Privacy Policy

1. Who we are

Mezzo is an intentional messaging platform that lets you communicate through separate modes — distinct identities for different areas of your life. References to "Mezzo", "we", "us" or "our" in this policy refer to the company operating this service.

2. What we collect

We collect the following categories of information:

• Account information — your name, email address, username, and password (stored as a secure hash).
• Mode data — the modes you create, including their names, bios, colours, and visibility settings.
• Message content — the subjects, bodies, and attachments of conversations you send and receive.
• Usage data — basic analytics such as login timestamps and feature usage, collected to improve the product.
• Billing information — handled entirely by Stripe. We store only a customer ID and subscription status; we never see your full card number.

3. How we use your data

• To provide and maintain the Mezzo service.
• To authenticate you and secure your account.
• To process subscription payments via Stripe.
• To send transactional emails (e.g. password resets).
• To improve the product based on aggregated usage patterns.
• To respond to support requests you initiate.

We do not sell your personal data. We do not use your message content to train machine learning models or serve advertising.

4. AI features

Mezzo offers optional AI features including email summarisation and AI-assisted drafting. When you use these features, the relevant message content is sent to OpenAI for processing. OpenAI's data handling is governed by their privacy policy. AI features are opt-in and can be ignored entirely if you prefer.

5. Data storage and security

Your data is stored on servers located in the European Union. We use industry-standard encryption in transit (TLS) and at rest. Attachments are stored in private, access-controlled cloud storage and are only accessible to participants of the relevant conversation.

No system is perfectly secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data and message content will be permanently deleted within 30 days, except where we are required to retain it for legal or financial compliance purposes.

7. Third-party services

We use the following third-party services:

• Stripe — payment processing
• OpenAI — optional AI features
• Cloudflare R2 — file and attachment storage
• Upstash — rate limiting via Redis
• Neon / Postgres — database hosting

Each provider has their own privacy policy and data processing agreements. We only share the minimum data necessary for each service to function.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data.
• Object to or restrict certain processing.
• Request a portable copy of your data.

To exercise any of these rights, contact us at ehsan.raj@hotmail.com.

9. Cookies

Mezzo uses strictly necessary session cookies to keep you logged in. We do not use tracking, advertising, or analytics cookies.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or via an in-app notice before the changes take effect. Continued use of Mezzo after that point constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at ehsan.raj@hotmail.com.