Legal

Privacy Policy

Effective September 13, 2026

This Privacy Policy explains how Mesitelab (“Mesitelab”, “we”, “us”) collects, uses, and protects information when you use Mesite, our agentic demand orchestration platform, and the website at mesitelab.com (together, the “Service”). If you have any questions, contact us at hello@mesitelab.com.

Information we collect

We collect the details you give us when you create an account or sign in (your name and email address, or the basic profile Google shares when you sign in with Google), the content your organization creates in the Service (requests, request types, comments and approvals, which belong to your organization), and the technical information needed to run and secure the Service (such as log records, IP address and browser type). We use strictly necessary cookies to keep you signed in, never advertising cookies. We also measure how the Service is used, on the website and in the product, to improve it: in the product every piece of text and every input is masked in your browser before anything is sent, so your content is never readable by us, and these measurements are never used for advertising or sold. Using the Service includes this measurement. For more detail on any of the above, write to hello@mesitelab.com.

How we use information

  • To provide, maintain, and secure the Service.
  • To authenticate you and keep your session active.
  • To route requests and send you notifications about their status.
  • To respond to your messages and support requests.
  • To comply with legal obligations and prevent abuse.

We do not sell your personal information, and we do not use your workspace content to train models outside the operation of your own Service.

Data storage and security

Your organization’s data is stored behind structural tenant isolation, so one organization cannot access another’s data. Approvals and status changes are recorded in an append-only audit trail. We use industry-standard measures to protect information, though no method of transmission or storage is completely secure. Providers that process information on our behalf do so under contract, only for the purposes above, and only with what each needs.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you close your account, we delete or de-identify your personal information within a reasonable period, except where we must retain it to meet legal obligations.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information. To exercise these rights, email hello@mesitelab.com and we will respond as required by applicable law.

Google user data

When you sign in with Google, our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We request only your basic profile and email so we can create and identify your account, and we do not transfer or use that data for any other purpose.

Children

The Service is not directed to children under 16, and we do not knowingly collect their information.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, for material changes, provide a more prominent notice.

Contact us

Mesitelab, hello@mesitelab.com.