Privacy Policy

This Privacy Policy explains how MeshCode, operated by Belli IO Team Co., Ltd. (Thailand) ("MeshCode", "we"), collects and uses your information when you use our services.

1. Information we collect

Account data: your email address, a hashed password, and your prepaid balance.
Usage data: token usage, request metadata, and telemetry (e.g., app version, crash reports, performance) used to operate, secure, and improve the Service.
Prompt content: the code and prompts you submit are transmitted through our gateway to AI model providers to generate responses. We do not use Your Content to train our own models.
Payment data: handled by our payment processor (Stripe). We do not store full card numbers; we receive limited billing metadata (e.g., customer ID, payment status).

2. How we use information

to provide and maintain the Service and your account;
to meter usage, enforce limits, and process payments;
to send transactional emails (e.g., email verification, password reset, billing notices);
to monitor for abuse, debug issues, and improve reliability and performance.

3. Third-party processors

We share the minimum necessary data with service providers that help us operate:

Stripe — payment processing for prepaid balance top-ups.
Resend — sending transactional email.
Third-party AI model providers — to generate AI responses from your prompts. Your prompt content is transmitted to these providers for processing.
Hosting/infrastructure — to run our servers and store data.

4. Data retention

We retain account data while your account is active. Operational logs and usage events are retained for a limited period (typically up to 180 days) for security, billing accuracy, and debugging, then deleted or anonymized. You may request deletion of your account at any time.

5. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at help@meshcode.ai, or see how to delete your account and data.

6. Security

We use industry-standard measures to protect your data, including encryption in transit and hashed password storage. No method of transmission or storage is completely secure, but we work to protect your information.

7. Children

The Service is not directed to children under 18, and we do not knowingly collect their data.

8. Changes

We may update this policy. Material changes will be posted here with a new "last updated" date.

9. Connected Google services

Connecting Google Drive, Slides, Docs, Sheets, Gmail, or Calendar is optional. Google asks you to choose an account and authorize the permissions for each service. Depending on the service and permissions you grant, MeshCode can access file metadata and content, presentation slides, documents, spreadsheet cells, email messages and drafts, or calendar lists, events, and availability. Access remains limited by your Google account's permissions.

We use this data to carry out the productivity tasks you request, such as finding a file, editing a document or presentation, updating cells, summarizing an email, preparing a draft, or checking a schedule. Requests go to Google's services. Tool results can become part of your conversation and be transmitted to the AI model provider you select to complete the task, including through our gateway when you choose MeshCode's hosted models.

Desktop MCP authorization credentials are stored on your device. Retrieved content may remain in conversation history or files you save, and providers process transmitted content under their applicable retention policies. You can delete saved conversations or files and contact us for deletion of data we hold using the account deletion and contact links above.

You can revoke MeshCode's access at any time in your Google Account connections settings. Revoking access stops future authorized requests; it does not delete content already saved in conversations, files, or a provider's systems.

MeshCode's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to develop, improve, or train generalized or non-personalized AI or machine learning models.