Privacy Policy
Effective Date: 09/07/2026
This Privacy Policy ("Policy") explains how MEZZA collects, uses, and discloses personal information
relating to you, as well as the rights and choices available to you in connection with such information.
This Policy governs your access to and use of the MEZZA mobile application (the "Application"), the
website located at https://www.mezzapay.com (the "Website"), and any other online services operated by
MEZZA that link to this Policy (together with the Website and Application, the "MEZZA Services").
Under applicable data protection laws, a distinction is made between entities that determine the purposes
and means of processing personal data ("controllers" or "businesses") and those that process data on
behalf of others ("processors" or "service providers"). This Policy applies only where we act as a
controller or business. It does not apply to personal information we process on behalf of a client or
partner, which is governed by that party's own privacy policy.
Certain jurisdictions require specific disclosures. If you reside in California, Colorado, Connecticut,
Montana, Nevada, Oregon, Texas, Utah, or Virginia, please refer to the regional disclosures at the end of
this Policy.
If you have any questions or concerns about this Policy or how your data is handled, you may contact us
at: privacy@mezzapay.com
1. Information We Collect
We collect several types of information from and about users of the MEZZA Services, including
information you provide directly, information collected automatically, and data received from third
parties.
1.1 Information You Provide to Us Directly
When you interact with the MEZZA Services, we may ask you to provide information that can be used to
identify or contact you.
● Contact Information: such as your full name, phone number(s), email address, and mailing or
home address.
● Demographic Information: including your age, gender, date of birth (day and month), and
general location.
● Account Information: such as your chosen username and password when creating an account.
● Purchase Information: including details of transactions made through the MEZZA Services
such as credits redeemable across the MEZZA network ("MEZZA Cash"), or (“MEZZA Cash
Back”) redemption activity, transaction timestamps, items ordered, and purchase values. We may
also collect information regarding your preferences and interests, as provided by you or inferred
from your transaction history and interactions.
● Dining Preferences: such as allergy information or dietary restrictions you choose to disclose.
● Referral Information: such as the email address of individuals you refer to the Services or to
whom you send gifted credits.
● User Content: including messages, feedback, or inquiries you send to customer support, as well
as any images or content you upload to your user profile.
● Job Application Information: if you apply for a position with MEZZA, we may collect
information required to evaluate your application, including employment and educational
background, writing samples, transcripts, and references.
1.2 Information Automatically Collected From Your Browser or Device
When you access the MEZZA Services via a mobile device, computer, or other, we may automatically
collect the following categories of data:
● Device Information: such as the type of device, device ID, IP address, browser type, operating
system, and user settings.
● Service Use Information: including browsing behavior, offers viewed or used, pages visited, and
features engaged.
● Location Data: approximate location inferred from your IP address or device configuration.
We and our partners utilize various tracking technologies to collect this data, including cookies (small text
files stored on your device), pixel tags (transparent images used to track web activity), JavaScript, API
calls, and similar technologies. These tools help us enhance user experience, perform analytics, and
support marketing and advertising activities. For more details and opt-out mechanisms, please see the
“Analytics and Advertising” and “Your Rights and Choices” sections below.
1.3 Information from Third Parties and Public Sources
We may also receive information about you from third-party sources, which may include:
● Merchant Partners: such as restaurants or venues in the MEZZA network that may share
information like your dining preferences or purchase activity.
● Reservation Platforms: including booking data from third-party services you use.
● Social Media Platforms: when you engage with our content or account on third-party platforms.
● Vendors: including fraud detection providers, advertising networks, analytics companies, and
other business service providers.
● Public Sources: information obtained from publicly available records or sources.
We are not responsible for the data handling practices of third-party platforms or services and recommend
that you consult their respective privacy policies for additional information.
2. How We Use the Information
We collect and process personal information in accordance with the practices described in this Policy,
including for the following purposes:
2.1 Providing Services to You
We use your personal information to administer and operate the MEZZA Services, including managing
your account and delivering the services you request.
