Privacy Policy
Last updated: June 6, 2026
1. Introduction
Meged Solutions ("the Platform," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Collekto platform (the "Service").
Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
The data covered by this Policy falls into two roles. Meged Solutions is the data controller for your account and the data we determine the use of, such as registration details, usage and log data, and marketing data on our public pages. For the documents and personal data that a business customer (a "collector") collects from its own clients through the Service, that business is the controller and Meged Solutions acts only as a holder and processor on its behalf, processing that data solely to provide the Service and retaining it as the collector directs. If a business invited you to upload documents, that business, and not Meged Solutions, is the controller of those documents. See Section 9 for how to exercise your rights regarding them.
2. Information We Collect
2.1 Personal Information
We collect personal information that you voluntarily provide, including:
- Account Information: Name, email address, and organization details when you register
- Profile Information: Contact information and preferences
- Documents: Files and documents you upload to the Service
- Communications: Messages and notes you send through the Service
2.2 Automatically Collected Information
When you access the Service, we automatically collect certain information, including:
- Device Information: Browser type, operating system, and device identifiers
- Usage Data: Pages visited, features used, and actions taken
- Log Data: IP address, access times, and referring URLs
3. Third-Party Services
We use trusted third-party services to operate the Service. Each service has its own privacy practices and policies:
3.1 Clerk (Authentication)
We use Clerk for user authentication and organization management. Clerk processes your email address, name, and authentication credentials. For more information, see Clerk's Privacy Policy.
3.2 Vercel (Hosting and Storage)
Our Service is hosted on Vercel, and we use Vercel Blob for file storage, in the European Union (Frankfurt region). Vercel is a US-based provider and may process data under appropriate safeguards. For more information, see Vercel's Privacy Policy.
3.3 Neon (Database)
We use Neon (PostgreSQL) for database services. Your data is stored securely in Neon's infrastructure. For more information, see Neon's Privacy Policy.
3.4 Meta (Advertising and Measurement)
On our public marketing pages and within our demo/trial experience (which is part of our marketing funnel), and solely after you accept marketing cookies, we use the Meta Pixel and the Meta Conversions API to measure advertising performance and build remarketing audiences. We share hashed identifiers (such as your email address and phone number), your IP address, browser user agent, and the Meta cookies _fbp and _fbc. The identifiers are hashed before the data leaves our servers. The Meta Pixel runs only on our public marketing pages. From the demo we may additionally send a server-side conversion event (via the Conversions API) when you signal interest in a paid plan. We never use Meta inside a real client's authenticated document workspace. For more information, see Meta's Privacy Policy.
3.5 Resend (Email)
We use Resend to send transactional emails, such as client invitations, reminders, and submission links. Resend processes recipient names, email addresses, and the content of those messages to deliver them. Resend is a US-based provider and may process this data under appropriate safeguards. For more information, see Resend's Privacy Policy.
4. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the Service
- Process and manage your account
- Facilitate document collection and organization
- Send administrative communications and updates
- Respond to your inquiries and support requests
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations
5. Data Sharing and Disclosure
We may share your information in the following circumstances:
- Within Your Organization: Information is shared among members of your organization as determined by organization administrators
- Service Providers: With third-party vendors who perform services on our behalf (as described in Section 3)
- Legal Requirements: When required by law, regulation, or legal process
- Protection of Rights: To protect our rights, privacy, safety, or property
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Advertising Partners: With Meta, only after you consent to marketing cookies, from our public marketing pages and our demo/trial funnel, to measure advertising performance and create remarketing audiences (as described in Section 3.4). We never share a real client's document-workspace activity with Meta
We do not sell your personal information to third parties.
6. Data Security
We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (HTTPS/TLS)
- Secure authentication mechanisms
- Access controls and role-based permissions
- Regular security assessments
However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.
8. International Data Transfers
Your data is hosted and stored in the European Union (the Frankfurt region). Our service providers, such as Vercel, Neon, and Clerk, are US-based companies and may access or process personal data from outside your country of residence under appropriate safeguards. These countries may have different data protection laws than your country.
By using the Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place for such transfers.
9. Your Rights
Depending on your location, you may have the following rights:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Objection: Object to certain processing of your information
- Restriction: Request restriction of processing
If your personal data was collected by a business that uses Collekto (for example, documents you uploaded at its request), that business is the controller of that data. Please direct your access, correction, and deletion requests to that business, and Meged Solutions will assist it as the processor. For data held in Israel, these rights derive from the Protection of Privacy Law, 5741-1981 (the right to access under Section 13 and to correct under Section 14).
To exercise these rights, please contact us at contact@megedit.com.
10. Children's Privacy
The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: contact@megedit.com.
13. Governing Law
This Privacy Policy is governed by the laws of the State of Israel. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Ramla, Israel.