Privacy Policy

For the Meere Marketing client portal and mobile app. Last updated: 5 October 2026

The short version. We hold what you need an account for — your contact details, your invoices, the files you upload and the messages you send. We do not sell it, we do not advertise to you inside the app, and you can delete your account yourself from Profile → Delete my account.

1. Who we are

Meere Marketing Limited is a company registered in Scotland, company number SC783462, registered office 68 Old School Crescent, Mayfield, Dalkeith, EH22 5DW. We are the data controller for the information described here.

This notice covers the client portal at app.meere-marketing.com and our iOS and Android apps. Our public marketing website has its own notice, and where we run campaigns for you — or take bookings through a booking link in your name — we handle your customers’ data as your processor under our contract with you, not under this page.

2. What we collect

Your account. Name, email address, mobile number, company details and business address. Your mobile number doubles as your sign-in: we text you a one-time code rather than making you remember a password.

What you put in. Photographs and files you upload, messages and notes you write, approvals and signatures you give, and answers to onboarding forms.

Your account activity. Invoices, what has been paid and when, and project progress. Card details are entered on Stripe’s own payment page and never reach us — we see that an invoice was paid, not the card.

Technical. Sign-in times, the push notification token for your device, and error reports if something crashes.

There is no advertising or tracking inside the app. Our Meta pixel runs only on the public marketing pages, and the app is locked to the portal address so those pages cannot load inside it.

3. Why, and our lawful basis

What we doLawful basis
Run your account and deliver the work you hired us forContract
Sign you in and keep the account secureContract, and legitimate interests in security
Send push notifications about your projectsConsent — your device asks first, and you can revoke it in device settings
Invoices, receipts and accounting recordsLegal obligation
Error reports and anonymous usage figures, to keep the app workingLegitimate interests in a product that does not break
Tell you about services you do not already haveLegitimate interests / soft opt-in. Reply once and we stop

4. How it is stored

Data is held in Supabase (PostgreSQL) in the European Union, with row-level security so the database itself enforces who can read what rather than trusting the app to remember. Our servers run in the United Kingdom. Everything is encrypted in transit with TLS and at rest.

Credentials you give us so we can work on your accounts — an advertising login, for example — are encrypted at rest, hidden by default, and revealed only on request to a named administrator. They are never printed into documents.

5. Who else processes it

These suppliers run the systems the portal is built from. None of them may use your data for their own purposes.

  • Supabase — database, file storage and authentication (EU)
  • Vercel — application hosting and anonymous usage analytics (UK)
  • Cloudflare R2 — storage for photos, video and documents you upload
  • Google Drive — a mirrored copy of your uploaded files (US)
  • Google Calendar — only if you connect it, to see when you are busy and to put your bookings in your diary (US)
  • Stripe — card payment processing (US)
  • Revolut Business — bank transfer reconciliation
  • Resend — transactional email delivery (US/EU)
  • ClickSend — SMS delivery (UK/AU)
  • GoHighLevel — customer relationship management, invoicing, and the onboarding details you submit. We use it under our own branding, so you may see it called IVO (US)
  • Apple and Google — delivery of push notifications to your device
  • Daily.co — video calls (US)
  • Anthropic — AI features that summarise reporting and review creative for our staff. Your data is not used to train their models (US)
  • kie.ai — generates draft images and video for advertising creative, from prompts and any reference images our staff supply. Not used to train their models (US)
  • Sentry — error monitoring. Configured not to send personal data, with all on-screen text masked (US)

Transfers outside the UK. Suppliers marked US receive data outside the UK. Those transfers are made under the UK’s International Data Transfer Addendum to the Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework where the supplier is certified. Ask us and we will tell you which applies to a particular supplier.

6. Cookies and advertising

We set nothing for advertising unless you say yes. On the public pages our own ads point at, we ask once before anything non-essential loads. Say no and nothing is set; the page works the same either way, and we do not ask again.

