Privacy Policy

1. Introduction

Mevro (“Mevro”, “we”, “us”, “our”) provides an AI-powered platform that helps businesses create and manage advertising on Meta platforms (Facebook and Instagram), respond to leads, and track advertising performance (the “Service”).

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices you have. It applies to our website, our waitlist, and the Service.

2. Data we collect

Waitlist and website: when you join our waitlist we collect your email address and any details you choose to share (such as a description of your business). We also collect basic usage analytics about our website.

Account data (at launch): name, email address, business name, and billing information when you create an account and subscribe.

Meta platform data: when you connect your Meta ad account, we access — with your explicit permission via Meta's official APIs — data such as your ad accounts, pages, campaigns, ad performance metrics, and messages sent to your business through Facebook, Instagram, or WhatsApp. We only request the permissions needed to operate the Service.

Lead and customer data: messages, contact details, and booking information from people who respond to your ads or message your business. This data belongs to you; we process it on your behalf to provide the Service.

3. How we use data

We use data to: provide and operate the Service (creating and managing ads, responding to leads, scoring leads, booking appointments, reporting); notify waitlist members about launch and early-access offers; improve the Service, including the quality of AI-generated content; provide customer support; process payments; and comply with legal obligations.

AI processing: ad content generation and lead conversations are powered by third-party AI providers (such as Anthropic's Claude). Data sent to AI providers is limited to what is needed for the feature, and our providers are contractually restricted from using your data to train their models.

4. Meta platform data — specific commitments

Our use of data received from Meta's APIs complies with Meta's Platform Terms and Developer Policies.

We use Meta platform data only to provide and improve the features you ask for inside the Service. We do not sell Meta platform data, use it for advertising unrelated to your own campaigns, or share it with data brokers.

If you disconnect your Meta account, we stop accessing Meta APIs for your account and delete stored Meta platform data within 30 days, except where retention is required by law.

You can request deletion of your data at any time by emailing hello@mevro.ai (see Section 9).

5. Sharing

We do not sell your personal data. We share data only with: service providers that help us run the Service (such as hosting, databases, payment processing, email delivery, analytics, and AI providers), under contracts that protect your data; Meta, when you instruct the Service to take actions on your ad account; professional advisers and authorities where required by law; and a successor entity in the event of a merger or acquisition, with notice to you.

6. Data retention

Waitlist data is kept until launch plus a reasonable period, or until you ask us to delete it. Account and customer data is kept while your account is active and for up to 90 days after closure to allow export, after which it is deleted or anonymized. Billing records are retained as required by tax and accounting law.

7. Security

We use industry-standard safeguards to protect your data, including encryption in transit, encrypted storage of access tokens, access controls, and the principle of least privilege. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

8. International transfers

We operate from the United Arab Emirates and use service providers that may process data in other countries (including the United States and the European Union). Where data is transferred internationally, we ensure appropriate safeguards are in place.

9. Your rights

Depending on your location, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. To exercise any of these rights, email hello@mevro.ai. We respond within 30 days.

Data deletion requests: you can request deletion of your account and associated data — including data obtained from Meta — by emailing hello@mevro.ai with the subject “Data deletion request”. We will confirm completion once processed.

If you are in the UAE, processing is governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. If you are in the EU/UK, you may also lodge a complaint with your local supervisory authority.

10. Cookies & analytics

Our website uses only essential cookies and privacy-respecting analytics to understand site usage. We do not use third-party advertising cookies on our own website. If this changes, we will update this policy and request consent where required.

11. Children

The Service is for businesses and is not directed at children under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before they take effect. The “Last updated” date at the top reflects the latest version.

13. Contact

For privacy questions or requests: hello@mevro.ai. Mevro, Dubai, United Arab Emirates.