Privacy Policy

Last updated: July 19, 2026 — version pending professional legal review

1. Introduction

Meyandy LLC (hereinafter "Meyandy", "we") is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, and protect your personal data when you use the Meyandy platform.

2. Data we collect

We collect the following categories of data:

• Identification data: first name, last name, email address, phone number, profile photo
• Verification data: legal identity, date of birth, ID accepted by the form, selfie, and company evidence when applicable
• Professional data: skills, bio, portfolio, rates, reviews received
• Payment data: Mobile Money number, transaction history
• Usage and security data: pages visited, actions taken, IP address, device type, technical logs, and anti-fraud events
• Data provided to AI-assisted features: text or instructions voluntarily submitted to Web Space writing assistants

3. Purposes of processing

Your data is processed for the following purposes:

• Creation and management of your user account
• Identity verification
• Connecting talents and recruiters
• Preparing, processing, reconciling, and tracking payments through available providers
• Sending notifications (in-app, email)
• Fraud prevention and Platform security
• Writing assistance when the user starts an artificial-intelligence feature
• Measurement and improvement of our services

4. Legal basis for processing

Depending on the purpose and applicable law, processing relies on performance of the contract (account, matching, and transaction), consent when required (selected cookies or communications), our legitimate interests balanced against your rights (security, fraud prevention, and improvement), and our legal obligations. Providing identity evidence is voluntary until you use a feature that requires it.

5. Data sharing

Your data may be shared with:

• Swychr: processing supported Mobile Money flows
• Stripe: card payments and subscriptions when available
• Supabase: authentication, database, and file storage
• Resend: transactional email delivery
• Vercel: hosting and operation of the web application
• Cloudflare Turnstile: protecting selected forms against automated abuse
• Anthropic: processing instructions submitted to AI-assisted features
• Meta, WhatsApp, or Twilio: WhatsApp authentication, notifications, or exchanges when those features are used
• Sentry: technical error diagnostics when the service is enabled
• Vercel Registrar or ResellerClub: domain or email search, purchase, or management when requested by the user

We never sell your personal data to third parties.

6. Data retention

Active data is retained while the account is used. A deletion request immediately anonymizes the main profile fields when no active mission prevents it. Raw images used for identity verification are deleted no later than 30 days after the decision, or when the account is deleted, unless a documented temporary hold is needed for fraud, a dispute, or a legal obligation. The verification decision may remain attached to the account without the images. Transactions, invoices, disputes, and necessary audit logs may be retained for up to 5 years, or any other period required by applicable law. An erasure request does not override a legal retention duty; the affected data is then restricted to that purpose.

7. Data security

We implement reasonable risk-based measures: encryption in transit (TLS), row-level security (RLS), private storage, temporary review URLs, role controls, file validation, and logging. No system provides absolute security; access to identity evidence must remain limited to authorized people and documented needs.

8. Your rights

In accordance with applicable regulations, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to restriction of processing where applicable
• Right to request human intervention for a significant decision based solely on automated processing
• Right to lodge a complaint with the competent authority

To exercise these rights, contact us below. We respond in principle within one month when the GDPR applies, subject to identity verification and lawful extensions: privacy@meyandy.com

9. International transfers

The providers listed above may process data outside your country of residence. Where required by applicable law, Meyandy uses the available appropriate transfer mechanism, including contractual clauses, and considers the destination, provider, and technical safeguards. You may request information about the mechanism applicable to your situation.

10. Changes

We may amend this privacy policy at any time. Substantial changes will be notified by email and in-app notification. The date of the last update is shown at the top of this page.

11. Contact

For any question regarding the protection of your personal data: privacy@meyandy.com