Privacy Policy
Privacy Policy
This privacy policy explains how we handle information
collected
Effective and last updated as of September 12, 2026
What we collect and why
Website visitors. Basic technical information such as IP address, browser type, device and pages visited, used to operate and secure the site. Legal basis: our legitimate interest in running and securing our website.
People who contact us. Your name, email address, company and the content of your message, used to respond. Legal basis: legitimate interest, or steps taken at your request before entering a contract.
Customer account contacts. Name, work email, job title and billing details for the people who hold or administer an account, used to provide and support the service, invoice, and meet our legal obligations. Legal basis: performance of a contract, and legal obligation.
Numbers submitted for screening. Telephone numbers submitted by our customers, which we screen against suppression registries and return a result. We process these on the customer's instructions and on their behalf. The customer decides why and how the data is used and is responsible for having a lawful basis for it.
Operational data. Logs of requests, authentication events and administrative actions, used to run, secure, support and improve the service.
We do not sell personal data, and only share it as necessary such as to service providers who help us run the service, under contracts requiring them to protect the data, and Regulators and registry operators, where screening a number requires us to report screenings, or query their interface directly.
We keep personal data for as long as we need it for the purposes described above, and then for as long as required by applicable law or to establish or defend legal claims. Numbers submitted for screening are retained as instructed by the customer and as set out in our agreement with them.
Protecting Data
Access control. Access to production systems and personal data is granted on a least-privilege basis, requires documented approval, and is reviewed periodically. Access is removed when someone changes role or leaves.
Security. MFA is required on all human access paths to production systems and sensitive data and data is encrypted in transit and at rest. We scan our production infrastructure and code, including third-party dependencies, on a regular schedule and remediate findings.
Your Rights
We keep personal data for as long as we need it for the purposes described above, and then for as long as required by applicable law. Numbers submitted for screening are retained as instructed by the customer and as set out in our agreement with them.
Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive a portable copy, and to withdraw consent where we rely on it. California residents have equivalent rights and the right not to be discriminated against for exercising them.
To make a request, email privacy@meerapi.com. We may need to verify your identity first.
Where we hold data on a customer's behalf, we will pass your request to that customer rather than act on it ourselves. If you want your number added to or removed from a suppression registry, that is done through the registry operator, not through us.
Contacts
Customers processing personal data through the service can enter into our Data Processing Agreement, available on request.
Privacy questions and data subject requests can be made to privacy@meerapi.com.