Privacy Policy

Information we collect

• Account and access information: the account identifier, email address, and any available name supplied through ChatGPT sign-in, plus business membership and permissions. We do not receive your ChatGPT password.
• Workspace information: business names, addresses, phone numbers, websites, hours, descriptions, location records, tasks, drafts, uploaded media, captions, and usage-permission information you provide.
• Activity records: changes, approvals, actor identifiers, dates, and related workflow details. Usage counters help enforce service limits.
• Support information: details you send when asking for help or making a privacy or accessibility request.
• Technical information: our hosting, authentication, and security providers may process IP addresses, browser information, request logs, cookies, and similar data needed to deliver and protect the service.

We receive information from you, authorized workspace users, sign-in and service providers, and public business sources. The public preview uses bundled public-source examples; it does not expose your private workspace records.

How we use information

We use information to authenticate users, manage permissions, operate location and listing workflows, store content, maintain change history, provide support, diagnose problems, prevent misuse, and meet applicable legal obligations. We do not use workspace content to run advertising campaigns for unrelated businesses.

Who can receive information

Workspace information is available to authorized members according to their permissions and to personnel and providers who need access to operate, protect, or support MESH. Avoid putting unrelated confidential or sensitive personal information into business records or uploads.

• OpenAI Sites and ChatGPT: website hosting and the sign-in process.
• Cloudflare: hosting infrastructure, security, structured storage through D1, and private file storage through R2.
• Support service providers: email and related services used to receive and respond to your messages.

We may disclose information when required by law, to protect legal rights or the security of the service, or as part of a business transaction subject to applicable safeguards. Third-party services have their own privacy practices. They may process information in countries other than yours.

Connected accounts and AI features

Google Business Profile connections and OpenAI API drafting are not currently enabled in the hosted service. Before enabling a new integration or data use, we will update this notice to describe what information is involved and the available controls.

Supported browser assistants may access location details or create tasks only within an authorized workspace through MESH’s application tools. The public preview does not register those tools. Review requests from any browser assistant before authorizing it to act.

Cookies, advertising, and browser signals

MESH has not added third-party analytics or advertising trackers. We do not sell personal information or share it for cross-context behavioral advertising. Optional layout storage is off by default and can be controlled in Cookie Settings. Sign-in and security providers may use necessary cookies.

MESH does not track your activity across unrelated websites for advertising. Do Not Track and Global Privacy Control signals do not activate any tracking in MESH; there is currently no sale or advertising-sharing activity to opt out of. Cookie settings can display a Global Privacy Control signal when your browser exposes it. If our practices change, we will update these disclosures and implement any required opt-out controls before that change.

Storage, security, and retention

We use HTTPS and server-side workspace permissions to protect access to information. Uploaded originals are stored separately from public website content. Security measures reduce risk but cannot guarantee absolute security.

MESH does not currently apply a uniform automatic deletion schedule. Stored records, drafts, uploads, and activity history remain until removed through available controls or handled by an administrator, subject to operational and legal requirements. We assess retention and deletion requests based on the type of information, your authority, business needs, legal obligations, and technical limitations. Infrastructure copies and logs may follow provider retention practices. Account removal does not by itself erase business records, and self-service account deletion is not currently available.

Your choices and privacy requests

Contact support@creativeexit.com to request access to, correction of, export of, or deletion of your information, or to ask about privacy practices. We may need to verify your identity, business authority, and the scope of the request. Please do not send passwords or identity documents in your first message.

Depending on applicable law and our role in handling your information, you may have additional rights, including information about collection and disclosure, limiting or objecting to certain processing, and making requests through an authorized agent. Legal exceptions may apply. We will not unlawfully discriminate against you for exercising privacy rights. If another business controls the workspace information you are asking about, we may direct or coordinate your request with that business.

Children

MESH is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact support if you believe a child has provided information so we can review and address it.

Changes to this policy

We review these disclosures as features and data practices change. Updated text and the effective date will appear here. We will display a notice in MESH for material changes and provide additional notice or obtain consent where required. The review date does not represent an independent legal or security certification.

Contact us

MESH by CREATIVE EXIT, LLC
support@creativeexit.com