Needed for the site to work. Signing in sets a session cookie, and the app remembers a few choices you make, such as which of your businesses you are looking at. Without these you could not stay signed in, so we do not ask permission for them — but they are never used for advertising.

Only with your agreement. The Meta pixel, which sets a cookie named _fbp and tells Meta that a visit came from one of our ads. It is not loaded at all until you agree, so the cookie is never written to your device first.

Measurement that sets no cookies. We count page views and page speed through Vercel, and record errors through Sentry so we can fix them. Neither sets a cookie or identifies you.

When you send us an enquiry. If you fill in one of our forms, we also send Meta a record of that enquiry directly from our servers, so our advertising reporting is accurate. What we send is your email and phone number scrambled into a one-way code before it leaves us — Meta can check it against what they already hold, and cannot read it back. We do this to measure our own advertising, under our legitimate interest in knowing which ads work. If you would rather we did not, email info@meere-marketing.com and we will remove it.

To change your mind, clear this site’s data in your browser settings and you will be asked again on your next visit. You can also block or delete cookies in your browser at any time.

7. Push notifications

With your permission we send notifications about invoices, messages, approvals and project updates. Your device asks before any are sent, and you can turn them off at any time in your device settings or in the app — everything still works, you simply find out when you next open it.

8. Your Google Calendar, if you connect it

Connecting your Google Calendar is optional and nothing else changes if you never do it. When you do, we ask Google for two things and nothing more.

  • When you are busy — the start and end times of your existing commitments, so nobody can book you over one. Google returns these as plain busy periods: we do not receive the title, description, location or guests of your own events, and we do not ask for them.
  • The appointments we book — we create, update and cancel the bookings made through this portal so they appear in your calendar automatically. Every such event is tagged as ours, and when we read changes back we ask Google to return only events carrying that tag. Your own meetings are never sent to us.

We store an encrypted key that lets us do this again tomorrow, the email address of the connected Google account, and the ids of the events we created. We do not store the contents of your calendar.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not sell it, use it for advertising, or allow humans to read it except where you ask us to fix something, we are required to by law, or it is necessary for security.

You can disconnect at any time from the calendar page in this portal, which deletes the key and stops the connection. You can also revoke our access yourself at myaccount.google.com/permissions. Appointments already in your calendar stay there.

9. How long we keep it

  • While your account is open — your account and the content in it.
  • 30 days — after you request deletion, we erase your personal data. Sign-in is revoked immediately; the window exists so you can change your mind.
  • 6 years — invoices and accounting records, which company and tax law require us to keep. These are kept with your personal details detached.
  • Indefinitely — a record that you asked us to stop contacting you, because the only way to honour that is to remember it.

10. Your rights

You can ask us to give you a copy of your data, correct it, erase it, restrict what we do with it, hand it over in a portable format, or stop processing it. You can withdraw consent at any time without affecting what was done beforehand. We answer within one month and there is no charge.

You can delete your account yourself from Profile → Delete my account, or see how to delete your account if you can no longer sign in.

If we get it wrong, tell us and we will try to put it right — but you can complain to the Information Commissioner’s Office at any time and you do not need our permission: ico.org.uk/make-a-complaint, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

11. Automated decisions, and children

We do not make any decision about you by automated means that produces a legal or similarly significant effect. Where AI is used it summarises reporting for our own staff to read; it does not decide anything about you.

The portal is for business customers and is not intended for anyone under 18. We do not knowingly collect their data.

12. Changes, and contact

When we change this notice we change the date at the top. If a change materially affects data we already hold, we will tell you directly rather than rely on you re-reading the page.

Questions, or to exercise any right above: info@meere-marketing.com. For anything else see support.

Meere Marketing Limited, a company registered in Scotland no. SC783462. Registered office: 68 Old School Crescent, Mayfield, Dalkeith, EH22 5DW. © 2026 All rights reserved.