PRIVACY POLICY

MeetMyCMO (“MeetMyCMO”, “we”, “us”) is an AI marketing workspace operated at meetmycmo.com. It is part of the MeetMyCXO suite of products; your account, organization, and subscription are shared with the MeetMyCXO hub, and signing in to MeetMyCMO means signing in to that shared account.

This policy explains what we collect when you visit our website or use the product, how we use it, and who else processes it on our behalf. It covers this application only.

• Account and organization data. Your email address, the profile details your sign-in provider returns, your organization and team memberships, invitations you send or accept, and your role within an organization.
• Subscription status. The plan tier, trial dates, product entitlements, and a subscription reference held on your shared MeetMyCXO account. We do not collect or store card numbers or other payment credentials in this application.
• Content you create or upload. Brand profiles, brand voice samples, marketing plans and calendar items, content assets, campaigns, publishing schedules, leads and opportunity notes, imported metrics, reports, approval requests and decisions, and your conversations with the in-app assistant.
• Integration configuration. The connection state and settings for integrations you enable, and the identity mappings that link your teammates to their Slack or Microsoft Teams accounts for approvals.
• Operational and audit records. Security and audit logs of significant actions (who approved what, and when), plus standard server logs generated by our hosting provider.
• Usage and device data. Pages viewed, referring pages, approximate location derived from IP address, browser and device type, and similar information collected through the analytics and advertising technologies described below.

• To provide the product: generating plans and content, running approvals, delivering reports and notifications.
• To authenticate you and enforce your organization’s access and subscription entitlements.
• To keep the service secure, detect abuse, and maintain audit trails.
• To understand how the site and product are used so we can improve them.
• To serve and measure advertising on our public marketing pages.
• To meet our legal and accounting obligations.

Where the GDPR or UK GDPR applies, we rely on performance of a contract (providing the product to you), legitimate interests (security, product improvement, and measurement), consent (analytics and advertising cookies, where consent is required), and legal obligation.

We use a small number of cookies and similar storage technologies:

• Strictly necessary. Authentication and session cookies set by our authentication backend so you stay signed in and your requests are attributed to the right organization. These cannot be turned off without breaking sign-in.
• Preferences. Local browser storage used to remember interface choices such as light or dark mode.
• Analytics. Google Analytics 4 cookies, described below.
• Advertising. Google AdSense cookies and identifiers, described below.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will prevent you from signing in.

We use Google Analytics 4 to measure site and product usage. The Google Analytics tag collects information such as the pages you view, how you arrived at the site, approximate location derived from your IP address, and general device and browser characteristics, and assigns your browser a pseudonymous identifier. Google processes this information on our behalf, and we use it only in aggregate to understand and improve the service.

You can opt out of Google Analytics across all sites by installing Google’s browser add-on at tools.google.com/dlpage/gaoptout.

We participate in Google AdSense. Google and its partners may use cookies and similar identifiers to serve ads based on your prior visits to this and other websites, and to measure ad performance. Google’s use of advertising cookies is governed by Google’s advertising policies. We do not share the content you create in the product with advertising networks.

You can opt out of personalized advertising here:

• adssettings.google.com — Google Ads Settings
• optout.aboutads.info — Digital Advertising Alliance opt-out

MeetMyCMO’s planning, content generation, brand voice QA, reporting, standup, campaign, and chat features are powered by Anthropic’s Claude models (by default the claude-sonnet-5 model, configurable by us). When you use those features, the relevant prompt content is sent to Anthropic’s API for processing and the response is returned to you and stored in your workspace. This typically includes your brand profile, voice samples, plan and content drafts, imported metrics, and anything you type into the assistant.

Our search visibility feature sends the search queries it generates (which may include your brand, product, and competitor terms) to Tavily, a web search API, to retrieve public web results.

Please do not paste passwords, API keys, payment details, government identifiers, health information, or other sensitive personal data into prompts, brand voice samples, or chat. Content you submit to AI features leaves our systems for processing by the providers named above.

AI output can be wrong or misleading. Review it before you publish or act on it.

MeetMyCMO does not use passwords. You can sign in in one of three ways:

• Google. Google returns your email address and basic profile information to us. We do not receive your Google password.
• Microsoft (Azure / Entra ID). Microsoft returns your email address and basic profile information to us. We do not receive your Microsoft password.
• Email magic link. We send a one-time sign-in link to the email address you enter.

Approval emails may also contain a signed, time-limited link that lets a named approver act on a specific item without signing in. Those links expire and are tied to a single request.

We share personal data only with the providers we actually use to run the product:

• Supabase— authentication and our application database, where your account and workspace content are stored.
• Vercel— application hosting and delivery; processes request and server logs.
• Anthropic— the Claude models behind our AI features; receives the prompt content described above.
• Resend— transactional and approval email delivery; receives recipient email addresses and message content.
• Tavily— web search API used for search visibility scans; receives the generated search queries.
• Slack— optional. If your organization enables it, we deliver standups and approval cards to your Slack workspace and accept slash commands from it.
• Microsoft Teams— optional. If your organization enables it, we accept approval actions submitted from Teams.
• Mirage / Captions— optional video generation and captioning provider. We contact it only to verify the connection unless your organization uses video features.
• Google— Google Analytics 4 and Google AdSense, as described above.

We do not sell your personal information, and we do not share the content you create in the product with advertisers or data brokers. We may disclose information if required by law or to protect our rights, users, or the security of the service.

We and our providers are located in or process data in the United States. If you access MeetMyCMO from the European Economic Area, the United Kingdom, or Switzerland, your personal data will be transferred to and processed in the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK Addendum) in our agreements with these providers.

We keep your account and workspace content for as long as your organization’s account is active, and for a short period afterwards so the account can be restored. Audit and security logs are retained longer where we need them to investigate incidents or meet legal obligations. Analytics and advertising data are retained according to Google’s retention settings for those products. You can ask us to delete your data sooner using the contact details below.

If you are in the EEA or the UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, the right to data portability, the right to withdraw consent where we rely on it, and the right to complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, the right to request deletion or correction, and the right to be free from discrimination for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not knowingly process the personal information of minors under 16.

To exercise any of these rights, email us at info@meetmycxo.com. We may need to verify your identity before we act on a request.

MeetMyCMO is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy as the product changes. When we do, we will revise the “last updated” date at the top of this page. If the changes are significant, we will give you notice in the product or by email.

Questions, requests, or complaints about this policy or your data: info@meetmycxo.com.