Privacy Policy

1. Who This Policy Applies To

This policy applies to:

Website visitors — people who browse menaia.com or submit a contact, demo, or marketing form.
Platform users — individuals at our client organizations who create accounts and log in to use the platform.

If you are an individual whose data was entered into the platform by a Menaia client (for example, you are that client’s customer or employee), please contact that organization directly with privacy questions. They control that data.

2. Information We Collect

Information you provide. Your name, business email, phone number, company name, role, and anything you include when you fill out a form, request a demo, create an account, or contact support.

Information from platform use. Account and profile details, settings, log-in records, and activity or usage data generated as you use the platform (such as features accessed and actions taken).

Information collected automatically. When you visit our website, we and our service providers may collect IP address, browser and device type, pages viewed, referring links, and similar technical data through cookies and similar technologies.

Data you submit to the platform. Content and records you upload or enter while using the platform. We process this on behalf of the client organization, as described under “Data You Submit to the Platform” below.

3. How We Use Information

We use personal information to:

Provide, operate, maintain, and secure the platform and website;
Create and manage accounts and provide customer support;
Communicate with you about your account, service updates, and security notices;
Send marketing communications about Menaia (you can opt out at any time);
Analyze and improve our products, services, and website;
Detect, prevent, and respond to fraud, abuse, and security incidents; and
Comply with legal obligations and enforce our agreements.

4. Cookies, Analytics, and Advertising

Our website uses cookies and similar technologies to operate the site, remember preferences, measure traffic, understand how the site is used, and support our advertising. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

Third parties on this site. These providers operate on our website and may collect information directly from your browser. Because they operate across many websites, they may be able to collect information about your online activities over time and across different sites and services:

Google (Google Tag Manager, Google Analytics, and Google advertising products) — measures site traffic and supports advertising and campaign measurement, including on other sites you visit.
Meta (Meta Pixel) — measures the performance of our advertising and supports advertising to you on Meta’s services and elsewhere.
Microsoft (Microsoft Clarity) — behavioral analytics that records how visitors interact with our pages, including clicks, scrolling, and mouse movement, so we can see where the site is confusing or broken.
Vercel (Web Analytics and Speed Insights) — measures aggregate site usage and page performance on our behalf.
LeadConnector / HighLevel — provides the chat widget on our site. The chat loads only if you accept cookies; if you decline, take no action, or send an opt-out preference signal, it is never loaded. If you do open the chat, its contents and related technical information are processed by that provider on our behalf so we can respond to you.

Opt-out preference signals and Do Not Track. We honor Global Privacy Control (GPC) and other recognized browser opt-out preference signals. When your browser sends one, we treat it as a request to opt out of the sale and sharing of your personal information, we apply it automatically to that browser, and we display a confirmation on the site that the signal was received and honored. A recognized signal takes precedence over any prior acceptance stored in that browser. There is no single industry standard for responding to legacy “Do Not Track” browser headers, and we do not respond to those separately; use GPC, the Decline option in our cookie notice, or the “Do Not Sell or Share My Personal Information” link in our footer instead.

5. How We Share Information

We do not sell personal information for money. We do disclose personal information as follows:

Advertising partners — we share identifiers (such as IP address, cookie and device identifiers) and internet or other electronic network activity information (such as pages viewed, referring links, and interactions with our site) with advertising partners, currently Google and Meta, for cross-context behavioral advertising and campaign measurement. Under California law this is considered “sharing,” and the broad definition of “sale” may also cover it. You can opt out at any time — see “Do Not Sell or Share My Personal Information” below.
Service providers — vendors who host, support, secure, or improve our services (for example, cloud hosting, analytics, chat, email, and payment processors), who are permitted to use the information only to provide services to us.
Legal and safety — when required by law, legal process, or to protect the rights, safety, or property of Menaia, our clients, or others.
Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
With your direction — when you ask us to share information or connect a third-party integration.

We do not knowingly share personal information of consumers we know to be under 16 years of age.

7. Do Not Sell or Share My Personal Information

You have the right to opt out of the sale and sharing of your personal information, including for cross-context behavioral advertising. You do not need an account, and we will not ask you to verify your identity to honor an opt-out. There are three ways to exercise it, and any one of them is enough:

The footer link — select “Do Not Sell or Share My Personal Information” at the bottom of any page. Your preference is recorded for that browser immediately.
The cookie notice — select “Decline” when the notice appears.
A browser opt-out signal — enable Global Privacy Control in a browser or extension that supports it. We detect and honor it automatically, and it overrides any earlier acceptance in that browser.

An opt-out applies to the browser and device where you make it, because it is stored in that browser. If you use more than one browser or device, or clear your cookies and site data, please opt out again there. You may also submit an opt-out request through an authorized agent, or by contacting us using the details at the end of this policy.

Opting out stops further sharing for advertising going forward. It does not delete information already collected — to request deletion, see the California section below.

8. How We Protect Information

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

9. Data You Submit to the Platform

When a client uses the platform to process information about its own customers, employees, subcontractors, or other individuals, Menaia acts as a service provider and processes that information only on the client’s behalf and per our agreement with the client. The client is responsible for the legality of that data and for obtaining any required consents and notices. Individuals whose data is processed this way should direct privacy requests to the client organization that controls the data. We will support our clients in responding to such requests as required by law and our agreement.

10. Data Retention

We retain personal information for as long as needed to provide our services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. We retain platform data per our client agreements; after termination, data may be deleted following a reasonable period unless retention is legally required.

11. Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

Know what personal information we collect, use, and share;
Access a copy of the personal information we hold about you;
Delete personal information, subject to legal exceptions;
Correct inaccurate personal information; and
Opt out of the “sale” or “sharing” of personal information and limit use of sensitive personal information.

What we share. We share identifiers (such as IP address, cookie and device identifiers) and internet or other electronic network activity information (such as pages viewed, referring links, and interactions with our site) with advertising partners, currently Google and Meta, for cross-context behavioral advertising. Under California law this is “sharing,” and the statute’s broad definition of “sale” may also reach it. We do not sell personal information for money, and we do not use or disclose sensitive personal information for purposes requiring a right to limit. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

How to opt out. Use the “Do Not Sell or Share My Personal Information” link in our footer, select “Decline” in our cookie notice, or enable Global Privacy Control in your browser — all three are described under “Do Not Sell or Share My Personal Information” above. We honor recognized opt-out preference signals automatically and do not require you to verify your identity to opt out.

How to make other requests. To exercise your rights to know, access, delete, or correct, contact us by email using the details at the end of this policy, with “California Privacy Request” in the subject line. We will verify your request before responding, generally by asking you to confirm information we already hold, and we will respond within the timeframes California law requires. You may use an authorized agent where permitted; we may ask the agent for proof of your written authorization. We will not discriminate against you for exercising any of these rights.

Note on platform data: for information a client has submitted to the platform, please direct California rights requests to that client, who acts as the business for that data.

12. Children’s Privacy

Our website and platform are intended for business use and are not directed to children under 16. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, provide additional notice.

14. Contact Us

Questions or requests regarding this Privacy Policy or your personal information:

Menaia Email: info@menaia.com