1. Information we collect
We collect information that you provide directly, information generated as you use the Service, and a limited amount of technical information needed to operate the app securely.
Information you provide
- Account and profile. Your name and email address, and optionally your company, job title, phone number, WhatsApp number, website, business address, social links, an avatar, and a photo of your own business card.
- Contacts and leads you capture. Business card images (front and back), names, job titles, emails, phone and WhatsApp numbers, company details, social links, and any notes, tags, or hashtags you add.
- Voice notes. Audio that you record, which is transcribed into text so it becomes part of a contact's history.
- Events. Trade shows you mark as attending and any events you create.
- Inventory and matching lists. If you upload product inventory or want-to-buy lists, for example as a spreadsheet, we store and process that content to power smart matching and follow-up drafts.
- Communications with us. If you contact support, we keep your messages and contact details so we can respond and improve the Service.
Information collected automatically
- Device and app information. Device model, operating system version, app version, and language settings, which help us run and troubleshoot the app.
- Log and diagnostic data. When the app communicates with our servers, our hosting provider records standard technical logs such as internet protocol (IP) address, request time, and error information to keep the Service secure and reliable.
No advertising or tracking. We do not use third-party advertising networks, and we do not track you across other apps or websites. We do not sell your personal information.
2. Device permissions
The app requests certain device permissions only when a feature needs them. You can grant or revoke each permission in your device settings at any time, though some features will not work without them.
- Camera. Used only when you photograph a business card or your own card.
- Microphone. Used only when you record a voice note.
- Photo library. Used only if you choose to select an existing card image from your device.
- Notifications. Used only to send you optional reminders, such as a nudge to add a note about a lead you just captured. These reminders are generated on your device.
3. How we use your information
We use the information described above to provide and improve the Service, including to:
- Extract and organize contact details from the cards you scan.
- Transcribe your voice notes into searchable text.
- Suggest tags and hashtags that describe a lead.
- Generate personalized follow-up message drafts for you to review and send.
- Match your inventory and want-to-buy lists against your contacts to surface relevant opportunities.
- Fetch public company logos so contacts and events are easier to recognize.
- Create, secure, and maintain your account, and detect and prevent fraud, abuse, or security incidents.
- Respond to your support requests and communicate with you about the Service.
- Comply with legal obligations and enforce our terms.
4. AI and automated processing
To provide core features, Mela sends the content you submit, such as business card images, typed text, voice recordings, and spreadsheet data, to trusted artificial intelligence service providers for processing. This processing extracts and normalizes contact details, transcribes audio to text, suggests tags, and drafts follow-up messages.
These features are designed to assist you. They do not make legal or similarly significant decisions about other people on their own, and the follow-up drafts they produce are never sent until you choose to send them. Under our agreements with these providers, content submitted through their business interfaces is not used to train their general models.
5. Legal bases for processing
If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we process your personal information on the following legal bases:
- Performance of a contract. To provide the Service you request and maintain your account.
- Legitimate interests. To secure, support, and improve the Service, provided those interests are not overridden by your rights.
- Consent. Where required, for example before accessing your camera, microphone, or photo library, or for optional notifications. You may withdraw consent at any time.
- Legal obligation. To comply with applicable laws and lawful requests.
6. Service providers and sub-processors
We rely on trusted third parties to operate the Service. They process information only to perform services for us and are bound by confidentiality and data protection obligations. Our current providers include:
- Supabase. Hosts our database, authentication, and file storage, including your account data, contacts, card images, and voice recordings.
- AI processors (OpenAI, Microsoft Azure OpenAI, Anthropic, and Google). Process card images and text to extract and normalize contact information, suggest tags, and draft follow-up messages. We may use one or more of these providers, and the specific provider used may change over time.
- OpenAI Whisper. Transcribes your voice notes to text.
- logo.dev. Provides public company logos based on a company's website domain.
We may add, remove, or change providers as the Service evolves. When we do, we will keep this section current.
8. International data transfers
Our service providers may process and store information in countries other than the one in which you live, including the United States. Data protection laws in those countries may differ from those in your country. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect your information when it is transferred across borders.
9. Data retention and deletion
We keep your information for as long as your account is active or as needed to provide the Service. You can delete individual contacts, notes, events, and other content at any time from within the app. When you delete content or your account, we remove it from our active systems, and it is purged from routine backups within a reasonable period. We may retain a limited amount of information where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.
10. Your rights and choices
Depending on where you live, you may have some or all of the following rights regarding your personal information.
If you are in the European Economic Area or the United Kingdom
- Access the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your information.
- Restrict or object to certain processing.
- Request a copy of your information in a portable format.
- Withdraw consent at any time, without affecting processing already carried out.
- Lodge a complaint with your local data protection authority.
If you are in California
Under the California Consumer Privacy Act, as amended, you may:
- Request to know the categories and specific pieces of personal information we have collected.
- Request deletion or correction of your personal information.
- Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined by law.
- Limit the use of sensitive personal information.
- Exercise these rights without receiving discriminatory treatment.
How to exercise your rights
To make a request, email us at support@saymela.com. We may need to verify your identity before acting on your request, and we will respond within the timeframe required by applicable law. You may use an authorized agent where the law permits.
11. Deleting your account
You can request deletion of your account and all associated data at any time. To do so, email us at support@saymela.com with the subject "Delete my account", or use the contact option in the app. After we verify the request, we will delete your account and personal data, except for the limited information we are required to keep for legal or security reasons.
12. Security
We take reasonable technical and organizational measures to protect your information. Your data is isolated to your own account using row-level security, access is protected by authentication, and information is encrypted in transit. No method of storage or transmission is completely secure, so while we work to protect your information, we cannot guarantee absolute security.
13. Data breach notification
If we become aware of a security incident that compromises your personal information, we will investigate promptly and notify you and the relevant authorities where required by applicable law.
14. Children's privacy
Mela is a business tool intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13, or under 16 where a higher age applies. If you believe a child has provided us with personal information, please contact us and we will delete it.
15. Third-party links and services
The Service lets you act through other applications and websites, such as opening WhatsApp, your email client, or a contact's website. Those third parties operate independently, and their handling of your information is governed by their own privacy policies. We encourage you to review them.
16. This website
This informational website does not set advertising cookies and does not use analytics trackers. Our hosting provider may record standard server logs, and web fonts are loaded from a third-party font service to display the page, which may involve that service receiving your IP address as part of delivering the fonts.
17. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will provide a more prominent notice where appropriate. Your continued use of the Service after an update means you accept the revised policy.
18. Contact us
If you have questions about this Privacy Policy or how we handle your information, or if you wish to exercise your rights, contact us at support@saymela.com. We will respond as promptly as we can.