Privacy Policy

Who we are

Mesua Technologies (“Mesua”, “we”, “us”) is a design and engineering studio based in Dhemaji, Assam, India. We are responsible for the personal data described in this policy. You can reach us at info@mesua.tech or +91 863 8511861.

This policy applies to mesua.tech and its pages, the free UX Analyzer, emails we send you, and our dealings with prospective and current clients. Client project data we process on a client’s behalf is covered by the agreement with that client instead.

What we collect

Information you give us

UX Analyzer report requests: your name, email address and role, the website address you analyzed, your consent to receive the report and, if you tick it, your choice to receive occasional insights from us.
Enquiries and project discussions: whatever you include when you email or call us, such as your name, company, contact details and project information.
Job applications: the details and documents you send us when you apply for a role.

Information collected automatically

Technical data: your IP address, browser and device type, and the pages you request, which our hosting provider processes to deliver and secure the site.
Abuse prevention: when you use the UX Analyzer we store a one-way, salted hash of your IP address (never the address itself) to limit how many audits can be run per hour.
Cookies: a small number of cookies needed for the site to work, and others only with your consent. See our Cookie Preferences page.

Website audits

When you analyze a website, we fetch that site’s public pages and send its address to Google PageSpeed Insights for a performance test. The results (scores, findings and a screenshot of the page) are stored with your audit. If you analyze a site that isn’t yours, please only do so for legitimate purposes.

How we use it

To run your website audit and send you the full report you asked for (performance of a request you made).
To reply to your enquiry and prepare proposals (steps you asked us to take before a contract).
To deliver services under a client agreement (performance of a contract).
To follow up about your audit or our services, and to send insights if you opted in (your consent; you can withdraw it at any time).
To keep the site secure, prevent abuse and fix problems (our legitimate interests).
To meet legal, tax and accounting obligations (legal obligation).

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

AI in the UX Analyzer

Your audit’s summary and fix plan are written by an AI model (currently provided by Groq, with Google Gemini as a backup). The model only receives the audit’s structured findings and scores — never your name, email address or other personal details.

Milo, our AI assistant

When you chat with Milo, your messages are sent to an AI model (currently Groq, with Google Gemini as a backup) together with information about Mesua, so it can reply. We keep conversations for 30 days to review and improve Milo’s answers, then delete them automatically. Please don’t share sensitive personal information in the chat.

If you send a project brief from the chat, it’s handled like any enquiry. If you book a call, your name, email address, time zone and any note are sent to Cal.com, which schedules the call and sends the invitations.

We use trusted service providers who process data on our behalf and only as we instruct:

Vercel — website hosting and delivery.
MongoDB Atlas — secure storage of audits and report requests.
Resend — sending report emails and notifications.
Sanity — our content management system (it holds website content, not visitor data).
Google (PageSpeed Insights and Gemini) and Groq — website performance testing, the AI-written audit summary and Milo’s replies, as described above.
Cloudflare Turnstile — bot protection on forms, where enabled.
Cal.com — scheduling a call with our founder, if you book one.

We may also share data with professional advisers, or where the law requires it, and with a successor if our business is reorganized or sold. Some providers are located outside India, including in the United States and the European Union; where data is transferred abroad, we rely on the provider’s contractual and security safeguards.

How long we keep it

Audits: deleted automatically 90 days after they are created. Report links stop working after 30 days.
Milo chats: deleted automatically 30 days after the last message.
Abuse-prevention records: deleted automatically within about two hours.
Report requests and enquiries: for as long as needed to follow up, and no longer than 24 months after our last contact unless we start working together.
Client records: for the duration of the engagement and as long as tax and accounting law requires afterwards.
Job applications: up to 12 months, unless you ask us to delete them sooner.
Newsletter: until you unsubscribe, using the link in any of our emails.

Your rights

Depending on where you live — including under India’s Digital Personal Data Protection Act, 2023 and, for visitors in the EU and UK, the GDPR — you may have the right to:

access the personal data we hold about you and get a copy of it;
correct or complete inaccurate data;
have your data erased;
withdraw consent at any time, such as unsubscribing from insights emails or changing your cookie choices;
object to or restrict certain processing, and ask for your data in a portable format;
nominate someone to exercise your rights on your behalf (India);
complain to a data protection authority.

To exercise any of these rights, email info@mesua.tech. We will reply within 30 days.

Security

We use encryption in transit (HTTPS), access controls, hashed identifiers and providers with strong security practices. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

Children

Our site and services are intended for businesses and are not directed at children under 18. We do not knowingly collect their personal data.

Changes to this policy

We may update this policy as our services change. The date at the top shows when it was last revised; significant changes will be highlighted on this page.

Contact and grievances

For questions, requests or complaints about how we handle personal data, contact our grievance officer at info@mesua.tech or write to Mesua Technologies, HN 284, Dhemaji, Assam 787057, India.