Privacy information
Last updated 27 September 2026
Your account and contacts
Meishio is operated by Varun Modgill. It stores your Google account identifier, email address and name to sign you in. It does not request access to Gmail. Google Contacts access is requested only if you turn on phone contact sync in Settings. That access is used to create and update contacts in a Meishio label. Meishio does not change other contacts in your Google account. A session cookie keeps you signed in. The refresh token for Contacts sync is stored encrypted and is removed when you turn sync off or delete your account.
Cards, contact details, notes, follow-ups and research you save are associated with your account. Other users cannot view them through their accounts. Administrators can manage accounts, credit balances and access; the service operator also has operational access to stored data.
Where your data is stored
Your account, contacts and notes are stored in a Neon Postgres database in Singapore (region ap-southeast-1). Meishio's servers run on Vercel in Singapore (region sin1). Contact photos and My card images are kept in private Vercel Blob storage and are shown only through your signed-in account.
Services used to process your data
Google handles sign-in. When you scan a card, its image may be sent to DeepSeek or Moonshot to read the information. Extracted information may be sent to TypeSafe for accuracy checking.
When you request research, Meishio sends the relevant person and company search terms to Exa. It saves source links, bounded source text, professional facts and summaries for your review. DeepSeek receives these sources and the role, company, background and goals you choose to save in your professional profile to produce a relevant brief. When you request your own profile or company research, the LinkedIn URL you provide is sent to Exa. Research does not automatically replace your saved contact details.
Meishio Search, which checks saved contacts for new roles, sends a contact's name, company, title, city and email domain to Exa. DeepSeek or TypeSafe compares the results with the contact, and any change is shown to you to accept or ignore. When you import contacts from your phone, Google Contacts or a file, each entry's name, organisation, title and email domain, never a phone number or full email address, may be sent to DeepSeek or TypeSafe to sort business contacts from personal ones. These providers process data under their own policies.
Company news comes from GDELT, a free public news index. Meishio looks up company names only — never your contacts' names or details. If GDELT is unavailable, the same company-name searches may go to Google News instead. Headlines that name someone you know are matched inside Meishio, and you can turn company news off in Settings.
Follow-up drafts
The day after you scan cards at an event, Today offers a short follow-up message for each person you met there. To write it, Meishio sends the event name and each person's name, company and title to the AI service that writes the draft (DeepSeek or Kimi from Moonshot, whichever is configured). Your notes about the person are not sent.
If no AI service is available, Meishio writes the draft itself from a template, which may include a short note of yours. That draft is made inside Meishio and is not sent to any AI service. Drafts are saved on the contact so the AI service is not asked again.
Scan location
Location is only asked for when you open the “Scanning at” label on the Scan screen, and only used if your browser allows it. Your browser then sends your device's approximate position, rounded to about 1 km, to BigDataCloud, which returns the name of the place (usually the city). BigDataCloud processes this under its own policy.
The place name is used for the “Scanning at” label and to name the event your cards are grouped into. When you save a card, Meishio stores the place name and the position rounded to about 100 metres on that event, only to keep cards scanned close together in the same event. It is deleted with the event or your account. Card photos are saved without camera or location metadata.
Suggested email addresses
To suggest likely email addresses, Meishio keeps anonymous counts of email formats per organisation domain (for example, first.last at example.com), pooled across users. Only the format and counts are kept — never anyone's name or address — and a format is used only after it has been seen in at least three different users' contacts.
When you choose “Find the email format”, Meishio sends the organisation's email domain or name to Exa to find published addresses at that domain. Only the format found, the number of addresses that showed it and the page links are saved on your account; the addresses themselves are not kept. A suggested address is marked “Suggested” and is never used for drafts, exports or Google Contacts until you confirm it. Meishio does not contact the mail server to test an address.
The anonymous counts are not removed when you delete your account, because they hold nothing about you or your contacts.
Company names from email domains
To suggest company names, Meishio looks up the public website of a work email's domain (for example kitagawa-motors.co.in) and keeps the company name it finds. Personal email domains like gmail.com are never looked up.
Only the domain is sent and stored, never a person's name or email address. The name found is shared with other Meishio users who have contacts at the same domain, and is kept for 30 days. A suggested company is only saved on a contact when you apply it.
Public professional facts (draft)
Not active yet — pending legal review. Meishio does not store or use these facts today.
When it is switched on: when Meishio Search finds a person's current role on a public web page with high confidence, Meishio may keep a short record of that public professional fact — the person's name, company and job title, the link to the public page, the page's date, when it was found and last confirmed, and how confident the match was. It never keeps phone numbers, email addresses, postal addresses, notes or photos, and never anything a user scanned, imported, typed or edited.
A fact is used only to suggest an update to someone who already has that person saved under the same name and company, and only if it was confirmed in the last 180 days; the suggestion names its source and date and is applied only if they accept it. It is never shown to anyone who does not already have that person, it cannot be searched, and no contact details come with it. Facts are kept for up to 12 months after last confirmed, then deleted.
Anyone can ask for facts about them to be removed, with or without a Meishio account, at Remove public facts about you. Matching facts are deleted and are not stored again.
Storage and your choices
Saved information remains in the service until you remove it or delete your account. Card photos are stored as a resized image without camera or location metadata; the original upload is not kept. When you finish an import, the entries you did not add are deleted, and a short sorting note keyed by a one-way hash is kept to speed up later imports. Unfinished imports expire after 7 days.
You can edit, export or delete contacts in the app and sign out from your account page.
Download your data and delete your account
Download. In Settings, under Account, “Download my data” gives you one ZIP file with everything Meishio holds for your account: contacts (also as a vCard file), companies, notes and activity, events, card scans with their images, contact photos, My card, research, Meishio Search results, imports, your settings, and the log of changes Meishio made in your Google Contacts. You can download it up to 3 times a day.
Delete. In the same place, “Delete my account” deletes every contact, company, note, event, card image, contact photo, My card, research result, import, setting and log that belongs to your account, and then the account itself. You are signed out straight away, and deletion usually finishes within a few minutes. Meishio's access to your Google Contacts is revoked, but contacts already in your Google account are not deleted from Google. Deletion cannot be undone, so download your data first. An administrator can also start the same deletion if you ask by email; that request is recorded in the audit log.
What is kept. Records of payments, if any, are kept for accounting, with the amounts and dates but with your account replaced by an anonymous id. The administrative audit log is kept, with your account replaced by the same anonymous id and administrator notes about you removed. Deleted data can remain in the database provider's short-term recovery history until that history rolls over.
For correction, or questions about retained data, contact varunmodgill@googlemail.com. The Terms of Service cover your use of Meishio.