can access shared work according to their permissions. Business administrators can see business project membership and contribution metrics, including business sign-in counts; they do not get access to your Personal boards. Authorized service operators and infrastructure providers may process data when necessary to run, secure, support or recover the service. Meshez is not end-to-end encrypted.
AI connections are optional
When you paste a Meshez connection prompt into another AI service, you share credentials and potentially project information with that service under its policies. An authorized agent can read or update the selected workspace within your permissions. Revoke or rotate keys in your account to remove future API access. Removing a key does not delete copies already held by an external provider.
The built-in project generator sends your submitted prompt to the provider you select. Provider API keys are encrypted and account-scoped. Local-model requests originate on your device. Meshez-hosted AI and credit purchases are currently disabled. We do not use your project content to train a Meshez model.
Providers and payments
Infrastructure hosts, transactional email providers and any AI service you choose process the data needed for their role. Meshez does not sell personal information or run behavioral advertising. When checkout is enabled, PayPal processes your payment details and recurring payment authorization. Meshez stores subscription identifiers, plan, payment status and access dates; it does not receive your card number or PayPal password. PayPal processes data under its own privacy statement. Do not enter payment card details in project content.
Retention and deletion
Account and workspace data are retained while needed to operate your account. Authentication tokens expire according to their purpose. You can remove individual boards or projects and request account deletion. Verified deletion removes your name and email, credentials, sessions, Personal workspace, comments, chat messages and uploaded files; filesystem cleanup may finish asynchronously. Shared jobs retain an internal author ID labeled “Deleted member”, with no usable login, so other members keep their work.
If you own a shared team or business, ownership or closure must be resolved first. A provider-managed subscription must be confirmed canceled before account deletion completes. Backup copies cannot be individually erased immediately: they expire under the operator’s backup retention schedule. The operator must configure and document that schedule before production use of this deletion flow. Limited records may need to be retained to meet legal obligations or resolve disputes. Identifying information you placed inside other people’s shared project content may require a separate reviewed request.
Your choices and rights
You can edit your profile, download an account ZIP from Account settings → Profile, export a workspace, manage sessions and API keys, or request deletion. Depending on your location, you may have rights to access, correct, delete or restrict processing, receive a portable copy, object to processing, withdraw optional consent, or complain to a data-protection authority. We verify requests and explain any applicable limits. Contact support@screensie.com for privacy requests, processing locations, provider details or a request the self-service tools cannot handle.
Account exports include accessible archived work and attachments, with a report of unavailable files. They exclude stored credentials and other users’ private work. Content is collected while the service is running; exports are not database backups.
Where a legal basis is required, core service processing is necessary to provide the requested service; security and service administration rely on legitimate interests, subject to applicable law; required recordkeeping follows legal obligations. Optional services rely on your choice and any consent required by law. International transfers, applicable safeguards and jurisdiction-specific notices must be confirmed with the operator before offering service in regions that require them.
Changes and children
We will update the date when this notice changes and provide additional notice for material changes where required. Meshez is intended for adults and business users, not children. Contact us if a child has supplied personal information.
Questions? support@screensie.com