Privacy Policy

This Privacy Policy explains how MeoVC collects, uses, stores, discloses, and protects information when you use MeoVC websites, dashboards, APIs, short-link domains, custom-domain redirects, QR code tools, analytics, support, and related services.

MeoVC is operated under the service name MeoVC. Privacy, legal, copyright, DPA, and data requests may be sent to [email protected] or [email protected]. Abuse reports may be sent to [email protected].

This policy is written for international use, including GDPR, UK GDPR, and similar transparency principles.

1. Scope

This policy applies to:

• the public website at meovc.com;
• MeoVC dashboard and account tools;
• MeoVC APIs and developer tools;
• MeoVC-operated short-link domains, including clk.vc;
• customer-connected custom domains where MeoVC redirect infrastructure is used;
• support, billing, security, abuse, and legal communications.

This policy does not apply to third-party destination websites reached through a Short Link or QR code. Those websites are controlled by their own operators.

2. Roles

For account, website, dashboard, support, billing, security, abuse, and service operation data, MeoVC generally acts as an independent controller or comparable responsible party.

For customer-created Short Links, Destination URLs, campaigns, custom domains, and customer-directed use of analytics, the customer decides what to create, where to redirect, and how to publish links. Depending on the facts and law, the customer may be an independent controller, business, organization, or similar responsible party.

Where MeoVC processes Personal Data on behalf of a business customer under documented instructions, the Data Processing Addendum may apply.

3. Information We Collect

Account and dashboard information may include name, display name, email address, login details, workspace name, organization name, authentication events, settings, preferences, dashboard configuration, API keys, access tokens, and account activity.

Short-link and domain information may include original Destination URLs, generated Short Links, aliases, slugs, QR code configurations, link titles, tags, notes, creation dates, update dates, status, custom-domain configuration, DNS verification data, UTM parameters, referrer parameters, destination status, and abuse or security flags.

Redirect analytics may include timestamp, Short Link identifier, approximate location derived at redirect time, browser family, operating system family, device type, referrer category when available, destination status, and aggregated counts. MeoVC currently designs redirect analytics so that it does not store Visitor IP addresses, does not use redirect cookies, does not store full user-agent strings, and does not create persistent Visitor profiles for redirect analytics.

Support and communications information may include email address, name, organization, message content, attachments, screenshots, metadata, and information needed to respond.

Security and abuse information may include account activity logs, login events, API usage events, rate-limit events, domain verification events, security alerts, abuse reports, link blocking records, moderation decisions, legal notices, preservation records, and operational logs.

Billing information may include plan, billing status, invoice identifiers, payment status, tax-related information, renewal status, and records received from payment processors if paid services are enabled. MeoVC does not publicly identify a payment provider until a provider is actually connected and legally reviewed.

4. Sensitive Inferences from Links

Destination URLs, referrers, UTM parameters, query strings, link titles, QR contexts, and click metadata may reveal sensitive inferences about a person, organization, campaign, health condition, political interest, location, financial interest, or other protected or sensitive matter.

Customers must not use MeoVC to unlawfully collect, infer, disclose, profile, or target sensitive information. Customers are responsible for notices, consents, legal bases, and restrictions for their own campaigns and Destination URLs.

5. Information We Do Not Intentionally Collect for Redirect Analytics

For ordinary short-link redirect analytics, MeoVC does not intentionally store:

• Visitor IP addresses;
• redirect cookies;
• advertising identifiers;
• persistent Visitor identifiers;
• full user-agent strings;
• browser versions;
• operating system versions;
• precise GPS location;
• Visitor names, emails, phone numbers, or payment details;
• sensitive personal information from Visitors.

Security, abuse, fraud, legal, or operational logs may sometimes contain additional technical data where necessary to protect the Service, investigate Abuse, comply with law, or respond to legal process.

6. How We Use Information

MeoVC uses information to:

• provide, operate, maintain, and improve the Service;
• create, manage, redirect, and analyze Short Links and QR codes;
• support custom domains and workspaces;
• authenticate users and secure accounts;
• provide APIs, dashboard tools, and support;
• process billing and subscriptions where paid services are enabled;
• detect, prevent, investigate, and respond to spam, phishing, malware, fraud, unlawful content, security incidents, and Abuse;
• enforce the Terms of Service and Acceptable Use Policy;
• comply with legal obligations and legal process;
• communicate service, security, legal, account, and support messages.

MeoVC does not use redirect analytics to build cross-site advertising profiles of Visitors.

