Privacy

These processing activities rest on the performance of the service you request, on your consent for precise location and notifications — which you may withdraw at any time in your phone settings — and on our legitimate interest in keeping the platform safe. Tax reporting on sellers and keeping receipts rest on legal obligations.

Your email address is required to open an account, and your delivery address to receive a parcel; everything else is optional. Listings are shown to you in a personalised order (see the terms of use, "How content is ranked") — you can always sort them by date or price —, but no decision with legal effects on you is taken by purely automated processing: every content removal, suspension or dispute ruling is decided by a person.

We use your data for no advertising purpose and sell it to no one. No third-party advertising tracker is embedded.

meeshto sets no advertising or audience-measurement cookies, and therefore shows no consent banner: the law only requires one for that kind of tracker. The app and the website do keep on your device what they strictly need in order to work:

• your login session, so you are not asked for your password again;
• your preferences: language, light or dark theme, country, chosen city or location, video sound;
• a copy of what you often look at (listings, follows, favourites, exchange rates), so the app displays faster, and your listing drafts;
• a random identifier for your device, used to alert you to a sign-in from an unknown device.

What is tied to your account is erased from the device when you sign out. Three third-party services may store their own technical items, only when you use them: Cloudflare Turnstile (the anti-bot check), Stripe (fraud prevention, at payment time) and Apple Maps (the map). You can erase this data at any time from your browser settings or by uninstalling the app.

We rely on the following providers, strictly to operate the service:

