Privacy Policy

1. Who is responsible

Mehrly is operated by its founder as an individual and is not yet a registered company. For the account data described here, Mehrly is the data controller. For privacy questions or requests, contact support@mehrly.com.

This policy follows the Swiss Federal Act on Data Protection (nFADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

2. What we collect

From you (account holders and team members)

• Account details: name, email address and, if you use Sign in with Google, your profile picture. If you sign up with email, we store a securely hashed version of your password, never the password itself.
• Business settings: business name, tone and language preferences, custom instructions, signature, logo, links to your Google or Tripadvisor listing, and automation settings.
• Your work in Mehrly: drafts, your edits, approvals, activity logs and team invitations (invitee email and role).
• Billing status: your plan, its status and renewal dates, as reported by Polar. We do not receive your full card number.
• Technical data: IP address, browser and device type, and login sessions. We use these for security, abuse prevention and rate limiting.

About third parties

• Public reviews of your business from Google, Tripadvisor or your webhook: reviewer display name, rating, text and date. These are already public, and we process them only so you can reply.
• QR code scans: time of scan, device type (mobile, tablet or desktop), the star a guest tapped and whether they chose Google or private feedback. We do not collect the guest's name, contact details or precise location. Private feedback goes to the link the business set, not to Mehrly.
• Competitors you choose to track: public business information and public review statistics.

3. Why we use it, and on what legal basis

• To provide the Service you signed up for: syncing reviews, drafting replies, alerts, weekly summaries, insights and team access. Basis: performing our contract with you.
• To personalise drafts by learning from your edits. This learning stays inside your account and is never shared with other customers. Basis: contract.
• To keep Mehrly secure and prevent abuse, fraud and excessive costs (for example, rate limits and usage caps). Basis: our legitimate interest.
• To process payments and keep billing records. Basis: contract and legal obligations.
• To send service emails such as alerts, invitations, receipts and important changes. Basis: contract. We do not send marketing emails without your consent.

4. Service providers (sub-processors)

We share data only with the providers below, and only what each needs to do its job:

We do not sell your data, share it with advertisers or data brokers, or use your reviews to train AI models for other customers.

5. International transfers

Some of these providers process data outside Switzerland and the EU, for example in the United States. Where that happens, we rely on the safeguards the providers offer, such as the Standard Contractual Clauses recognised by Swiss and EU data protection authorities or an applicable adequacy framework.

6. How long we keep data

• Account and review data: while your account exists. If your account is read-only (for example, after a trial), your data stays available so you can come back or export it.
• After you ask us to delete your account: we delete your data within 30 days, including from backups as they rotate.
• Billing records: kept by Polar and, where required, by us, for as long as accounting and tax law requires.
• Security logs and rate-limit counters: short-lived, usually a few days at most.

7. Your rights

You can ask to access, correct, delete or export your personal data, object to or restrict processing, or withdraw a consent you gave. You can export reviews and reports yourself at any time from the dashboard. For anything else, email support@mehrly.com. We reply within 30 days and may ask you to confirm your identity first.

If you are unhappy with how we handle your data, you can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, to your local data protection authority. We would appreciate the chance to fix it first.

If you are a guest and your review appears in Mehrly, you can ask the platform where you posted it (for example Google) to edit or remove it. Once it is removed there, it is no longer imported. You can also contact us directly.

8. Cookies

We use only cookies that are necessary for the Service: to keep you signed in, to protect forms against cross-site attacks, to remember your language, and to count a QR scan once. We do not use advertising or tracking cookies.

9. Security

We protect data with encrypted connections, hashed passwords, role-based team access, rate limiting and other measures. See our Security page for details. No system is perfectly secure. If a breach affects your personal data, we will inform you and the authorities as the law requires.

10. Children

Mehrly is a business tool and is not intended for anyone under 16.

11. Changes to this policy

We may update this policy as Mehrly evolves. We will email account owners about material changes before they take effect. The date at the top shows the latest version.

12. Contact

Privacy questions or requests: support@mehrly.com.