N.I.C. ("we", "our", or "us") operates MEOGATO ("the Service"). This Privacy Policy explains how we collect, use, and protect your information.
We collect the following information: • Name and email address (at account registration) • Business information (name, address, phone number, category) • Google Business Profile data (when connected via OAuth2) • Payment information (credit card numbers are managed by Stripe; we do not store them) • Service usage logs and access logs
MEOGATO's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access the following Google Business Profile API data on your behalf, with your explicit consent: • Business Performance data (impressions, direction requests, phone clicks) — used to display your MEO analytics dashboard • Review data (review content, ratings) — used to display reviews and generate AI reply drafts • Location/profile information — used to display your business details within the Service This data is: • Accessed only with your explicit OAuth2 authorization • Used solely to provide the MEOGATO service to you • Never sold, shared, or used for advertising • Stored in an encrypted database with row-level security • Deletable upon your request at any time You may revoke MEOGATO's access to your Google data at any time via Google Account Settings > Security > Third-party apps with account access.
We use collected information for: • Providing, operating, and improving the Service • Responding to support requests and inquiries • Processing payments and billing • Sending service-related notifications • Preventing fraud and ensuring security
We share data with the following service providers as necessary to operate the Service. Each provider's privacy policy applies to their services: • Supabase Inc. — database and authentication • Stripe, Inc. — payment processing • Anthropic, PBC — AI features (Claude API) • Google LLC — Google Business Profile integration • Vercel Inc. — hosting
We implement appropriate technical and organizational measures to prevent unauthorized access, loss, destruction, alteration, or leakage of personal information. Data is stored in Supabase's encrypted PostgreSQL database with row-level security enabled.
We retain your personal data for as long as your account is active. Upon account deletion, we will delete your data within 30 days, except where retention is required by law. Google API data (reviews, insights) is cached for service functionality and deleted upon account termination or upon your request.
You have the right to request access, correction, or deletion of your personal data. To exercise these rights, contact us at contact@meogato.com. We will respond within a reasonable period after verifying your identity.
We use cookies for session management. You may disable cookies in your browser settings, though some features may become unavailable.
We may update this Privacy Policy as needed. We will notify you of significant changes through the Service.
For questions about this Privacy Policy or our data practices: N.I.C. (MEOGATO) Email: contact@meogato.com
Effective: May 2026 / N.I.C.