Privacy Policy

Effective date: April 5, 2026

MESH is operated by Zeta Studios LLC ("we", "us", "our"). This policy describes how we collect, use, and protect your information when you use the MESH application.

1. Information We Collect

Account information: When you sign up, we collect your email address and name. If you sign in with Google or Apple, we receive your profile information from those providers.

User content: MESH stores the data you create and import — calendar events, tasks, notes, and memories. This content is stored in our cloud database (hosted on Supabase) and is associated with your account.

Google Calendar data: If you connect your Google Calendar, we access your calendar events using the Google Calendar API. We store event details (title, time, location, description) to display them in MESH and provide intelligent briefings. We also store OAuth tokens (encrypted at rest) to maintain your calendar connection.

Usage data: We track interaction counts for billing purposes and may log anonymous usage patterns to improve the product.

2. How We Use Your Information

To provide MESH's core functionality: calendar, tasks, notes, memory, chat, and daily briefings
To generate AI-powered insights by sending your content to our LLM provider (Anthropic) for processing
To sync your calendar events between MESH and Google Calendar
To manage your subscription and billing via Stripe
To improve the product based on aggregated, anonymized usage patterns

3. Third-Party Services

MESH uses the following third-party services to operate:

Supabase — Cloud database and authentication
Anthropic (Claude) — AI language model for chat, briefings, and memory extraction
Google Calendar API — Calendar sync (only if you connect your Google account)
Stripe — Payment processing for Pro subscriptions
Vercel — Application hosting

We do not sell your personal information to any third party.

4. Data Security

Your data is encrypted in transit (TLS) and sensitive credentials (such as OAuth tokens) are encrypted at rest using AES-256-GCM. Access to our database is restricted by row-level security policies that ensure you can only access your own data.

5. Data Retention

Your content is retained as long as your account is active. If you delete your account, we will delete your data within 30 days. You can disconnect Google Calendar at any time, which optionally removes all synced events from MESH.

6. Google API Services Disclosure

MESH's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google Calendar data to provide and improve MESH's calendar features. We do not use Google user data for advertising.

7. Your Rights

You can:

Access, edit, or delete any of your content within MESH at any time
Disconnect third-party accounts (Google Calendar) from Settings
Export your data by contacting us
Delete your account by contacting us

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.

9. Contact

If you have questions about this policy, contact us at privacy@plugintomesh.com.