Your California Privacy Rights (CCPA)
Last updated: August 29, 2026
This notice supplements our Privacy Policy and applies to residents of California under the California Consumer Privacy Act, as amended by the CPRA.
What we do not do
We do not sell your personal information, and we have not sold it in the preceding twelve months.
We do not share your personal information for cross-context behavioural advertising. MESA carries no third-party ad networks and no advertising trackers.
We do not knowingly sell or share the personal information of consumers under 16.
Categories we collect
- Identifiers — name, username, email address, account and device identifiers.
- Commercial information — venues you save, plan, check into, rate or recommend.
- Geolocation data — precise location while the app is open, and the coordinates recorded with a check-in.
- Internet activity — screens viewed, searches, taps on recommendations, and referral attribution.
- Audio, electronic or visual information — photographs you upload.
- Inferences — a taste profile derived from your activity, used for recommendations.
- Sensitive personal information — precise geolocation, and any dietary or allergy details you choose to enter.
We use sensitive personal information only to provide the features you asked for, and never to infer characteristics about you.
Where it comes from
Directly from you, automatically from your use of the app, and from service providers such as Google Places for venue data.
Why we collect it
To provide and secure MESA, personalise recommendations, verify check-ins, communicate with you, verify venue ownership, improve the product, and meet legal obligations. Full detail is in the Privacy Policy.
Who we disclose it to
Service providers who process it on our behalf, listed in the Privacy Policy. Disclosures are for business purposes only, under contracts that restrict their use of the information.
Your rights
- Know what we collect, use and disclose about you.
- Access a copy of your personal information.
- Correct inaccurate personal information.
- Delete your personal information.
- Limit the use of sensitive personal information.
- Opt out of sale or sharing — not applicable, as we do neither.
- Non-discrimination for exercising any of these rights.
How to make a request
Email privacy@mesaplanner.com with the subject California privacy request and tell us which right you are exercising. You may also delete your account and its content yourself at any time — see Delete Your Account.
We will verify your request against the email address on your account, and may ask for further information if we cannot match you to an account. We respond within 45 days and may extend once where permitted, telling you if we do.
Authorised agents may submit a request on your behalf with written permission signed by you; we may still contact you to confirm.
Questions
Email privacy@mesaplanner.com.