Privacy Policy

Last updated: 19 October 2026 — version pending professional legal review

1. Introduction

Meyandy LLC (hereinafter "Meyandy", "we") is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, and protect your personal data when you use the Meyandy platform.

2. Data we collect

We collect the following categories of data:

• Identification data: first name, last name, phone number (login identifier), email address if you add one, profile photo
• Verification data: legal identity, date of birth, ID accepted by the form, selfie, and company evidence when applicable
• Professional data: skills, bio, portfolio, rates, reviews received
• Payment data: Mobile Money number, bank details if you add them (account holder, bank, account number), transaction history
• Usage and security data: pages visited, actions taken, IP address, device type, technical logs, and anti-fraud events
• Approximate location data: country and city, which may be pre-filled from your connection and which you can change
• Reports and supervision: reports you send or that concern your account or content, moderation decisions and the log of team actions
• Data provided to AI-assisted features: text or instructions voluntarily submitted to AI-assisted features, for example in Web Space

3. Purposes of processing

Your data is processed for the following purposes:

• Creation and management of your account, phone number login and sending of confirmation codes
• Identity verification
• Displaying your public profile and connecting members
• Preparing, processing, reconciling, and tracking payments through available providers
• Sending notifications in the app, by email, WhatsApp, SMS or push notification, according to your settings
• Fraud prevention, Platform security, handling of reports and logged supervision of content and accounts
• Writing assistance when the user starts an artificial-intelligence feature
• Measurement and improvement of our services

4. Legal basis for processing

Depending on the purpose and applicable law, processing relies on performance of the contract (account, matching, and transaction), consent when required (selected cookies or communications), our legitimate interests balanced against your rights (security, fraud prevention, and improvement), and our legal obligations. Providing identity evidence is voluntary until you use a feature that requires it.

5. Data sharing

Your profile is public by default: the information you show on it (name, photo, trade, work, chosen contact details) is visible to everyone and may be indexed by search engines. You can adjust its visibility in your settings. Your data may also be shared with:

• Swychr: processing supported Mobile Money flows
• Stripe: card payments and subscriptions when available
• Supabase: authentication, database, and file storage
• Resend: transactional email delivery
• Vercel: hosting and operation of the web application
• Cloudflare Turnstile: protecting selected forms against automated abuse
• Anthropic: processing instructions submitted to AI-assisted features
• Meta, WhatsApp, or Twilio: login codes, notifications and exchanges by WhatsApp or SMS when those features are used
• Expo: delivery of push notifications for the mobile app
• Sentry: technical error diagnostics when the service is enabled
• Vercel Registrar or ResellerClub: domain or email search, purchase, or management when requested by the user

We never sell your personal data to third parties.

6. Data retention

Active data is retained while the account is used. A deletion request immediately anonymizes the main profile fields when no active mission prevents it. Raw images used for identity verification are deleted no later than 30 days after the decision, or when the account is deleted, unless a documented temporary hold is needed for fraud, a dispute, or a legal obligation. The verification decision may remain attached to the account without the images. Transactions, invoices, disputes, and necessary audit logs may be retained for up to 5 years, or any other period required by applicable law. An erasure request does not override a legal retention duty; the affected data is then restricted to that purpose.

7. Data security

We implement reasonable risk-based measures: encryption in transit (TLS), row-level security (RLS), private storage, temporary review URLs, role controls, file validation, and logging. No system provides absolute security; access to identity evidence must remain limited to authorized people and documented needs.

8. Your rights

In accordance with applicable regulations, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to restriction of processing where applicable
• Right to request human intervention for a significant decision based solely on automated processing
• Right to lodge a complaint with the competent authority

To exercise these rights, contact us below. We respond in principle within one month when the GDPR applies, subject to identity verification and lawful extensions: privacy@meyandy.com

9. International transfers

The providers listed above may process data outside your country of residence. Where required by applicable law, Meyandy uses the available appropriate transfer mechanism, including contractual clauses, and considers the destination, provider, and technical safeguards. You may request information about the mechanism applicable to your situation.

10. Changes

We may amend this privacy policy at any time. Substantial changes will be notified by email and in-app notification. The date of the last update is shown at the top of this page.

11. Contact

For any question regarding the protection of your personal data: privacy@meyandy.com