Privacy Policy

meetID ("meetID", "we", "us") is a digital visiting-card service operated by Scheller Enterprises Pvt Ltd, Chennai, India. This policy explains what personal data we collect, why, how long we keep it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and comparable frameworks.

meetID is for professionals aged 16 and older and is not directed at children.

Your account, billing, and our product operations: Scheller Enterprises Pvt Ltd (meetID) is the data fiduciary/controller.

Leads submitted to a card: the card owner's workspace decides why and how lead details are used — meetID hosts and transmits them on the workspace's behalf as a processor. Card owners must handle lead data lawfully and honour the consent shown on their exchange form.

• Account data: your email address (verified with a one-time code), display name, language/timezone preferences, session metadata (device/browser hints, hashed IP for security).
• Published card content: only the professional details you choose to publish — name, title, company, public email/phone, photo, bio, and links. This is public to anyone with your card link.
• Lead data: what a recipient submits through an exchange form (name, email/phone, optional company and message), plus the consent record (notice version, purpose, timestamp, hashed request evidence).
• Product analytics: first-party, pseudonymous events (profile views, vCard downloads, link clicks, channel attribution). No precise location, no advertising identifiers, no cross-site tracking.
• Billing data: plan, invoices, billing name/address and tax identifiers you enter. Payments are handled entirely by Razorpay — we never see or store your card number, CVV, or UPI credentials.
• Support data: messages you send to support and minimal diagnostics needed to resolve them.

• Operate your account and publish the cards you create.
• Deliver the recipient experience: render profiles, generate vCards, route links, accept leads.
• Send transactional email (sign-in codes, lead notifications, billing notices). Marketing email only with separate consent.
• Process subscriptions through our payment provider and keep invoices as law requires.
• Detect and prevent abuse, phishing, and spam; keep audit logs for security-sensitive actions.
• Measure aggregate product usage with first-party, pseudonymous analytics.

We do not sell personal data, and we do not share it for cross-context advertising.

A published card is public professional information: anyone with the link, QR, or NFC tag can view it and download its details as a vCard. Cards are excluded from search engines unless you explicitly enable indexing in Card settings. Unpublishing or deleting stops serving the profile — but we cannot recall files people already downloaded or contacts they already saved. We say this plainly in the product before you delete anything.

Data is stored in managed PostgreSQL and S3-compatible object storage (ZataCloud), with encryption in transit (TLS) and at rest. One-time codes, session tokens, and webhook secrets are only stored as hashes. Every workspace's data is tenant-scoped and access is deny-by-default; security-sensitive actions are written to an immutable audit log. Uploaded images are malware-scanned and stripped of location metadata before being served.

We share data only with the processors needed to run the service:

• Razorpay — payment processing for paid plans.
• Zoho ZeptoMail — transactional email delivery.
• ZataCloud — S3-compatible storage for uploaded images and generated exports.
• Hosting/CDN providers — application hosting and content delivery.

We may disclose data where required by law, with a documented legal basis, and we publish changes to this list in this policy.

• Leads: kept while your account is active; deleted leads are purged from active systems within 30 days and clear from encrypted backups within 35 days.
• Analytics events: 13 months rolling, pseudonymous.
• Audit/security logs: 24 months, access-restricted.
• Deleted accounts: personal data purged within 30 days; billing records retained as tax law requires.
• Export files: expire within 24 hours.

You can:

• Access and export your data (Settings → Privacy → Request data export).
• Correct inaccurate details (edit your card, account, and billing details).
• Erase your account (Settings → Privacy → Delete account — immediate unpublish, verified by a fresh one-time code).
• Withdraw marketing consent at any time (transactional messages continue as they are part of the service).
• Nominate another individual to exercise your rights.

To exercise rights or raise a grievance, contact our Grievance Officer. We respond within 30 days.

meetID uses only first-party, strictly necessary storage: your session cookie, a security (CSRF) token, your active-workspace preference, and a pseudonymous analytics session cookie rotated every 30 days. There are no advertising cookies, no third-party analytics scripts, and no fingerprinting on public profiles.

We will update this page and the version line above whenever the policy changes materially, and notify account holders by email for significant changes. Consent records keep the version that applied when a lead was submitted.

Grievance Officer, Scheller Enterprises Pvt Ltd
1st Floor, Building No 71, Dr Gurunath Street, Panner Nagar, Mugappair West, Chennai, Tamil Nadu 600037, India
Email: privacy@meetid.in

Security reports: security@meetid.in (responsible disclosure welcome). See also our Terms of Service and Cancellation & Refund Policy.