• Supabase — hosting of the database, authentication and files.
• Railway — hosting of the website, which sees your IP address in its technical logs.
• Expo — delivery of push notifications (device token only).
• Apple (notification service, APNs) — on iPhone, a ringing voice call goes straight through Apple to ring the phone's call screen, even when the app is closed: Apple receives the device's call token, the caller's name and a call identifier. The voice itself never goes through Apple.
• Cloudflare (Turnstile) — the check that tells a person from a machine, when you sign up, sign in or ask for a new password. It exists because nothing previously stopped anyone from creating accounts in bulk. Neither your email address nor your password reaches it: the form stays with Meeshto, and Cloudflare only receives your IP address and technical signals from your browser or phone, long enough to issue a token valid for five minutes. That token says nothing about you — only that the check was carried out.
• Cloudflare (R2) — storage of the videos you publish in a listing or a story, kept in the European Union. A video has no public address there: every playback goes through a signed address that Meeshto only issues to people allowed to see it, and which expires after a day. Cloudflare sees the IP address of whoever uploads or watches a video. A deleted video, an expired story or an erased account take their files with them.
• Brevo — sending Meeshto's emails: those about your account (sign-up confirmation, forgotten password, change of address, security notices, account deletion code), those about your purchases and sales (order placed, payment, cancellation, shipping, dispute, payout), those about activities you take part in (cancellation, an organiser who has not confirmed they will attend) and the digests you chose to receive. Brevo receives your email address and the content of the message — depending on the case, a link or a code, the title of a listing or an activity, an amount, another member's display name. Optional emails can be turned off in Settings → Notifications, or with the link at the bottom of each one.
• Have I Been Pwned — checking, when a password is created or changed, that it does not appear in a known breach. Your password never leaves your device: only the first five characters of its hash are sent, and the service replies with a list of hashes that your device compares itself. The service therefore cannot know what your password was, nor whether it was in its list. If the service does not answer, sign up carries on without it.
• Google — only if you choose to sign in with Google.
• Google (Gemini) — the AI assistant, only if you use it and after your consent, asked the first time — in Explore, or in Pio when you ask her to search —, or given together with Pio's, from her consent card (see below). When you describe what you are looking for, the text you type goes to Gemini along with the list of Meeshto categories — and, if you search with a photo, a reduced copy of the photo you pick, in which Gemini spots the items; when you then move the frame, only the circled area is sent again. When you create a listing with the assistant, the text you type and the photos you pick go, with the same list — or, on a photo where you circled the item, only the circled area. Before sending, Meeshto masks in that text, in their common forms, email addresses, IBANs, card numbers and phone numbers written with their country code (“+33 6 12 34 56 78”) or in a recognisable national form (“06 12 34 56 78”, “(555) 123-4567”): Gemini sees that there was one, never which. A number that looks like an ordinary number (in Spain “612 345 678”, in India “98765 43210”) is not recognised, nor is one written in words or split by commas. Apart from that, a search goes as you type it: do not put your contact details in it. Your name, account, email address and location are never sent. If you dictate instead of typing, your device or browser turns your voice into text (Apple or Google, depending on which): Meeshto only receives that text, never your voice. Meeshto uses Gemini's paid service: Google does not use what it receives to improve its products, and keeps it only for a limited period, to detect abuse. This data may be processed outside the European Union. Meeshto does not keep your text on its servers: only the number of requests of the day, their outcome and their cost. Your recent searches stay on your device, as you typed them, so you can reopen them; you can delete them one by one, and they are all erased when you sign out or withdraw your consent.
• Google (Gemini) — reading published listings. Every public listing is read by Gemini when it goes online, then when its text, price, category or photos change, with no action on your part: its title, description, category, price and up to three of its photos — what anyone can already see online —, never your name, account, email address or location. It serves two purposes: finding the listing by what its photos show (“denim jacket” finds a “blouson”) and spotting a listing that looks like a scam (payment outside Meeshto, contact to leave the app, a forbidden item). A flagged listing is neither removed nor hidden: a person reviews it and decides. Meeshto keeps only a few keywords, the verdict and its reasons, the date, the model and the cost of the call; a flagged listing keeps its report, like a member's. Google applies the same rules as for the assistant.
