This policy states what OpenWebShop LLC, a Florida limited liability company, doing business as Metzia, collects about you, why it collects it, who receives it, and how long it stays. The text below calls that company Metzia or we.
Metzia offers the service only to a user that declares the United States as its country.
What Metzia collects
Your account. Your email address, the country you state at signup, the identifier your sign in provider gives you, and the version of the terms and of this policy that applied when you signed up.
Evidence of your acceptance. A hash of the network address you accepted from, and the browser or client you accepted with. Metzia stores the hash, not the address.
Your agent session. The network address and the client identification of the agent that connects on your behalf.
What you ask. The words of your search, and the input of each tool call your agent makes.
Your referrals. A record of each hand off: the seller, the product, the ranking that produced it, and the time. Metzia records that you followed the link. Metzia does not receive what you then bought or what you paid, except where a seller or an affiliate network reports a commission for it.
Your agreement to renewal terms. Before a hand off to a subscription, Metzia shows the price, the renewal terms, and where to cancel. When you agree, Metzia records the exact text you saw, the time, the product, and a keyed hash of your network address. Metzia then records whether the seller reports the subscription as active or cancelled. This record is the proof of what Metzia showed you.
On each hand off from the catalog, Metzia records a keyed hash of your network address. It never records the address itself. Metzia scores each referral for self dealing and abuse, and can exclude a referral from commission.
Product use. Events that record which pages and which tools are used.
Support. The messages you send to support, and what Metzia replies.
The waitlist. The address you type into the waitlist form on the home page.
Why Metzia collects it
To run your account and let you sign in. To answer your agent and rank an answer. To record a referral so a seller pays the commission that funds the service. To answer your support request. To keep the service available and to stop abuse. To measure whether the product works.
Who receives it
Metzia uses these processors, and each one receives only what its job needs.
| Processor | What it receives |
|---|---|
| Descope | Your buyer sign in, and the email address it holds for you |
| WorkOS | Seller and staff sign in. Not buyer data |
| Neon | The database that holds every record above |
| Vercel | Hosting, request logs, and stored files |
| Upstash | Rate limit counters, keyed on a hash |
| Sentry | Error reports, with personal data removed before they are sent |
| Resend | Transactional email that Metzia sends you |
The subprocessor list names each processor, the region that hosts its data, and each change to the list. The data processing terms state how Metzia and a seller handle personal data.
An affiliate network receives the identifier on a tracked link when you follow it, so the seller can pay the commission for that referral.
A seller never receives your email address. Metzia enforces that in code. What you give a seller on the site of the seller is between you and that seller, under the privacy policy of that seller.
Metzia does not sell or share your personal information, as the California Consumer Privacy Act defines those words. A tracked link carries a random identifier, not your name or email address.
How long Metzia keeps it
Metzia aims to delete or de-identify each record after the period below.
| Record | Kept for |
|---|---|
| Referral clicks | 90 days by default |
| Your agreement to renewal terms | 3 years after the last activity on the referral. The hash of your network address goes after 90 days. If you close your account, Metzia keeps the record without your identity |
| Referral clicks that Metzia excluded from commission | 12 months |
| The hash of your network address on a referral click | 7 days |
| Single use tokens | 90 days |
| Your account and your email address | Until you close the account, then 30 days |
| The words of your search, and tool call input | 90 days. Metzia then removes the words. A search record without the words stays for ranking and attribution audits, and Metzia deletes it after 12 months |
| Your agent sessions | 90 days after the session ends |
| Acceptance records | The life of your account, plus seven years. An acceptance is the evidence of a contract |
| Product use events | 12 months |
| Support messages | Two years after the support case closes |
| Waitlist records | 12 months. The side and the country you pick count from the day you join. Your email address, company, note, and the page and link that brought you count from the day you last join or update. After you unsubscribe, Metzia sends you no email and removes the record at the end of the period. You can ask Metzia to remove it sooner |
| Backups of the database | Up to 30 days. If Metzia restores a backup, it deletes again the data of every deletion that completed after the backup |
Metzia can keep a record longer when the law requires it, while a dispute or a legal claim about that record is open, or while a commission record names it.
Your rights
Metzia gives these rights to every user, in every state.
- The right to know what personal information Metzia holds about you.
- The right to receive a copy of it, in a common format that a machine can read.
- The right to correct it.
- The right to delete it.
- The right to be free of retaliation for asking.
If you live in California, the California Consumer Privacy Act as amended gives you these rights by law. If the law of your state gives you a further right, Metzia honors that right as that law requires.
A deletion has limits. Metzia keeps a record that the law requires, an acceptance record, and a record that a seller needs to pay a commission already earned.
When Metzia deletes your account, it deletes your email address, your sign in account, the access you gave to agents, your spending settings, your sign up interest from our website, and your open sign in and reset links. Some records stay under a code in place of your account. The code links to no email address and no name. The records that stay are these:
- your searches without the words you searched for, your referral clicks, and the outcome events of those clicks;
- your agent sessions, without your network address, browser details, agent name, or agent access;
- your tool calls without their input, your product use events without the browser code, and the agent apps you installed;
- how you first found Metzia, and the trust score of your account;
- the rate limit events of your account;
- your support cases, with your contact address, your message, and every note on the case replaced by a placeholder. This includes a case that names one of your addresses in its message;
- your acceptance records, with the document version and the time you accepted. Metzia removes the network address code and the browser details from them, because the version and the time are the evidence of the contract;
- the record of your deletion request and your earlier closed requests, with their kind, dates, and status, and without your email address.
If you have no account, Metzia deletes your sign up interest and replaces your support cases in the same way, then completes your request.
These records stay so that the counts a seller reads stay correct, and so that the evidence of a contract and of your request stays. Each record then follows the period in the table above.
How to make a request
Use the privacy request form to ask for access, a copy, or a deletion. To correct a record, write to legal@metzia.ai from the email address on your account.
Metzia verifies who you are before it acts, so that nobody else can read or delete your record. The form sends a link to the email address you type. The link works for 24 hours, and Metzia acts on the request only after you open it and confirm. Metzia acts only on the record that belongs to that email address.
A person you authorize can make a request for you. Metzia then asks you to confirm the request from the email address on your account.
A person at Metzia fulfills each request. Your account has no button that exports or deletes your data.
Metzia answers within 45 days after it receives the request. When Metzia needs more time, it tells you why within those 45 days, and it answers within 90 days in total.
When Metzia refuses a request, it tells you the reason. Reply to that answer to appeal. Metzia answers the appeal within 45 days.
Children
Metzia is not for anyone under 18. Metzia does not knowingly collect personal information from a child.
Changes to this policy
Metzia publishes a new version of this policy as a new document with a new version date. The older version stays readable.
How to reach Metzia
Use the privacy request form for a request about your data. Write to legal@metzia.ai with any other question about this policy.
Write by post to OpenWebShop LLC, 121 Royalty Circle, Sanford, FL 32771, United States.