Privacy Policy
Last updated 5 August 2026
1. Who we are
Meight Technologies SA (“Meight”, “we”, “us”) operates Meight Simple, a service for creating transport documents (such as DeCA and eCMR consignment notes), sharing them with the parties involved, and collecting signatures. This policy applies to the web application at simple.meight.com and to the Meight Simple mobile apps. For the personal data described here, Meight acts as the data controller.
2. What data we collect
- Account data. When you create an account we store your email address, display name, and a chosen handle. You may optionally save a reusable signature image to your profile.
- Document content. The information you enter into a transport document — which may include the names, addresses, and contact details of senders, carriers, and consignees; descriptions of goods; vehicle and registration details; and dates and locations of transport.
- Signature data. When you or an invited party signs a document, we store the drawn signature image, the signatory’s name, and — to preserve the document’s evidentiary integrity — the IP address and timestamp recorded at the moment of signing.
- Payment data. Paid plans are processed by Stripe. We do not receive or store your full card number; we retain only the Stripe customer and subscription identifiers needed to manage your billing.
- Support communications. Messages you send us through in-app chat or email, so we can respond and provide support.
- Technical data. Standard server logs and device information generated when you use the service, used for security, diagnostics, and reliability.
3. How we use your data
- To create, share, and sign transport documents, and to make signed documents verifiable.
- To operate your account and let invited parties access the documents shared with them.
- To process payments and manage subscriptions.
- To provide customer support and respond to your requests.
- To keep the service secure, prevent abuse, and comply with our legal obligations.
4. Legal bases (GDPR)
We process personal data to perform our contract with you (providing the service), to comply with legal obligations (for example, retaining transport and accounting records), on the basis of our legitimate interests (securing the service and preventing fraud), and, where required, with your consent. You may withdraw consent at any time.
5. Who we share data with
We share document content with the parties you invite to view or sign a document — that is the purpose of the service. Beyond that, we do not sell your personal data. We use a small number of trusted service providers who process data on our behalf under data-processing agreements:
- Supabase — application hosting, authentication, and database storage.
- Stripe — payment and subscription processing.
- Intercom — in-app support messaging.
- Resend — delivery of transactional emails (such as invitations and notifications).
6. International transfers
Some of our service providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, to protect your data.
7. How long we keep data
We keep account data for as long as your account is active. Transport documents and their signatures may be retained after that to preserve their legal and evidentiary value and to meet record-keeping obligations. When data is no longer needed and no legal obligation requires us to keep it, we delete or anonymise it.
8. Your rights
Subject to applicable law, you have the right to access, correct, delete, or export your personal data, and to restrict or object to certain processing. To exercise these rights, contact us at support@meight.com; to close your account, see deleting your account, which sets out what we remove and what we have to keep. You also have the right to lodge a complaint with your data protection supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).
9. Security
We protect your data with access controls, row-level database security, and encryption of data in transit. No system is completely secure, but we work to safeguard your information and to limit access to it.
10. Children
Meight Simple is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.
11. Changes to this policy
We may update this policy from time to time. When we do, we will revise the “last updated” date below and, where appropriate, notify you. Continued use of the service after an update means you accept the revised policy.
12. Contact us
For any question about this policy or your personal data, contact Meight Technologies SA at support@meight.com.