• Google (Gemini), for Pio — Meeshto's assistant, only if you accept it. Consent is asked at the first question that needs it, by a card offering “Allow all”, “Choose” or “Not now”: no access is opened in advance. Given with “Allow all”, this consent also covers the assistant above, and the card says so; each can then be withdrawn separately. “Choose” opens the “Pio and AI” menu, in the settings, where each access is opened or closed in one tap and where the whole consent can be withdrawn at any time. A closed access is closed on our servers too: Pio can no longer read anything it covers. When you chat with Pio, what goes to Gemini is your question, the text of the last ten exchanges of your conversation with her, the address of the screen you are on, and what she reads to answer you — with your own permissions only, never anything about another member that you could not already see. Without any particular access: the public listings she searches or opens (title, price, city, description, details, never an exact address), the prices of comparable listings and Meeshto's help pages. With “My listings and their figures”: your listings (title, description, price, status, number of photos, views, favourites and messages received) and the published reviews you received. With “My orders, sales and money”: your orders and offers (listing title, your role, their step and amount), your wallet balance and your activity sign-ups. With “My conversations”: the list of your conversations (the other member's display name, the listing, the date of the last message) and, only when your question calls for it, the text of the last thirty messages of a conversation you are a member of — never one of a group you left, nor a conversation you archived or deleted. With “My favourites, searches and notifications”: your favourites, your saved searches and the notifications waiting for your reply. Before sending, Meeshto masks in all this text, in their usual forms, email addresses, IBANs, phone or card numbers, codes, passwords written in clear and links that do not lead to Meeshto: Gemini sees that there was one, never which. An unusual form (a number written in words, for instance) may escape the mask. Pio never reads your passwords, your login or verification codes, your card number, your IBAN, your saved addresses or other members' contact details: none of her tools has access to them. A message you send can therefore be read by Pio, at the request of the person who receives it — to sum it up, find a request in it, prepare their reply or check that it doesn't look like a scam: its text goes, masked as above, with your display name when Pio reads the conversation (without it when she only checks that message); the rest goes as you wrote it, including any names or addresses it contains. Gemini writes an answer, shown with the label “Written by AI”, and chooses the screens to open for you (a listing, an order, a conversation). Before showing it, Meeshto checks it, and discards it if it contains a price, a date, a time frame, a percentage or a number that is neither in what Pio read nor in what you wrote, a link, an email address, or details of how Meeshto works internally. A reply Pio suggests sending goes into the conversation's input field: it is only sent if you send it yourself. Pio never pushes you to buy, and nothing she reads is used to profile you or for advertising. When Pio is not chatting — consent given before 11 October 2026, the day's exchanges used up —, only the question you ask her goes, with the titles of her guides and the list of what she can look up for you (your sales, your parcels to send…) — a list written by Meeshto, the same for everyone, containing none of your data —, and, for each of your ongoing orders, the listing title, your role (buying or selling) and its step; and when a search finds nothing, its words, to suggest nearby ideas. The cards she then shows (how much you sold, the conversations waiting for your reply…) are read by your device, with your own permissions only, and do not go to Google. Only when you tap “Pio can check this message”, the text of that single received message goes, masked the same way, without the other person's name. Without consent, Pio understands questions on the device, sending nothing. Finally, only when you ask Pio to review your listing (“Pio, review my listing”, on your own listing): its title, its description — email addresses, IBANs and phone numbers masked — and its category, with at most six of its photos, as copies of 400 KB at most, without their metadata (no location, date or device). Neither its price nor your name is sent. Pio turns this into suggestions — another of your photos as the cover, a title, questions — that only change the listing if you apply them. Meeshto uses the paid tier of the Gemini API: Google acts as a processor, does not use what it receives to train its models or improve its products, and keeps it only for a limited time, to detect abuse. Meeshto uses this API's global endpoint: this data may be processed outside the European Union, under the safeguards described below. Meeshto keeps neither your questions, nor the answers, nor what Pio read: only a log (date, outcome, duration, cost, the kind of readings made — “your orders”, “a conversation”), with no text and no conversation identifier. Your recent questions stay on your device so you can find them again: “Clear my recent questions”, in “Pio and AI”, clears them, and they are cleared when you log out. You can ask for access to this log, for its erasure, or object to this processing by withdrawing your consent (see “Your rights”).
