MEIKAIIntroduction
This Privacy Policy describes how MEIKAI LTD ("Meikai", "we", "our", or "us") collects, uses, stores, and protects personal data when you access or use the Meikai website and software platform (together, the "Service").
Meikai processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR where applicable, and other European data protection laws.
Use of the platform is also governed by our Terms of Service. Enterprise customers may execute a separate Data Processing Addendum for Customer Personal Data processed on their behalf.
1.Data Controller
MEIKAI LTD · Company number: 16607357 · Registered office: 51h Wickham Road, London, England, SE4 1LT
Privacy and data-protection enquiries, including requests to exercise your rights, should be sent to legal@meikai.ai.
Where Article 27 of the GDPR requires us to designate a representative in the European Union, current contact details are available on request.
2.Scope of This Policy
This Policy applies to visitors of https://www.meikai.ai, users of the Meikai platform, and representatives or authorised users of customer companies.
When Meikai processes personal data on behalf of enterprise customers (including tracking pixel events and CDN log analytics for customer websites), Meikai acts as a processor. That processing is governed by the applicable customer agreement and Data Processing Addendum (DPA), not this Policy.
The Service is not directed at children under 16, and we do not knowingly collect personal data from children.
3.Personal Data We Collect
3.1 Data Provided Directly
- Communications sent to Meikai
- Account credentials
- Company name and role
- Professional email address
- Name and surname
3.2 Data Collected Through Use of the Service
- Configuration settings and preferences
- Usage data and feature interactions
- Login and access logs
3.3 Technical and Device Data
- Date and time of access
- Operating system
- Browser and device information
- IP address
3.4 Analytics Data (Google Analytics)
We use Google Analytics (GA4) to analyse website usage. Collected data may include anonymised IP address, pages visited, navigation paths, device and browser data, approximate location, and timestamps. Google Analytics cookies are placed only after your explicit consent. See our Cookie Policy for details.
3.5 Google Account integrations
Some Meikai customers choose to connect their Google account so Meikai can display Google Analytics and Google Search Console data in Site Scanner. This connection is optional. Meikai only accesses this Google user data after an authorised user grants access through Google's OAuth consent screen.
For Google Analytics, Meikai requests the read-only scope https://www.googleapis.com/auth/analytics.readonly. We use it to list Google Analytics 4 properties the user can already access, link one property to a Meikai brand, and retrieve aggregated traffic reports (including AI-referral sessions) for display in the customer's Meikai Analytics tab.
For Google Search Console, Meikai requests the read-only scope https://www.googleapis.com/auth/webmasters.readonly. We use it to list Search Console properties the user can already access, link one property to a Meikai brand, and retrieve search performance metrics (clicks, impressions, CTR, and average position) for display in the customer's Search Performance tab.
OAuth refresh and access tokens are stored in Google Secret Manager in Meikai's Google Cloud project. Search Console performance metrics are stored in Meikai's Google Cloud / BigQuery project so the dashboard can be shown to that customer. Google Analytics Data API results are queried to render the customer's dashboard.
Meikai does not sell Google user data. We do not use Google Analytics or Search Console user data obtained through these OAuth connections to create, train, or improve foundational or generalized machine-learning or artificial-intelligence models. We do not transfer that Google user data to third-party AI providers for model training. Customers can disconnect the integration in Meikai, which revokes the stored tokens, and can also revoke access in their Google Account.
4.Purposes and Legal Bases of Processing
| Purpose | Legal Basis |
|---|---|
| Website analytics (Google Analytics) | Consent (Article 6(1)(a) GDPR) |
| Account creation and management | Contract performance |
| Service delivery | Contract performance |
| Customer Google Analytics and Search Console dashboards (optional OAuth) | Contract performance |
| Customer support | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Legal obligations | Legal obligation |
5.AI Processing
The Service uses automated analysis and AI-based systems to generate insights. No automated decision-making producing legal or similarly significant effects is performed solely on the basis of such processing.
