Legal

Privacy Policy

Last updated: October 5, 2026

1. Introduction

Meisa ("we", "our", or "us") is operated by Ertiqah. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our behavioral email automation platform and related services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and password. If you upgrade to a paid plan, we collect billing information through our payment processor (we do not store credit card numbers directly).

User Event Data

When you integrate Meisa with your product, you send us event data about your end users (e.g., email addresses, behavioral events, user properties). This data is used exclusively to power your email automations and analytics.

Usage Data

We collect information about how you use Meisa, including pages visited, features used, and actions taken within the platform. This helps us improve the product.

3. How We Use Your Information

  • To provide, maintain, and improve the Meisa platform
  • To process your email automations, sequences, and broadcasts
  • To send you account-related communications (billing, security, updates)
  • To provide customer support
  • To analyze usage patterns and improve our service
  • To comply with legal obligations

4. Data Processing

We process your end users' behavioral event data solely to trigger and deliver email automations on your behalf. We act as a data processor for your end-user data; you remain the data controller. We do not sell, rent, or share your end-user data with third parties for their marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. While no system is 100% secure, we take reasonable steps to protect your information.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law. End-user event data is retained for the duration specified in your plan settings.

7. Third-Party Services

We use select third-party services to operate Meisa. These providers are contractually bound to protect your data and use it only as instructed:

  • Hetzner (servers in Helsinki, Finland): hosts the Meisa application, database and file storage.
  • Amazon Web Services (United States): sends your emails (Amazon SES) and reports delivery, bounce and complaint events (Amazon SNS).
  • Cloudflare (United States, global network): website delivery and security.
  • Stripe (United States): payment processing.
  • Auth0 (United States): sign-in, including Google sign-in.
  • OpenRouter (United States): routes AI requests to the model provider that answers them. By default that is Anthropic (United States). If you choose another model, it can be OpenAI or Google (United States) or DeepSeek. Knowledge-base quality scoring uses DeepSeek. OpenRouter may serve DeepSeek models from hosting providers in several countries, including the United States and China. These requests carry the email content, prompts and knowledge-base text needed for the feature you use.
  • Voyage AI (United States): turns your knowledge-base entries into search embeddings.
  • TypeSafe (United States): scores email drafts and deliverability checks.
  • Google Analytics (United States): website usage statistics.

If you connect your own email provider (your own Amazon SES account, SendGrid, Mailgun or Resend), we send your emails and the recipient data they need through that provider under your account.

8. Your Rights

You have the right to access, correct, or delete your personal data. You can also request a copy of your data or object to certain processing activities. To exercise these rights, contact us at the email below.

If you are located in the European Economic Area, you may have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

9. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising purposes. Analytics cookies, if used, are first-party and anonymized.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Continued use of Meisa after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: [email protected]