Privacy Policy

Last updated: February 16, 2026

The Short Version

We collect no personal data. Our tools run locally on your machine. We don't track you. We do not sell your personal information.

1. Data Collection

Mesaplex CLI tools run locally on your computer. We do not collect, store, or transmit any personal data, usage data, or telemetry by default.

• No analytics: We do not track how you use our tools
• No telemetry: No crash reports or usage statistics are sent
• No cookies: Our website uses no cookies or tracking scripts
• No account data: The free tier requires no personal information

2. Data That Stays on Your Machine

All tool data — scan results, API responses, database queries, audit reports — stays on your local machine. We never see it, store it, or have access to it.

3. Pro Tier Data

If you purchase a Pro subscription, we collect only what's necessary:

• Email address: For license delivery and support
• Payment information: Processed securely by LemonSqueezy. We never see your credit card details.
• License key: Stored locally in ~/.config/mpx/

4. Network Requests

Some tools make network requests as part of their core function:

• mpx-scan: HTTP requests to URLs you specify for scanning
• mpx-api: HTTP requests to endpoints you specify for testing
• mpx-db: Connects to databases you specify
• mpx-secrets-audit: Scans local files only; no network requests

These go directly from your machine to the target — they do not pass through Mesaplex servers.

5. License Validation

Pro license validation may make periodic requests containing only your license key (no personal data, no usage data). Results are cached locally for offline use.

6. Website

mesaplex.com is a static site. No third-party analytics, tracking scripts, advertising pixels, or cookies. Basic server logs (IP, URL, timestamp) may be kept for security purposes only.

7. Third Parties

We do not sell, share, or give your data to third parties. The only third party is our payment processor (LemonSqueezy) for Pro subscriptions.

8. GDPR Compliance

For users in the EU/EEA:

• We collect minimal data (email only for Pro users)
• Legal basis: Contract performance (Pro subscription) and legitimate interest (security logs)
• You have the right to access, correct, delete, or port your data
• Data breach notification: We will notify affected users within 72 hours of discovering a breach
• International transfers: Your data is processed in the United States. By using Pro, you consent to this transfer.
• To exercise these rights, email support@mesaplex.com

9. CCPA Compliance

For California residents:

• We do not sell personal information. Period.
• We do not share personal information for cross-context behavioral advertising
• You have the right to know what data we collect, request deletion, and opt out of any future sales (though there won't be any)
• Contact: support@mesaplex.com

10. Children's Privacy

Our tools are developer tools, not intended for children under 13. We do not knowingly collect data from children.

11. Changes

We may update this policy. Material changes will be posted on our website. Since we collect almost no data, changes are unlikely to be significant.

12. Contact

Privacy questions? Email support@mesaplex.com.