Under the California Consumer Privacy Act (CCPA), "personal information" includes data that identifies, relates to, or could reasonably be linked with a particular consumer or household. Although our platform operates in a B2B context, and CCPA primarily applies to California residents, we extend CCPA-related rights and disclosures to all applicable data subjects. We collect only the personal data, pre-approved and authorized by our clients, necessary to operate our platform and deliver services to our clients. This may include:

We collect personal data strictly for business operational purposes, including:

• Creating and managing user accounts
• Delivering and improving our SaaS platform
• Processing policy information, certificates, and related operational workflows
• Providing customer support and troubleshooting
• Enabling auditing, compliance, and security monitoring
• Facilitating integrations with third-party systems as authorized by clients
• Communicating service updates, notices, or required operational information
• Distribution of policy reports as designated by clients

We use personal data only for the purposes for which it was collected, unless additional consent is obtained.

Personal data is used to:

• Authenticate users and secure access to the platform
• Process transactions and automated workflows within the insurance and trucking policy lifecycle
• Generate certificates of insurance and associated documents
• Support compliance with regulatory or industry requirements
• Analyze system usage to improve performance and user experience
• Detect and prevent fraud, unauthorized access, or security threats

We do not use personal data for marketing unrelated to our services, nor do we profile individual users.

Personal data is stored:

• On secure, cloud-based infrastructure hosted in the United States
• In encrypted databases and storage systems
• In backups maintained solely for disaster recovery and continuity of operations

We retain data only as long as necessary to fulfill contractual obligations, comply with regulatory requirements, or support legitimate business interests.

We implement enterprise-grade security controls, including:

• Encryption of data at rest and in transit (TLS 1.2)
• Role-based access control (RBAC)
• Multi-factor authentication (MFA) for administrative and privileged access
• Continuous monitoring and logging of system activity
• Firewalls, intrusion detection, and vulnerability scanning
• Regular third-party security assessments and audits
• Employees and contractors undergo required confidentiality and information security training.

Bot Protection and Security (Cloudflare Turnstile): To protect our platform and reporting forms from spam, abuse, and automated bot attacks, we use Cloudflare Turnstile. Turnstile operates invisibly in the background to verify that users are human. By using our website and submitting forms, you acknowledge and agree that Cloudflare may collect and process certain hardware and software information to differentiate between human users and automated bots. This data is collected solely for security purposes and is not used for targeted advertising. For more information, review the Cloudflare Privacy Policy and Turnstile Privacy Addendum.

Personal data is deleted according to our internal data retention and destruction policies:

• Client-requested deletion is performed upon verified authorization
• Data is securely erased from active systems and flagged for deletion in backups
• Backup copies are deleted automatically upon expiration of the backup retention cycle
• Deleted data is irretrievable once the deletion process is complete
• Clients may contact us at any time to request data removal consistent with contractual and legal obligations.

California residents are entitled to the following rights regarding their personal information. While these rights apply to individuals per CCPA, all of the individual personal information created, maintained, and stored on our SaaS platform is only provided by the client entity with whom we have a contractual relationship. Therefore, any request by an individual under CCPA, will be reviewed with the senior personnel from the client to determine the most appropriate method to handle the request.

We do not sell, rent, share, or otherwise transfer personal data to third parties for monetary or commercial gain. Personal data is shared only with:

• Service providers contracted to support platform operation (e.g., hosting providers)
• Third parties explicitly authorized by our clients (e.g., insurance partners, integration endpoints)
• All third-party providers are bound by confidentiality and data protection obligations.

We may disclose personal data only under the following limited circumstances:

• With client authorization
• To comply with legal obligations, subpoenas, or lawful regulatory requests
• To investigate fraud, security incidents, or misuse of the platform
• To protect the rights, safety, or property of our company, its clients, or its users
• We do not disclose personal data for any other reason.

Because we operate in a B2B environment, clients control their own users and data. Clients are responsible for:

• Ensuring the accuracy of personal data they submit
• Managing user access and permissions within their organization
• Complying with their own legal and regulatory requirements

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. All updates will be posted on our website with the effective date.

For CCPA-related requests, including your Right to Know, Right to Delete, or Right to Correct, you may contact us using either method below. We will verify your identity before fulfilling your request. For questions or requests related to this Privacy Policy, data access, or data deletion:

Email: support@meshvi.com

Mailing Address:

Thank you for trusting us with your data.