6.Data Recipients and Subprocessors
Personal data may be accessed by authorised Meikai personnel and trusted service providers acting on our instructions, including cloud infrastructure providers (such as Google Cloud Platform) and, where you have consented, Google LLC for analytics. Where a customer connects Google Analytics or Search Console, Google also processes that request as the provider of those APIs.
Customer Personal Data in the Meikai platform is primarily hosted in the European Union (Google Cloud). See our Subprocessors notice for locations and transfer safeguards.
A current list is published on our Subprocessors page. Enterprise customers receive the full DPA Annex III and may object to changes as described in the DPA.
7.International Data Transfers
Some data may be transferred outside the EEA or UK, notably to the United States via Google Analytics. Platform hosting is primarily in the EU; any transfers outside the EEA or UK are governed by appropriate safeguards, including Standard Contractual Clauses, the UK Addendum, the IDTA, and, where applicable, adequacy frameworks.
8.Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, our contractual commitments, and applicable law. Typical retention periods are set out below.
| Category | Retention period |
|---|---|
| Account and profile data (platform users) | Duration of the active subscription or contract; deleted or returned within 30 days of a valid erasure request after termination, unless longer retention is required by law |
| Support and sales communications | Up to 3 years from the last relevant interaction, or longer if required for legal claims or obligations |
| Platform usage, configuration, and access logs | Duration of the active subscription or contract, plus a limited period for security monitoring and backup rotation where applicable |
| Website analytics (Google Analytics 4) | Up to 14 months in GA4; analytics cookies up to 13 months. See Cookie Policy |
| Website cookies (non-analytics) | Session cookies: deleted when you close your browser. See Cookie Policy |
| Tracking pixel events (customer website visitors) | Processed on behalf of the Customer under the DPA; retention per the applicable agreement |
| Raw CDN logs (including visitor IP) | 30 days in production storage, then automatic deletion; human visitor IPs are not loaded into analytics tables |
| Curated bot / crawler analytics | Duration of the customer agreement, as set out in the DPA |
| Google OAuth tokens for Analytics and Search Console | Until the customer disconnects the integration, the connection is replaced, or the customer account is terminated; tokens are then deleted from Secret Manager |
| Search Console performance metrics for a linked property | Retained while the property remains linked, then deleted; imported BigQuery partitions expire after a bounded retention window |
9.Data Security
Meikai implements appropriate technical and organisational measures to protect personal data.
Further detail is published on our Security overview page.
If we become aware of a personal data breach affecting personal data for which Meikai is Controller, we will notify the relevant supervisory authority and affected individuals where required by applicable law.
10.Your Rights
You have the right to access, rectify, erase, restrict, object to processing, and request data portability where applicable.
You may withdraw consent to analytics cookies at any time via cookie settings on the Website.
To exercise your rights, contact us using the privacy contact in section 1 with sufficient detail to identify your request. We respond within one month of receipt, extendable by up to two further months where requests are complex, as permitted under GDPR Article 12(3). We may request reasonable information to verify your identity.
11.Complaints
You may lodge a complaint with a competent supervisory authority. UK residents may contact the ICO; EU residents may contact their local authority (including the CNIL in France where applicable).
12.Cookies
Cookies and similar technologies on the Website are described in our Cookie Policy.
13.Changes
This Policy may be updated from time to time. The "Last updated" date reflects the current version. We encourage you to review this page periodically.
14.Contact
Privacy and data-protection enquiries, including requests to exercise your rights, should be sent to legal@meikai.ai. Company: MEIKAI LTD.
15.Google API Services User Data Policy
Meikai's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Meikai does not request Google Workspace or Google Photos scopes. Google user data retrieved through Google Analytics and Search Console is used only to provide the Site Scanner features the customer enabled, and only for that customer's Meikai account.
Related documents
- Legal centre: all policies and enterprise information
- Standard Terms: customer agreement terms
- Terms of Service: public platform terms
- Cookie Policy: cookies on the website
- Subprocessors: service providers
- Security overview: technical and organisational measures
- Trust Center: live compliance and security overview