Privacy Policy

Privacy should not be a guessing game. This page explains what we collect, why we collect it, and how we handle it when you use MeshWeave.

Last updated:

Our commitment to your privacy

MeshWeave is built to help teams understand how AI systems read their websites. We believe the same clarity should apply to how we handle your data. This policy explains our practices in plain language.

Data collection & usage

What we collect

  • Input URLs — the website addresses you submit for analysis.
  • Crawl metadata — page titles, HTML structure, JSON-LD, robots.txt policies, llms.txt files, heading hierarchies, content metrics, and entity signals extracted during analysis.
  • Account information — if you sign in with Google, we receive your email address and basic profile information for authentication.
  • Session cookies — used exclusively for authentication and CSRF protection (see below).

How we use it

  • Perform analyses — crawl and score the websites you submit across AEO, GEO, and AAX signals.
  • Community feed — public analyses may be displayed on browsing pages like "Latest public analyses" and domain index pages.
  • Service improvement — aggregated, anonymised metrics help us understand usage patterns and improve the scoring engine.
  • Authentication — session cookies enable secure sign-in and protect your private results.

Public vs. private results

Anonymous submissions are public by default. When you submit a URL without signing in, the analysis results — including scores, recommendations, and extracted data — are publicly accessible via a unique shareable URL and may appear in the community feed.

Signed-in users get private results. When you are authenticated, your analyses are private by default. They are accessible only via their unique UUID URL and are not listed in community browsing pages. Private pages include a noindex meta tag to prevent search engine indexing.

Claiming public results. If you submit an analysis while not signed in and later create an account, you may claim public ownerless analyses after 24 hours.

Cookies & authentication

MeshWeave uses a single session cookie for the following purposes:

  • Authentication session — keeps you signed in across page loads. This cookie is HttpOnly and Secure.
  • CSRF protection — a token cookie used to prevent cross-site request forgery on form submissions.

We do not use tracking cookies, advertising cookies, analytics cookies (e.g., Google Analytics), or any third-party cookies. We do not use fingerprinting techniques or local storage for tracking purposes.

Data retention & deletion

How long we keep data

Analysis results are retained indefinitely to support the community feed, historical tracking, and domain index pages. Crawl metadata (HTML snapshots, raw page content) is processed in-memory and is not permanently stored beyond what is needed to display scores and recommendations.

Requesting deletion

You may request deletion of your account data and associated private analyses at any time by contacting us at hello@meshweaveai.com. We will process deletion requests within 30 days. Public analyses submitted anonymously cannot be individually deleted but may be claimed and then removed by an authenticated user.

Third-party services

We keep third-party services to a minimum. Today, MeshWeave relies on the following:

  • Google OAuth — used for authentication. When you sign in with Google, we receive your email address and basic profile information. We do not access your Google account data beyond what is necessary for authentication. See Google's Privacy Policy.
  • Target websites — the URLs you submit are crawled using a headless browser to extract content for analysis. We do not transmit your identity or account information to crawled websites.

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

Your rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your account and associated data.
  • Portability — request your data in a structured, machine-readable format.
  • Objection — object to processing of your personal data where applicable.

To exercise any of these rights, contact us at hello@meshweaveai.com.

Questions about your privacy deserve a clear answer.

Contact us