• Google (Gemini), to translate a conversation — in a one-to-one conversation only, never in a group, when you turn on “Translate this conversation”, under the same consent as Pio. What then goes to Gemini, with the language to translate into: the text of the messages the other person sends you (the last twenty when you turn it on, then each new one); the text you are writing, when you stop typing, to show you what they will read; and your messages once sent. Before sending, Meeshto looks for email addresses, IBANs, phone or card numbers, codes and links, replaces them with markers, then puts them back in the translation: those it recognises never reach Gemini. Your name, the other person's name, your account and the rest of the conversation are never sent. If the other person turns translation on, the messages you send them therefore go to Gemini: only their text, masked as above; the rest goes as you wrote it, including any names or addresses it contains. Meeshto keeps a message's translation next to it, readable by the two of you only: the writer reads, before sending, what the other person will read, and the other person must read exactly that, without the translation being redone and paid for every time the conversation opens. The original never changes and is one tap away. Same guarantees as for the assistant: paid service, data not used to improve Google's products, possible processing outside the European Union.
• Stripe — payments, refunds and payouts. A purchase is paid on Stripe's payment page, by card (Apple Pay and Google Pay included): your card number is entered with Stripe and never passes through Meeshto. Meeshto sends Stripe the title and price of the items, the protection fee, the shipping cost and the order number. The amount is first held on your card (a card authorisation), then captured when the seller confirms the item is available; otherwise the hold is released and nothing is charged — only an in-stock item from a Pro shop is charged straight away. The money captured stays with Stripe until the handover, then Stripe pays it out to the seller. On your first purchase, Meeshto opens a customer record at Stripe linked to your account, where Stripe keeps the email address entered on its page. If you tick “Save” there, Stripe keeps your card on that record and offers it on later purchases; Meeshto only knows the record's ID, never the card. You remove it from the same page, and deleting your account erases the record within the hour. If you link an account to be paid for your sales, Meeshto sends Stripe your email address, your country, your legal form (individual or company) and the link to your public page; Stripe collects and verifies your identity and bank details itself: they never pass through Meeshto, which only keeps the account identifier and its status (verified or not), and displays, without storing them, the last four digits of the bank account Stripe reports. One exception: if the law requires your sales to be reported (see "The tax authorities"), Meeshto reads from Stripe and keeps the name, date of birth and address Stripe verified, in order to report them. If you provide a SIRET number, Meeshto also reads, without storing it, the name Stripe verified, to compare it with the one in the business register.
• The French government business register (Recherche d'entreprises API, INSEE data) — only if you are a sole trader and provide your SIRET number to get the Pro badge. Only the number is sent; Meeshto checks that the business is active, that it is a sole proprietorship and that the registered name is yours, then keeps the SIRET number and the result of that check, which is repeated every thirty days.
• Sendcloud — parcel delivery of purchases. When a purchase is paid with home or pickup-point delivery, Meeshto sends Sendcloud, which creates the label and hands it to the carrier: the name, postal address, phone number and e-mail of the seller (the sender) and the buyer (the recipient), the chosen pickup point, the parcel weight and the purchase value. Nothing is sent for an in-person handover. To calculate shipping costs and find pickup points before a purchase, only postcodes are sent.
• Unsplash — illustration image search, on the listings where it is offered. Your search query is sent to them; the image you pick is never copied to our servers and keeps loading from theirs, which therefore see the IP address of everyone who views the listing.
• App Store (Apple) and Google Play (Google) — when you open a shared listing or shop on the website and tap “App Store” or “Google Play”, you leave Meeshto for Apple's or Google's store, which sees your IP address. For Google Play, the address also carries the path of the listing you were viewing, so that the app opens it after installation; nothing else — neither your account nor your identity. Our server also asks Apple and Google whether the app is published, without sending anything about you. Meeshto counts, per day, how many shared links are opened and how many taps lead to the stores: a number, with nothing kept about the person.
• Hetzner — live broadcasting. When you start a live, your picture and sound go to a server we rent from Hetzner, in Germany, which relays them to whoever is watching. That server therefore sees the broadcast content, as well as the IP address of the broadcaster and of the viewers. Nothing is recorded: once a live ends it cannot be replayed, and no copy of it remains. Meeshto itself keeps only the playback address and the state of the live.
  The same server serves the base map of “Pros near me”: when you open the map, your device asks it for the tiles of the area on screen. It therefore sees your IP address and the area you are looking at, like any map server — but it is ours, and no third party receives these requests. Nothing is kept.
  It also relays the voice of calls made in Meeshto, after an accepted call request (TURN server). Both phones must go through it: neither sees the other's IP address, and neither your phone number nor your address is exchanged. The voice is end-to-end encrypted; the server copies it without being able to listen, and nothing is recorded. Meeshto only keeps, in the conversation, who called whom, when and for how long. If you choose to show your phone number, only signed-in members who tap “Show number” can read it; it is never written on your listings.
