Privacy Policy

Account data: When you register, we collect your name, email address, and a hashed password. We never store your password in plain text.

Link analytics: Each redirect through a short link records the timestamp, destination URL, country (from Cloudflare's CF-IPCountry header), device type, browser, and referrer. We do not store IP addresses.

Billing data: Payments are processed by Razorpay (India) or Stripe (global). We store only the transaction reference and plan metadata — never your card or UPI details.

Usage data: Server logs record request timestamps and HTTP status codes for operational monitoring. These logs are retained for 30 days.

• To create and manage your account and workspaces
• To power the click analytics dashboard for your short links
• To process payments and generate GST-compliant invoices
• To send transactional emails (receipt, password reset, workspace invites)
• To detect abuse, spam links, and phishing — and suspend violating accounts

We do not sell your data. We do not use your data for advertising.

• Cloudflare — CDN, DDoS protection, and real-IP passthrough. Cloudflare provides the CF-IPCountry header we use for geo analytics.
• Razorpay — Payment processing for INR transactions. Governed by Razorpay's PCI-DSS compliant infrastructure.
• Stripe — Payment processing for USD transactions.
• Resend — Transactional email delivery.

• Click analytics: 7 days on Free, 30 days on Starter, 90 days on Pro.
• Short links: Retained until you delete them or close your account.
• Account data: Deleted 30 days after account closure request.
• Billing records: Retained for 7 years as required by Indian tax law.

Under the DPDP Act, 2023, you have the right to access, correct, and erase your personal data. You may:

• Export all your link and analytics data as CSV from the dashboard
• Delete your account and associated data from Settings → Danger Zone
• Request a copy of your data by emailing privacy@meshalive.in

Passwords are hashed using bcrypt. All data in transit is encrypted via TLS 1.2+. Redis (used for sessions and caching) is not exposed to the public internet. We conduct periodic security reviews.

This policy is governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of courts in Bengaluru, Karnataka.

For privacy inquiries: privacy@meshalive.in
Meshalive Technologies Pvt. Ltd., Bengaluru, Karnataka, India.