Privacy Policy

Welcome to Mesa ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and share your personal information. This Privacy Policy explains our practices regarding data collection when you use our mobile application ("App") and related services.

1. Information We Collect

1.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email, password, age, city	Create and manage your account
Profile Information	Profile photo, preferences, party style	Personalize your experience
Payment Information	Payment method details	Process transactions (handled by Stripe)
Communications	Messages, chat content	Enable communication between users
Venue Verification	Business documents, venue photos	Verify venue ownership

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, tables viewed, interactions, time spent
• Log Data: IP address, access times, app crashes, system activity
• Location Data: City-level location for showing relevant events (with your permission)

1.3 Information from Third Parties

• Google Sign-In: If you sign in with Google, we receive your name, email, and profile picture
• Payment Processors: Transaction confirmations from Stripe

2. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Create and manage your account
• Process payments and transactions
• Connect you with event hosts and other users
• Send notifications about tables, requests, and messages
• Personalize your experience with AI-powered recommendations
• Verify venue owners and badge eligibility
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations
• Analyze usage patterns to improve our App

3. How We Share Your Information

3.1 With Other Users

When you use Mesa, certain information is visible to other users:

• Your profile name, photo, age, city, and rating
• Your badge status and verification status
• Tables you host (visible to all users)
• Messages you send to table hosts/guests

3.2 With Service Providers

We share information with third-party service providers who assist us:

• Firebase (Google): Authentication, database, storage, analytics
• Stripe: Payment processing
• Cloud hosting providers: Data storage and processing

3.3 For Legal Reasons

We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of Mesa, our users, or the public.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (HTTPS/TLS)
• Secure cloud infrastructure (Firebase/Google Cloud)
• Access controls and authentication
• Regular security assessments
• Payment data handled by PCI-compliant processors (Stripe)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion:

• Profile data is deleted within 30 days
• Transaction records may be retained for up to 7 years for legal/tax purposes
• Anonymized analytics data may be retained indefinitely
• Backup copies may persist for up to 90 days

6. Your Rights and Choices

You have the following rights regarding your personal data:

6.1 Access and Portability

You can request a copy of your personal data by contacting us.

6.2 Correction

You can update your profile information directly in the App, or contact us to correct inaccuracies.

6.3 Deletion

You can delete your account through the App settings or by contacting us. Some information may be retained as described in Section 5.

6.4 Opt-Out

• Push Notifications: Disable in your device settings
• Marketing Emails: Unsubscribe link in emails
• Location: Deny permission in device settings

6.5 For Colombian Users (Ley 1581 de 2012)

If you are in Colombia, you have additional rights under the Personal Data Protection Law, including:

• Right to know, update, and rectify your data
• Right to request proof of authorization
• Right to file complaints with the Superintendencia de Industria y Comercio
• Right to revoke authorization

7. Children's Privacy

Mesa is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will delete it promptly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than Colombia, including the United States, where our service providers are located. These countries may have different data protection laws. By using Mesa, you consent to such transfers.

9. Third-Party Links

Our App may contain links to third-party websites or services (e.g., venue Instagram pages). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy in the App
• Updating the "Last Updated" date
• Sending a notification for significant changes

Your continued use of Mesa after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

12. Consent

By creating an account and using Mesa, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.