• OpenStreetMap, Overture Maps and SIRENE — the shops on the map — the base map and the shops that are not on Meeshto yet (shown in grey) come from OpenStreetMap, © its contributors, under the ODbL licence, completed by those from the Overture Maps Foundation (CDLA Permissive 2.0 licence, including Foursquare Open Source Places under the Apache 2.0 licence and AllThePlaces under CC0) that OpenStreetMap does not know — only places open to the public, never a tradesperson or an at-home service. INSEE's SIRENE register (Licence Ouverte 2.0) is used only to remove a shop that has closed from the map; it never adds one. This is public data, copied to our servers every week: your device never queries these services to display it. A shopkeeper who does not wish to appear writes to us at the contact address below: we keep the email address they give us while we check the request and reply to them, and a removed shop does not come back. If a removal request reaches us through Meeshto's automated interface, we also keep a fingerprint of the IP address it came from, computed with a secret key — never the address itself — and erased after thirty days. A Pro can also claim their shop to turn it into their storefront. A member who reports a mistake about a shop (closed, wrong place, wrong name, wrong hours) sends us their choice and, if they write one, their sentence, linked to their account while we check it, then for thirty days after the decision, before being erased: nothing is corrected without that check. For a shop that comes from OpenStreetMap, we then leave a public note there — the reason and, if we find it useful, the sentence, never their name or account — that OpenStreetMap volunteers can read. So do not write anything personal in it. To find the pros around you, your position is sent to Meeshto for the calculation and is stored nowhere. A Pro's address is only shown on the map if they declare a place open to the public; a tradesperson who travels to customers only shows a service area, never their address.
• Carriers — La Poste / Colissimo (laposte.fr), Chronopost, Mondial Relay, UPS, DHL, DPD, GLS and, for a parcel sent from another country, bpost, PostNL, Correos, InPost and Austrian Post. For a parcel sent through Meeshto, the carrier receives, via Sendcloud, the information printed on the label: names, addresses and phone numbers of the sender and the recipient. When a seller marks an order as shipped, Meeshto also offers a tracking link to the carrier's website; you only go there if you tap it, and the carrier then sees the tracking number and your IP address.
• OpenStreetMap / Nominatim — address search. It is queried by our server, never by your device: Nominatim receives the text you typed and nothing else — not your IP address, not your account, not the listing you are writing.
• Géoplateforme (IGN) and Photon (komoot) — the addresses suggested while you type an address, a town or a place: IGN's Géoplateforme for French addresses, Photon, built on OpenStreetMap, for other countries. They are queried by our server, never by your device: they receive the text you typed and, to list nearby addresses first, a position rounded to the kilometre when your device knows one — not your IP address, not your account, not what you are writing.
• Apple Plans — the neighbourhood map shown on a listing. Its image is loaded by your device, so Apple receives your IP address and the area displayed. It receives neither your name, nor your account, nor the listing you are looking at, and the position sent is rounded to the kilometre — the map shows a neighbourhood, never an address. If you open the map, Apple then serves a map you can pan: it receives the areas you browse while you look at it, still without knowing who you are or what you were viewing.
• OpenRouteService — the route drawn on a journey listing (car sharing, delivery, removals). Our server queries it, never your device: OpenRouteService receives two positions rounded to the kilometre — the ones the listing already publishes — and nothing else. Neither your IP address, nor your account, nor the listing concerned. The calculation happens once, when the listing is published; looking at it afterwards does not contact them.
• Navigation apps — Maps (maps.apple.com), Google Maps and Waze. When you tap an address, Meeshto offers to open it in one of them. You are only taken there if you choose: the app you pick then sees the address and your IP address. Meeshto sends them nothing of its own, and tells them neither who you are nor which listing the address came from.
• BigDataCloud and ipapi.co — converting your location or IP address into a city and country.
• open.er-api.com — daily exchange rates, with no personal data.
• Sentry — technical crash reporting. When the app fails, the error message, the line of code involved and the last technical steps that led to it are sent to Sentry so we can fix it. Email addresses and session tokens are stripped before sending. Neither your identity, your IP address, your messages nor your photos are transmitted, and your screen is never recorded.
• Expo (EAS Observe) — speed measurement of the mobile app: how long it takes to open and to display each screen, with the device model, the system and app versions, the country and a randomly generated installation identifier. Only the kind of screen is sent (“a conversation”, never which one). If the app crashes, the technical trace of the failure is sent too, with email addresses and session tokens stripped. Neither your identity, your messages nor your photos are transmitted.

