Privacy policy

Who we are

Mevance is operated by SeedLab. You can reach us about anything on this page at mevance.info@gmail.com.

What we store

• Your account: email address, name, language, timezone, and working days.
• Your work: task titles and descriptions, private notes, estimates, recorded time, status changes, reflections, goals and projects.
• Your day: which days you planned, which you closed, and the figures calculated from them.
• Sharing: who you have granted access to, and a record of each time somebody opened something you shared.
• Billing: your plan and its status, plus identifiers issued by our payment provider. We never see or store your card number.

Private notes are private

A note marked private is never included in anything shared with anyone — not with a manager, not in a report, not through a share link, and not under any organization setting. It is removed before the data leaves the server, rather than hidden by the interface.

Artificial intelligence

Some features send your information to an external AI provider. This only happens if you have turned AI assistance on in your privacy settings; with it off, those features refuse to run rather than sending anything.

Where a feature can work from totals alone — the end-of-day comment, for instance — it sends counts and minutes rather than the text of your tasks. Features that improve your wording or classify a task necessarily send that task's text.

We do not permit providers to train on your data, and we do not sell it, share it for advertising, or use it to build a profile of you for anyone other than you.

Who can see your work

Nobody, unless you say so. Being someone's manager grants nothing on its own; access exists because you created it, and you can withdraw it at any time.

Every time somebody opens your progress or a report you shared, it is recorded and shown to you. In an organization, an administrator can set a default visibility, and you can always narrow what you share but can never be forced to widen it.

Google Calendar

If you connect Google Calendar, we ask only for permission to read and write calendar events. We use it to place your tasks in your calendar and to read events back so your day reflects your real commitments. We do not read your other calendars for any other purpose, and disconnecting revokes our access immediately.

Who else processes your data

• DigitalOcean — hosting and databases.
• SendGrid — sending the emails you have asked for.
• Stripe — payments. Card details go to Stripe and never reach us.
• AI providers — only for the features described above, and only with your consent.

How long we keep it

Your work is kept while your account exists, so that a year-on-year comparison is possible. An organization may set a shorter retention period, after which older records are removed.

Getting it back, and getting rid of it

You can export everything Mevance holds about you from your privacy settings, at any time, without asking us.

You can delete your account from the same page. Deletion asks for your password, so that a stolen session cannot destroy your history. It is permanent: your tasks, days, reports and insights go with it.

Security

Everything travels over HTTPS. Passwords are hashed, and stored third-party credentials are encrypted at rest. No system is perfect, and we would rather say that than claim otherwise.

Your rights under Saudi law

Mevance is operated from Saudi Arabia and this policy is written to the Personal Data Protection Law (PDPL). Under it you have the right to be informed of why your data is collected, to see it, to correct it, to ask for it to be destroyed, and to withdraw a consent you have given. None of these requires a reason.

Two of them are buttons rather than requests: your privacy page exports everything Mevance holds about you, and deletes your account and its contents. You do not have to ask us, and we cannot be slow about it.

The lawful basis differs by purpose, and it is worth being exact. Running the product for you — storing your tasks, your days, your reports — rests on performing the service you signed up for. Sending anything to an AI provider rests on your consent alone, is off until you turn it on, and can be turned off again at any time without losing anything you have written. Nothing here is used to advertise to you or sold to anybody.

If you believe we have handled your data wrongly, write to us first at mevance.info@gmail.com. You may also complain to the Saudi Data & AI Authority (SDAIA), and you do not need our permission to do so.

Sharing is always your choice

Nothing you write is visible to anybody else until you decide it is. A new account starts private. Joining an organization does not change that by itself: your manager and your administrators see your work only to the extent you have agreed to, and you can narrow it or withdraw it at any time from your privacy page.

You can share the whole picture, only certain projects, only your figures without the task text, or only the reports you send — and each of those is a separate choice rather than a single switch. Where somebody has not shared, the product says so plainly rather than leaving them out of a total, because a report that quietly omits people reads as a complete picture of a smaller team.

Your private notes are never shared, under any setting, to anybody.

Changes

If we change this policy in a way that affects what we do with your data, we will tell you in the product rather than quietly changing the date at the top of this page.