7. Legal Bases

Where GDPR, UK GDPR, or similar law applies, MeoVC may rely on:

• contract, to provide requested account, dashboard, API, billing, and service features;
• legitimate interests, to operate redirects, provide aggregated analytics, secure the Service, prevent Abuse, enforce terms, maintain reliability, respond to support, and improve core functionality;
• consent, for optional cookies, optional marketing communications, or other consent-based processing;
• legal obligation, to comply with law, tax, accounting, legal process, sanctions, or regulator requests;
• vital interests or public-interest-style safety needs where urgent harm prevention or child safety requires it.

8. Cookies and Browser Storage

Short-link redirects are designed not to use redirect cookies.

The website and dashboard may use cookies or local storage for authentication, session management, security, consent records, preferences, functionality, invite attribution, and optional features. Details are in the Cookie Policy.

Where legally required, optional cookies or storage are used only with consent or another legally available basis.

9. Sharing and Disclosure

MeoVC may disclose information to:

• hosting and infrastructure providers;
• database, storage, and backup providers;
• domain, DNS, and certificate providers;
• email and communication providers;
• analytics providers used for MeoVC website or dashboard analytics where enabled;
• payment processors if paid services are enabled;
• customer support providers;
• security, abuse, fraud-prevention, and monitoring providers;
• professional advisers;
• law enforcement, courts, regulators, or other parties where required or appropriate under law;
• parties involved in a merger, acquisition, financing, restructuring, or transfer of the Service.

Public documents intentionally do not name exact hosting, cloud, CDN, security, logging, or infrastructure vendors, regions, IP addresses, or internal architecture until a security and legal review approves disclosure.

10. International Transfers

MeoVC may process information in countries other than your country. Where transfer rules apply, MeoVC will use appropriate safeguards, such as contractual protections, standard contractual clauses, transfer risk review, or other lawful transfer mechanisms.

MeoVC maintains or should maintain an internal vendor and transfer map that includes provider category, purpose, data categories, country or region, transfer mechanism, security review status, and owner.

11. Retention

MeoVC retains information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

General retention principles are described in the Data Retention Policy. Actual retention may vary based on security, legal holds, backups, abuse investigations, account status, billing, tax, accounting, and operational needs.

12. Security

MeoVC uses reasonable technical, organizational, and administrative safeguards designed to protect information. No service can guarantee perfect security.

Security practices are summarized in the Security Overview. That overview intentionally avoids security-sensitive infrastructure details.

13. Data Subject and Privacy Rights

Depending on where you live and how you interact with the Service, you may have rights to access, correct, delete, port, restrict, object to, or receive information about Personal Data. You may also have rights to withdraw consent, appeal a denied request, opt out of certain processing, complain to a regulator, or avoid discrimination for exercising rights.

To submit a request, contact [email protected]. MeoVC may need to verify your identity and may ask for information needed to locate your account, Short Link, report, or request.

If MeoVC processes data on behalf of a customer, MeoVC may direct you to the customer or work with the customer to respond.

14. Regional Notices

EU, EEA, and UK individuals may have GDPR or UK GDPR rights, including rights of access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.

U.S. state privacy laws may provide rights to know, access, correct, delete, port, opt out of sale, sharing, targeted advertising, or certain profiling, limit certain sensitive information uses, and appeal. MeoVC does not sell Personal Data and does not share redirect analytics for cross-context behavioral advertising.

Canada, Australia, Japan, South Korea, India, Brazil, China, and other regions may provide additional rights depending on applicability. MeoVC will respond to applicable requests according to the law that applies to the request.

15. Children

The Service is not intended for children. Customers must not use the Service to knowingly collect information from children unless they have all required rights, notices, consents, legal bases, and safeguards.

MeoVC does not knowingly collect children's Personal Data through ordinary short-link redirect analytics. Reports involving child safety should be sent urgently to [email protected].

16. Automated Review and Moderation

MeoVC may use automated systems and manual review to detect spam, phishing, malware, fraud, Abuse, illegal content, security risk, suspicious links, payment risk, or terms violations.

These systems may flag, block, disable, warn about, throttle, or limit links, domains, accounts, API keys, or workspaces. Where legally required and safely possible, MeoVC may provide review or appeal options.

17. Incident and Breach Workflow

MeoVC maintains or should maintain an internal incident workflow covering triage, severity, affected data categories, containment, evidence logs, notification decisions, legal review, and remedial measures.

Where notification is required by law, MeoVC will provide legally required notifications to affected users, customers, regulators, or other parties.

18. Changes

MeoVC may update this Privacy Policy when the Service, data practices, law, vendors, payment flow, or legal details change. The updated version is effective when posted unless a later date is stated.

19. Contact

Privacy, data requests, DPA requests, legal, copyright, and regulator communications: [email protected]

Abuse, phishing, malware, spam, fraud, harmful links, and urgent takedown reports: [email protected]

Account, billing, and general support questions: [email protected]