Privacy policy

Who we are

Mezzanine is software that service businesses use to run their work: clients, jobs, estimates, invoices, scheduling and messages. Questions about this policy or your data go to support@getmezzanine.com.

What we collect

• Account details for the business and its team: names, email addresses, phone numbers and sign-in records such as IP address and browser.
• Business records the team enters: clients and their contact details and addresses, jobs, estimates, invoices, photos, notes and messages.
• Payments: card payments are handled by Stripe. We keep the amount, status and the last digits Stripe returns, never a full card number.
• Text messages sent and received through Mezzanine, with their time and status.
• Error and usage logs needed to keep the service running and secure.

How we use it

Only to provide and secure Mezzanine: showing a business its own records, sending the estimates, invoices, reminders and messages it asks us to, taking payments, and answering support requests. No ads, and we never sell, rent or trade personal information.

Text messages (SMS)

A business using Mezzanine can text its clients about their service: appointment confirmations and reminders, arrival updates, estimates, invoices, payment receipts and replies to their questions. You get these texts only after you give the business your mobile number and agree to receive them, for example on a booking or intake form, in person, or by texting the business first.

• Message frequency varies with your service. Message and data rates may apply.
• To stop texts at any time, reply STOP. You will get one message confirming it.
• For help, reply HELP, or contact the business or us at the address below.
• Carriers are not liable for delayed or undelivered messages.

Mobile numbers and SMS opt-in data are never shared with or sold to third parties or affiliates for marketing or promotional purposes. They are shared only with the service providers that deliver the messages, such as Twilio.

Who can see it

• The business and the team members it gives access to. Each business’s records are kept apart from every other’s.
• Service providers that run Mezzanine for us, each given only what its job needs: Railway (hosting and storage), Stripe (payments), Twilio (texts and calls), our email provider and Google (sign-in and maps).
• Anyone a court or law requires us to tell, and only what is required.

Keeping and deleting it

We keep data while the business’s account is open. A business can ask us to delete its account and records; a client of a business can ask that business, or us, to delete their details. Email support@getmezzanine.com and we will act within 30 days. Backups expire on their own schedule.

Security

All traffic is encrypted (HTTPS), and access to each business’s records is checked on every request.

Children

Mezzanine is not for anyone under 16, and we do not knowingly collect their data.

Changes

When this policy changes, the date at the top changes. If a change matters to how your data is used, we will tell account owners before it takes effect.