Data hosting is provided by Supabase in the eu-west-3 (Paris, France) region: your account data, listings and media therefore remain within the European Union. A transfer outside the European Union may however take place with the other providers listed above; it is governed by the European Commission's standard contractual clauses.

The tax authorities — the law (article 1649 ter A of the French tax code, EU directive known as "DAC7") requires meeshto to report its sellers to them each year — from the first sale for accommodation, a service or a vehicle rental; for the sale of goods, from 30 sales or more than €2,000 in the year: identity, address, date of birth, tax number (if none was ever given to you, city of birth and the reason you give), bank account when we know it, and amounts received. Your tax number is requested in the app; your identity is the one Stripe verified. This information is kept for ten years, even after your account is deleted, as the law requires, and is used for nothing else. The French administration may pass it on to that of your country of residence within the European Union.

Finally, we may disclose data to judicial or administrative authorities that lawfully request it.

• Your account and its content: for as long as the account exists.
• The date of your last visit and the count of unanswered welcome-back notifications: replaced at each visit, erased with the account. The dates of an absence: erased as soon as the card has been shown, or twenty-four hours after you come back.
• The AI assistant: Meeshto keeps neither your text nor your photos. The log of its answers (outcome, duration, cost, your 👍 / 👎 if any) is erased after 90 days.
• Reading listings: the keywords and the verdict live with the listing and are erased with it; the cost log, which counts each author's readings, is erased after 90 days.
• Pio: Meeshto keeps neither your questions, nor her answers, nor what she reads to answer you (your listings, your orders, the messages of a conversation), nor the copies of the photos she reviews. Her log (date, outcome, duration, cost, the kind of readings made — no text, no conversation identifier) is erased after 90 days. Your recent questions stay on your device until you clear them or log out.
• A message's translation: as long as the message, and erased with it, as soon as it is removed or deleted. The text you write to see its translation before sending is not kept.
• Problems you report, screenshot included: erased after 90 days.
• After account deletion: the related data is erased immediately from the live database, including your photos and videos. Residual copies may remain for at most 30 days in the host's encrypted backups, until those are replaced by rotation; they are never consulted or reused.
• Reports you have submitted are kept anonymously, so that moderation can continue to handle the content concerned.
• Stories expire automatically 24 hours after being published.
• Orders paid in the app and their numbered receipts (title, amounts, display name of the buyer and the seller at the time of purchase) are accounting records: they are kept, including after an account is deleted, as article L123-22 of the French Commercial Code requires them to be kept for ten years. Your card details, for their part, are never held by Meeshto: they stay with Stripe.
• The delivery address and phone number copied onto an order are erased six months after it ends (delivery, cancellation or refund), unless a dispute or a return is still open. The receipt itself is kept.

You may access your data, correct it, object to its processing, and request its portability or the restriction of its processing.

Deletion is done directly in the application: Settings → Delete my account. A confirmation code is sent to your email address and must be typed back — this is how we make sure the request is really yours. You can also delete your account online, without the app, at meeshto.com/delete-account. Your profile, listings, photos and videos, stories and files are erased; conversations, orders, receipts and disputes that also involve another member are kept under the name “Deleted user” — a receipt, however, keeps the display name it bore at the time of purchase, like any accounting record. Deletion is immediate and permanent.

For other requests, write to contact@meeshto.com. We reply within one month at the latest. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).

These rights apply to all users, wherever they live. If you live in the United Kingdom, you may also contact the ICO; in California, you have the rights provided by California law (CCPA) — we do not sell or share your data for advertising, and will not treat you differently for exercising these rights. Elsewhere, your country's data protection authority remains competent.

Access to data is controlled row by row at the database level: a member can only read what their rights allow. Photos and videos are stored in a private space and served through temporary links — none is reachable at a permanent public URL. Passwords are never stored in plain text.

meeshto is not intended for children under 15. If you find that an account has been created by a child under 15, report it to contact@meeshto.com and we will delete it.

In the event of a significant change, we will inform you within the application before it takes effect. The date at the top of this page shows the latest revision.

The data controller is the company Meeshto, French simplified joint-stock company (SAS) with a sole shareholder, whose registered office is at 4B avenue de Verdun, 92320 Châtillon, France. For any question about your data, write to contact@meeshto.com: it is the fastest way to get an answer. Further details about the company appear in the publisher information.