Privacy Policy

1. Introduction

2. Information Collection

3. Data Usage

• Providing and improving our services
• Communicating about your account and services
• Sending marketing communications (with your consent)
• Analyzing website performance and user behavior
• Processing payments and maintaining financial records
• Complying with legal obligations
• Preventing fraud and ensuring security

4. Data Protection

5. Your Rights

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making

To exercise any of these rights, please contact us using the details provided in the Contact Information section.

6. Cookies & Tracking

• We use cookies and similar tracking technologies to:
• Remember your preferences and settings
• Understand how you use our website
• Improve our services and user experience
• Provide personalized content and advertising

You can control cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.

We never use data received from Google APIs (Search Console, Analytics, Calendar or Gmail) for advertising, and we do not load session-recording tools on the screens that show it. See section 12, Google user data.

Partner referrals: if you arrive through a partner's referral link and have allowed Marketing cookies, we store the partner's referral code in a "partner_ref" cookie and in your browser's local storage for 60 days, and our servers record the referral with your IP address. We use the IP address only to detect duplicate or fraudulent clicks (our legitimate interest) and delete it after 30 days. If you become a customer, we link the referral to your account so the partner can be paid; the partner sees your account email address, the plan and the referral dates, never your payment details. The Cookie Policy explains this in full.

7. Information Sharing

• Service providers and subcontractors
• Payment processors
• Analytics and search engine providers
• Legal and regulatory authorities

We require all third parties to respect the security of your personal data and treat it in accordance with the law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing our services
• Meeting legal requirements
• Resolving disputes
• Enforcing our agreements
• Security data from contact-form submissions (IP address and browser user-agent) is kept only for as long as necessary for security and abuse-prevention, and is then deleted

9. International Transfers

We may transfer your personal data to countries outside the United Kingdom or the European Economic Area (EEA). When we do, we ensure similar protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• Transferring to countries that the UK government or the European Commission has found to provide adequate protection
• Using the Standard Contractual Clauses approved by the European Commission
• For transfers from the UK, using the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses

10. Changes to This Policy

11. Contact Information

For any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer:

If you have a complaint about our use of your information, please contact us directly first. You also have the right to submit a complaint to your local data protection authority.

12. Google user data

Some Meirra features let you connect a Google account. This section explains exactly what we access through Google APIs and what we do with it. It applies in addition to the rest of this policy; where they differ, this section prevails for Google user data.

What we access

• Sign in with Google: your name, email address, profile picture and Google account identifier, used only to create your Meirra account and sign you in.
• Google Search Console (when you connect it in the SEO platform): the list of sites you can access and, for the site you select, its search performance data (search queries, pages, clicks, impressions, click-through rate and average position), URL inspection results and sitemap list. Access is read-only.
• Google Analytics (when you connect it in the SEO platform): the list of your Analytics accounts and properties and, for the property you select, traffic reports (users, sessions, page views, top pages, traffic sources, devices and real-time users). Access is read-only.
• Google Calendar (Meirra staff only): when a Meirra consultant connects their own calendar, we read the list of their calendars so they can choose which to use, may read events on the selected calendars to avoid double bookings, and create, update and cancel the events for calls booked with them, including the Google Meet link. We never access a customer's calendar.
• Gmail (Unified Inbox, only if you connect a Gmail account): the messages and labels needed to show your inbox in Meirra, mark messages as read or archived, and send the replies you write.

How we share it

We do not transfer Google user data to third parties, except:

• to our infrastructure providers that host and run Meirra (database and application hosting), only to operate the service;
• when keyword research is run for your website (by you in the SEO platform, or by Meirra's team as part of a service you have engaged us for), we send search query terms from your Search Console data to our search-data provider, Serper (serper.dev), to retrieve related keywords and ranking data for your site;
• when required by law, or as part of a merger, acquisition or sale of assets, with notice to you.

We do not share Google user data with advertising platforms, data brokers, or analytics or session-recording tools.

Limited Use

Meirra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.