How Mesob handles your information

Mesob is operated by [Founder to confirm: operator legal name]. Questions and requests about your information: [Founder to confirm: contact address].

This page explains the service in plain words. It is not legal advice and does not claim that Mesob meets the rules of any particular law. Last updated: [Founder to confirm: effective date].

• Your account: your name, your email address and a scrambled form of your password (never the password itself), and whether you have opened a link we emailed you.
• Businesses: what an owner enters: business name, categories, description, address, phone, website, a public contact email, photos, services and prices, and team members’ names, titles, short bios, photos and working hours.
• Bookings and messages to businesses: the name, email, optional phone number and notes you give when you book or send a request. The business sees them. Booking works without an account.
• Claims: what you write to show that you run a business. Our team reads it.
• Community (only if you create a profile): your handle, display name, bio, languages, interests, home city, search distance, whether others can find you, and when you agreed. Also your requests, conversations, messages, blocks and reports, and your position while you use Near me (below).
• Security records: your sign-in sessions (a scrambled token and dates), short-lived counters that slow down abuse (stored as scrambled keys, not as addresses), and a log of actions taken (account ids and what was done, never message text or positions).

• Mesob asks your browser for your position only when you press “Find people near me”. Before it is stored it is rounded to a grid of about 300 metres. It is kept for 5 minutes after you last shared it and deleted sooner when you stop, pause, delete your profile or sign out.
• Nobody is shown your position. Other people see only a distance band such as “2–5 km” and the city nearest to you. It never appears on a map.
• A business chooses whether its map pin is exact, shown only as an area (for home-based or mobile services, whose street address is then not shown publicly), or hidden.

• The background map is drawn from map data your browser downloads directly from tiles.openfreemap.org (Mesob’s standard setup uses OpenFreeMap, built on OpenStreetMap data). That service sees your internet address and which part of the map you look at, as any website you load does.
• When you switch the map to its 3D view, your browser also downloads elevation tiles from s3.amazonaws.com, with the same kind of information.
• When a business owner looks up their address to place their pin, Mesob’s server sends that address to the US Census Bureau’s address lookup (geocoding.geo.census.gov). Your own position is never sent there.
• “Directions” links open Google Maps with the business’s public address. That is Google’s site.
• Emails are sent through Mesob’s mail server.

Mesob sets one cookie: your sign-in session, only when you sign in. If you dismiss the “install the app” suggestion, your browser remembers that choice on your device. There are no advertising or analytics cookies, no tracking scripts, and Mesob does not sell information about you.

• Anyone can see published business listings.
• A business sees the bookings and requests made with it. It does not see your account or your community profile.
• In the community, people see your profile only if they can see you nearby or already have a request or conversation with you. Nobody can message you until you accept their request. Blocked people are not told.
• Mesob’s administrators can see account records, reports and moderation history, and the mail Mesob sends (with invitation and password reset links hidden), to run the service and keep it safe.

• Your position for Near me: 5 minutes.
• Chat requests: a waiting request expires after 7 days; an answered one is kept 30 days; a “not now” stops the same two people being matched again for 24 hours.
• Messages: deleted 365 days after they were sent.
• Reports: once handled, what was reported and the reporter's own words are removed after 180 days; the outcome stays.
• Emails Mesob sent: 30 days after sending. Emails that could not be delivered: 90 days. Emails waiting to be sent: until they are sent.
• Sign-ins: end after 14 days without use, and after 30 days at most.
• Password reset links: 60 minutes. Community invitation links: 14 days.
• A deleted photo stops being shown at once; its file is removed 8 days later.
• Backups: 14 nightly copies on Mesob’s server; copies kept elsewhere: [Founder to confirm: off-server backup retention]. Something you delete leaves the backups as they age out.
• Server logs of requests (address, time and page, without query strings): [Founder to confirm: log retention period].
• Your account, community profile and business listings: until you delete them.

• Pause your community profile, stop appearing nearby, or delete the profile, from your community profile page.
• Delete your whole account from your account page. You are signed out everywhere; your profile, position, requests and the blocks you made are erased; your messages stay for the people you wrote to, shown as from a deleted account; bookings you made stay with the business as its records; reports you sent stay without your name. If you run a business alone it is taken off Mesob; if it still has a team or upcoming appointments, the page tells you what to do first.
• Forgot your password? Ask for a reset link.
• Anything else (a copy of your information, a correction): [Founder to confirm: how to make a request and how long an answer takes].

Community profiles and chat are for adults: creating a profile asks you to confirm that you are 18 or older. Age rules for the rest of Mesob: [Founder to confirm: age policy].