Privacy Policy
1. Introduction
Meirova ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our credit card benefit tracking service ("the Service").
2. Information We Collect
Account information
When you sign up, we receive your name and email address via our authentication system . We do not store passwords — authentication is managed securely on your behalf.
User-entered data
You may enter credit card names, annual fees, benefit descriptions, and usage records. We do not collect or store credit card numbers, CVVs, account numbers, or any financial account credentials.
Automatically collected data
We collect basic request metadata (IP address, browser type, timestamps) through our hosting provider (Cloudflare) for security and operational purposes. We do not use analytics tracking scripts or advertising pixels.
3. How We Use Information
We use your information to:
- Provide and operate the Service
- Authenticate your identity and maintain your session
- Send transactional emails (e.g., benefit reminders, if enabled)
- Improve the Service and fix issues
- Comply with legal obligations
4. Cookies
Meirova uses only strictly necessary cookies for authentication and session management. These cookies are required for the Service to function and are exempt from consent requirements under GDPR and the ePrivacy Directive. We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.
5. Third-Party Services
We use the following third-party services to operate Meirova:
- Cloudflare D1 — Authentication and user management
- Convex — Database and backend infrastructure
- Cloudflare — Hosting, CDN, and DDoS protection
- Resend — Transactional email delivery
Each provider processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.
6. Data Sharing
We never sell your data to third parties. We only share your information with the service providers listed above, as necessary to operate the Service. We may disclose information if required by law or to protect the rights and safety of our users.
7. Your Rights
You have the right to:
- Access — Request a copy of your personal data
- Correct — Update inaccurate or incomplete data
- Delete — Request deletion of your account and all associated data
- Export — Download your data in a portable format
These rights apply regardless of your location, including under GDPR (EU/EEA) and CCPA (California). To exercise any of these rights, contact us at hello@meirova.com.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed within 30 days. Anonymized, aggregated data (which cannot identify you) may be retained for analytics purposes.
9. Children's Privacy
The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.
11. Contact
If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@meirova.com.