Privacy Policy

Meelu is run by Shubham Randive as a sole proprietor, based in India. “Meelu”, “we” and “us” in this policy mean Shubham Randive. Meelu is responsible for the personal data described here. You can reach us at [email protected].

This policy covers the Meelu desktop app, the Meelu account and servers behind it, and the website at meelu.tech.

Your account. Your email address, your name, and your password, which is stored only as a one-way hash. We keep sign-in sessions so you stay signed in.

Websites you add. The domain, name and target markets you enter. The app crawls the public pages of your website and we store what it finds: page addresses, titles, headings, text, links, technical issues, and short classifications of each page.

Google data you connect. Search Console and Google Analytics reports for your website, and your Google Business Profile locations, their performance numbers and reviews, if you choose to connect them. Section 3 covers this in detail.

Work you create in the app. Content drafts, notes, saved reports, analytics chats, plans and the suggestions Meelu makes for your website, and whether you approved or rejected them.

Keyword data. Keywords and competitor domains you track, and their search volumes and rankings.

Billing. Your credit balance, a history of credit charges, and a record of each payment (amount, status and the payment provider’s reference). Card details are entered with our payment provider and never reach us.

Usage records. For each AI request we log the model, the number of tokens, the cost and whether it succeeded, so we can charge credits correctly. We do not keep the text of your conversations in these logs.

On your device. The app keeps its settings, your Google connection tokens and, if you add one, your own Anthropic API key on your computer, encrypted with your operating system’s secure storage (Keychain on macOS). The app checks meelu.tech for new versions; that check sends no personal data.

On this website. We use Google Analytics to count visits and see which pages are read. When you download the app we ask for your email address and country; you can skip this. If you give them, we store them with the build you chose so we can tell you about fixes and new versions. Most free tools keep nothing you submit: they run in your browser, or fetch a page once and discard it. The SEO audit is the exception. It saves each report, which holds only what it read from the public pages of the site you audited, under a private link so the report can be shared. Anyone with the link can open it, and search engines are asked not to index it.

You can connect Google Search Console, Google Analytics and Google Business Profile to Meelu. Connecting is optional, and you choose which Google account and which property to use. Meelu asks for read-only access to Search Console and Analytics. For Business Profile, Google offers only one scope, which also allows changes; Meelu uses it to read and never changes your profile, posts or replies:

• Search Console (webmasters.readonly): search performance for your website — queries, pages, clicks, impressions, click-through rate, average position, country and device — and the index status of your pages.
• Google Analytics 4 (analytics.readonly): aggregated reports for your website — sessions, users, page views, engagement, key events and revenue, broken down by date, page, landing page, traffic channel and source, country, device and browser. These are totals, not records of individual visitors.
• Google Business Profile (business.manage): your business locations and their profile details (name, categories, address or service area, phone, website, hours, services, attributes), the changes Google made to them, daily totals of profile views, calls, direction requests and website clicks, the monthly search terms people used to find you, and your reviews with your replies.

Why we use it. To show you how your website performs in search and in traffic, to let the Meelu assistant answer your questions about that data, and to ground its suggestions (for example, which page to improve for which query) in your real numbers.

Where it is stored. The Google sign-in token (a refresh token) stays on your computer, encrypted in your operating system’s secure storage, and is never sent to our servers. The app uses it to fetch your reports from Google and sends the report data to your Meelu account on our servers, where it is stored with your website so the dashboard and the assistant can read it.

AI processing. When you ask the Meelu assistant about your search, traffic or Business Profile data, the relevant parts of that data are sent to the AI model that answers you. By default this goes through OpenRouter to the model provider you selected in the app (such as Anthropic, OpenAI or DeepSeek). If you added your own Anthropic API key, it goes directly to Anthropic under your own account. The data is sent only to answer your request. To sort your reviews by topic and tone, the text of each review is sent to a model through OpenRouter on our servers.

We do not use Google user data to develop, improve or train AI or machine learning models, and we do not allow the AI providers we send it to to use it for training.

What we never do. We do not sell Google user data. We do not use it for advertising, retargeting or interest-based ads. We do not transfer it to anyone except as needed to provide the features you use (see section 6), to comply with the law, or as part of a sale of the business with notice to you. No person at Meelu reads it unless you ask us to (for example, for support), it is needed for security, or the law requires it.

Revoking access and deleting the data. You can disconnect Search Console, Google Analytics or Google Business Profile at any time on the Connections screen in the app, which deletes the token from your computer. You can also revoke Meelu’s access at myaccount.google.com/permissions. Deleting a website in the app deletes all Google data stored for it from our servers. To delete everything, ask us to delete your account (section 8).

Meelu’s use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Meelu’s assistant and its page analysis use large language models. What you type, and the data the assistant needs to answer (your pages, keywords, reports), is sent to the model you selected through OpenRouter, or directly to Anthropic if you use your own key. Page classification on our servers uses a model through OpenRouter and sends only the public text of your website’s pages. We do not use your data to train models.

• to run the features you use and show you your data;
• to charge credits and process payments;
• to send account emails, such as sign-up verification codes;
• to keep the service secure and prevent abuse;
• to comply with the law.

We do not sell your personal data, we do not use it for advertising, and we do not send marketing email.

We share data only with the services Meelu runs on, and only what each one needs:

• Hostinger — the servers that host our database and the Meelu service.
• Cloudflare — network protection for our domains, and storage for database backups and app downloads.
• OpenRouter and the AI model provider you choose — to answer your requests (section 4).
• Anthropic — only if you add your own Anthropic API key.
• DataForSEO — the keywords and domains you ask about, to fetch search volumes and rankings.
• Parallel — the searches the agent makes for you.
• Composio — only if you connect your own email, CMS, CRM, docs, community or issue tracker account to a website. Composio holds that account’s sign-in and runs the actions you approve on it: reading mail, contacts, documents or posts, saving drafts or records, posting a reply you approved, and filing an issue you approved. Disconnecting the account or deleting the website removes it from Composio.
• Dodo Payments — to process credit purchases.
• Resend — to deliver account emails.
• Google Analytics — visit statistics for this website only, not for the app.

We may also disclose data if the law requires it, or to protect the rights and safety of Meelu and its users.

• Account data is kept until you ask us to delete your account.
• Free SEO audit reports are kept until you ask us to delete one. Send the report link to the contact address below.
• Website data, including Google data, is kept until you delete the website. A website that stays paused for lack of credits for 30 days is deleted with all its data.
• Payment and credit records are kept as long as tax and accounting law requires.
• Database backups are kept for a limited time and then overwritten.

You can:

• see and edit your website data in the app;
• disconnect Google services and delete websites in the app at any time;
• ask for a copy of your data, a correction, or deletion of your account and all its data, by emailing [email protected] from your account email. We act on requests within 30 days.

Depending on where you live, you may have further rights under laws such as the GDPR or India’s Digital Personal Data Protection Act. Email us and we will help.

Data travels over HTTPS. Passwords are hashed. Each account’s data is separated in the database so one account cannot read another’s. Tokens and keys on your computer are encrypted by your operating system. No system is perfectly secure; if you find a problem, please tell us at [email protected].

Meelu is a business tool for people aged 18 and over. We do not knowingly collect data from children.

When this policy changes, we update the date at the top of this page. If a change affects how we use your data in a significant way, we will tell you by email or in the app before it takes effect.

Shubham Randive, Meelu — [email protected]