Privacy Policy

Your privacy is fundamental to us. Learn how we collect, use, and protect your personal information when you use MertO AI services.

Last updated: December 2024

Overview

MertO AI ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our artificial intelligence services, website, and related applications.

Our Commitment

  • • We will never sell your personal data to third parties
  • • We use industry-standard security measures to protect your information
  • • You have control over your data and can request its deletion at any time
  • • We are transparent about what data we collect and how we use it

Information We Collect

We collect different types of information to provide and improve our AI services:

Account Information

  • • Email address and name
  • • Profile picture (optional)
  • • Subscription and billing details
  • • Account preferences and settings

Usage Data

  • • AI service usage patterns
  • • Feature interactions and preferences
  • • Performance and error logs
  • • Device and browser information

Content Data

  • • Images uploaded for AI processing
  • • Generated AI outputs
  • • User prompts and instructions
  • • Project and workspace data

Technical Data

  • • IP address and location data
  • • Cookies and similar technologies
  • • API usage and response times
  • • Security and fraud prevention data

How We Use Your Information

We use the collected information for the following purposes:

Service Provision

  • • Process AI requests and deliver results
  • • Maintain your account and subscriptions
  • • Provide customer support and technical assistance
  • • Enable collaboration and sharing features

Improvement & Development

  • • Improve AI model accuracy and performance
  • • Develop new features and services
  • • Analyze usage patterns and user feedback
  • • Conduct research and development

Security & Compliance

  • • Detect and prevent fraud and abuse
  • • Ensure platform security and integrity
  • • Comply with legal and regulatory requirements
  • • Protect user safety and content moderation

Communication

  • • Send important service updates and notifications
  • • Provide billing and subscription information
  • • Share product updates and new features (with consent)
  • • Respond to inquiries and support requests

Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

✅ When We May Share

  • • With your explicit consent
  • • With service providers (under strict contracts)
  • • For legal compliance or safety
  • • In business transfers (with notice)
  • • For fraud prevention and security

❌ We Never Share For

  • • Marketing to third parties
  • • Selling to data brokers
  • • Advertising purposes
  • • Unauthorized commercial use
  • • Non-essential data mining

Trusted Service Providers

We work with carefully vetted partners:

  • • Google Cloud Platform (infrastructure and AI processing)
  • • iyzico (payment processing)
  • • Firebase (authentication and database)
  • • Customer support and analytics providers

Data Security and Protection

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

  • • End-to-end encryption in transit and at rest
  • • Multi-factor authentication
  • • Regular security audits and penetration testing
  • • Secure API endpoints with rate limiting

Operational Security

  • • Employee background checks and training
  • • Principle of least privilege access
  • • Incident response and breach notification procedures
  • • Regular backup and disaster recovery testing

Data Retention

We retain your data only as long as necessary to provide our services or as required by law. Images processed by our AI are automatically deleted after 30 days unless saved to your account.

Your Privacy Rights

You have several rights regarding your personal information, including:

Access & Portability

Request a copy of your personal data in a commonly used format.

Correction

Update or correct inaccurate personal information in your account.

Deletion

Request deletion of your personal data, subject to legal requirements.

Restriction

Limit how we process your personal information in certain circumstances.

Objection

Object to processing based on legitimate interests or direct marketing.

Withdrawal

Withdraw consent for processing where consent is the legal basis.

How to Exercise Your Rights

Contact us at privacy@merto.ai to exercise any of these rights. We will respond within 30 days.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze our service usage:

Essential Cookies

Required for basic functionality and security.

Performance Cookies

Help us understand how you use our service.

Preference Cookies

Remember your settings and personalization.

Your Cookie Choices

You can control cookies through your browser settings. Note that disabling essential cookies may affect service functionality.

International Data Transfers

MertO AI operates globally, and your information may be transferred to and processed in countries other than your own:

Safeguards for International Transfers

  • • Standard Contractual Clauses approved by the European Commission
  • • Adequacy decisions for countries with equivalent data protection laws
  • • Additional technical and organizational measures for data protection
  • • Regular assessments of transfer mechanisms and legal frameworks

Contact Us & Policy Changes

Privacy Questions

For privacy-related inquiries:

privacy@merto.ai

Response time: 2-5 business days

Data Protection Officer

For EU/UK data protection matters:

dpo@merto.ai

Available Monday-Friday, 9 AM - 5 PM CET

Policy Updates

We may update this Privacy Policy periodically. We will notify you of material changes via email or through our service. Your continued use of MertO AI after changes take effect constitutes acceptance of the updated policy.