Mervella

Privacy Policy

Last updated: June 5, 2026

1. Information We Collect

We collect information you provide directly:

  • Account Information: Name, email address, and password when you create an account
  • Asset Data: Equipment details, serial numbers, purchase information, and notes you enter
  • Employee Data: Names, departments, and email addresses of employees you add
  • Payment Information: Billing details processed securely by our payment provider
  • Communications: Messages you send through our contact form or support channels

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Process transactions and send billing notifications
  • Send important service updates and security alerts
  • Respond to support requests and communications
  • Analyze usage patterns to improve the user experience
  • Detect and prevent fraud or abuse

3. Data Storage and Security

Your data is stored securely in encrypted databases. We implement industry-standard security measures including:

  • Encryption at rest and in transit (TLS 1.3)
  • Row-level security policies on all database tables
  • Regular security audits and penetration testing
  • Automated backups with point-in-time recovery

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party services that help us operate (hosting, payment processing, analytics)
  • Legal Requirements: When required by law, regulation, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Your Rights

You have the right to:

  • Access your personal data at any time
  • Correct inaccurate information
  • Delete your account and associated data
  • Export your data in standard formats (CSV)
  • Opt out of non-essential communications

6. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies. Analytics are privacy-respecting and anonymized.

7. Data Retention

We retain your data for as long as your account is active. After account deletion, we remove your data within 30 days, except where retention is required by law.

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service.

10. Contact

For privacy-related inquiries, contact us at privacy@mervella.ca.