Privacy Policy

What we collect

From hosts

• Account details: your name, email, password (stored only as a secure hash), page name, bio, photo, brand colour and language.
• Booking setup: your availability, your booking types, your prices, and the payout details you choose to show guests, such as a Telebirr number.
• Google Calendar, if you connect it: your Google email address, an access token, and the free/busy times on your primary calendar. We also store the IDs of the calendar events we create for bookings.

From guests

• Your name, phone number and/or email, the time you booked, any notes or answers you give, and your booking reference.

Automatically

• Basic technical data our hosting provider records, like IP address, browser type and request logs, used for security and to fix errors. Your browser also keeps a few settings, such as language, 12- or 24-hour time, time zone and the details you last entered, so you don't have to type them again.

How we use it

• To show booking pages, work out which times are free, and record bookings.
• To send booking confirmations, reminders, cancellations and new-booking alerts.
• To put bookings on a host's connected calendar, with a video link where chosen, and to remove them when they are cancelled.
• To keep Meche secure, prevent abuse, and fix problems.

We do not use personal data for advertising and we do not sell or rent it.

Google user data

When a host connects Google Calendar, Meche requests access to their email address, their calendar free/busy information, and permission to create and manage events. We use this only to block times the host is busy, to add Meche bookings to their calendar (with a Google Meet link when the booking is online), and to remove those events when a booking is cancelled. We do not read event titles, descriptions or attendees of the host's other events.

Meche's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, is not sold, is not used to train AI models, and is not read by people except with the host's permission, for security, or where the law requires. Hosts can disconnect at any time in Settings, which deletes the stored tokens. You can also revoke access from your Google Account.

Who we share it with

• The other side of the booking: hosts see the details guests enter, and guests see the host's page, the booking details and the host's payment instructions.
• Service providers who run Meche for us: Vercel (hosting), Neon (database), Google (calendar, if a host connects it), and our email delivery provider. Each one processes data only to provide its service.
• The law: when we are legally required to, or to protect people's safety or the security of the service.

These providers may store data outside Ethiopia, including in the United States or the EU. We pick providers with strong security practices.

How long we keep it

We keep host account data while the account is active. Bookings are kept so hosts have their history. When a host deletes their account, we delete their profile, settings, connected calendar tokens and bookings within 30 days, except for anything we must keep by law. A guest can ask the host, or us, to delete their details from a booking.

Your rights

You can ask to see, correct, export or delete your personal data, and you can object to how we use it, under applicable data protection law, including Ethiopia's Personal Data Protection Proclamation. Hosts can edit most of their data in Settings and delete their account there. For anything else, email hello@meche.et and we will reply within 30 days.

Security

All traffic is encrypted with HTTPS, passwords are hashed, and access to the database is restricted. No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.

Children

Meche is not meant for children under 13, and hosts must be adults. If a child has given us data, contact us and we will delete it.

Changes

If we change this policy, we will update the date at the top and email hosts about significant changes.