Trust & Security
How MeSquared protects your personal data
🔒 256-bit SSL🛡️ OAuth 2.0📖 Read-Only Access🚫 We Never Sell Data🔑 No Passwords Stored
Our Data Promise
MeSquared exists to simplify your life — not to monetize your data. We access only what's needed to power your dashboard, we never share it with third parties, and you can delete everything at any time.
What We Access & Why
| Integration | What We Access | Permission | What We Can't Do |
|---|
| Google Calendar | Event titles, times, locations | Read Only | Create, edit, or delete events |
| iCloud Calendar | Event titles, times, locations | Read Only | Modify any calendar data |
| Spotify | Playlists, podcasts, now playing | Read Only | Delete playlists or modify your library |
| Google Maps | Location search, nearby places | API Only | Track your location or movements |
How We Protect Your Data
🔐
Encryption
- ✓All data transmitted over HTTPS with TLS 1.3
- ✓OAuth tokens encrypted before database storage
- ✓Passwords hashed with bcrypt — we cannot read them
- ✓API keys stored server-side only, never in browser
🔑
Authentication
- ✓OAuth 2.0 for all integrations — your credentials go directly to Google/Spotify, not through us
- ✓Tokens auto-rotate — expired tokens refreshed, old ones invalidated
- ✓Revoke access any time from your integration settings
🛡️
Infrastructure
- ✓Hosted on Vercel with automatic SSL certificates
- ✓Supabase PostgreSQL with Row Level Security
- ✓Rate limiting on all endpoints
- ✓No personal data in browser storage
📊
Audit Trail
- ✓All data access logged with timestamp and action type
- ✓Audit logs available upon request
- ✓No employee accesses your raw integration data
What We Never Do
- ✕Never sell your data — to anyone, for any reason
- ✕Never share your data with advertisers or third parties —
- ✕Never store payment information — Stripe handles all billing
- ✕Never track your location — we use event locations, not GPS
- ✕Never access more than we need — all scopes are read-only
- ✕Never use your data to train AI models — your profile is yours
- ✕Never retain data after deletion — when you delete, it's gone
Your Rights
- ✓Access: Request a copy of all data we have about you
- ✓Delete: Request complete deletion of your account and all data
- ✓Export: Download your profile, preferences, and connected data
- ✓Revoke: Disconnect any integration instantly from settings
- ✓Audit: Request a log of when and how your data was accessed
To exercise any of these rights, email privacy@me-squared.ai
AI & Your Energy Profile
- ✓Your Energy Profile is generated by AI using birth data you provide
- ✓Birth data is used only during generation — it is not stored in plaintext
- ✓Your reading is saved to your account only — no one else can see it
- ✓The shareable Energy Type card shows only your type name — no personal details
- ✓AI recommendations include safety classifiers for wellness content
Questions?
If you have any questions about how we handle your data:
Email: privacy@me-squared.ai