Privacy Policy
Last updated: October 10, 2026
1. Information We Collect
- Account data: email address, username, profile settings, and authentication records.
- Workspace data: tasks, memos, files, and other content you create.
- Usage and technical data: product interactions, device and browser information, security logs, and performance data.
2. How We Use Information
We use information to provide and secure the Service, authenticate accounts, synchronize workspace data, operate requested features, troubleshoot problems, understand product usage, and improve performance and usability.
3. Sharing
We do not sell your personal information. We may share information when you consent, when required by law, to protect rights and safety, or with service providers that process data on our behalf under appropriate safeguards. Providers may support hosting, authentication, storage, email delivery, analytics, and other infrastructure.
4. Security
We use safeguards such as HTTPS in transit, access controls, secure credential handling, and protection for stored sensitive data where appropriate. No internet transmission or electronic storage system is completely secure.
5. Your Choices and Rights
Subject to applicable law, you may access or correct account information, export available workspace data, request deletion, and manage analytics or cookie controls through your browser or available product settings.
6. Cookies
We use essential session cookies to keep authenticated sessions working. Interactive pages may store a language preference. Analytics cookies or similar technologies may be used where enabled. You can manage non-essential technologies through available controls and your browser settings.
When enabled, Google Analytics 4 measures visits to public introduction pages and clicks on registration links using analytics cookies and device and browser information. We exclude query strings, URL fragments, referrer paths, account details, and workspace content. Login, registration forms, private workspaces, and shared memos do not load the Google tag. Advertising personalization and Google Signals are disabled. Browsers with Do Not Track enabled do not load the tag. See Google's privacy policy.
Our self-hosted Umami measures visits to public introduction and policy pages using page URLs, referrers, and device and browser information. Pageview tracking excludes URL query strings and fragments and respects Do Not Track. Sampled session replays and heatmaps are enabled only on public pages without query strings or fragments; input fields are masked. Private workspaces, authentication pages, and shared memos do not load either Umami script.
7. Retention
Workspace and account data are generally retained while your account is active. Security and technical logs are retained only as reasonably necessary for operations, security, legal obligations, and troubleshooting. Data may remain temporarily in backups before scheduled deletion.
8. Children
MeSQ is not directed to children under 13, and we do not knowingly collect their personal information. If we learn that such data was collected, we will take steps to delete it.
9. Changes to This Policy
We may update this policy. Material changes may be announced on the website, by email, or through an in-product notice.
10. Contact
For privacy questions or requests, email [email protected]. We aim to respond within 30 days, subject to applicable law.