2.2 Communications in Response to Your Actions
We use your information to communicate with you regarding your interactions with the MEZZA
Services. For instance, when you create an account, purchase credits, accept credits shared by another
user, or otherwise engage with our services, we will send you transactional communications confirming
these actions. This includes, for example, emails confirming your registration, credit purchases or
redemptions, and membership activation, as well as follow-up communications to facilitate your use of
our services.
These communications are essential to the functioning of the MEZZA Services and cannot generally be
disabled. We may also respond to any inquiries or support requests you submit. Additionally, we may
send SMS messages to verify your identity as part of our security protocols, such as during account access
on a new device or when you attempt to claim an offer—commonly known as two-factor authentication.
2.3 Communications About Updates and Security
We may send you notifications by email regarding important changes to your account for security or
administrative purposes. For example, we may notify you if there is an attempt to change account
information or if legal agreements or policies have been updated. These communications are considered
service-related and, in most cases, are not subject to opt-out.
2.4 Marketing and Account Communications
Where you have opted in, or as otherwise permitted under applicable law, we may send you
marketing-related messages, including promotional emails, SMS messages, or push notifications through
the Application. Promotional messages may include offers, rewards, restaurant deals, marketing updates,
and other information about MEZZA products and services.
We may also use your phone number to send SMS messages related to your account and use of the
MEZZA Services, including OTPs, payment confirmations, wallet top-ups, wallet activity alerts, security
notifications, account updates, and service-related notices.
Message frequency varies based on your account activity, use of the MEZZA Services, and
communication preferences. Message and data rates may apply.
If you have opted in to receive push notifications, you may disable them by modifying your device
settings or uninstalling the Application. You may opt out of promotional SMS messages at any time by
replying "STOP" to any such message. For assistance, you may reply "HELP" or contact us at
privacy@mezzapay.com. Please note that opting out of promotional SMS messages may not prevent us
from sending service-related or account-related messages where such messages are necessary to provide
the MEZZA Services, protect your account, complete transactions, prevent fraud, comply with law, or
respond to your requests.
We do not share, sell, rent, or otherwise provide your mobile phone number or messaging consent
information to third parties or affiliates for their marketing or promotional purposes. This information will
not be used by third parties or affiliates for their own marketing.
We may disclose mobile phone numbers to service providers acting solely on our behalf where necessary
to deliver messages, verify accounts, process transactions, prevent fraud, comply with applicable law, or
provide customer support. These service providers are contractually restricted from using mobile phone
numbers or messaging consent information for their own marketing or promotional purposes.
2.5 Understanding Trends and Improving the Service
We use information about you to evaluate how users interact with the MEZZA Services, assess the
effectiveness of our marketing and advertising, and identify trends and user behaviors. This allows us to
refine and enhance our services, content, user experience, and promotional strategies.
2.6 Personalizing Your Experience
We may use your data to tailor the content and services of the MEZZA Services to your individual
preferences (including personalized offers, recommendations, or other relevant features).
2.7 Surveys and Feedback Requests
We may occasionally contact you to request feedback or invite you to participate in surveys regarding
your experience with the MEZZA Services, our website, or marketing initiatives. We may send these
communications on our own behalf or on behalf of our marketing partners. Participation in such surveys
is entirely voluntary. You may opt out at any time by clicking the unsubscribe link provided in our
communications or by emailing privacy@mezzapay.com.
2.8 Advertising
We use personal information to support our advertising and promotional activities. This may involve
working with third-party advertising agencies, ad networks, publishers, social media platforms, and
technology vendors. For instance, we may display ads for MEZZA products and services on third-party
websites and social media platforms.
These ads often rely on tracking technologies to deliver relevant content, measure campaign performance,
detect fraud, limit ad frequency, and generate insights. When you visit the MEZZA Services after
viewing a third-party advertisement, tracking tools may help us assess whether you engaged with the ad
and how that engagement relates to your behavior on our platform.
Some advertising we engage in may constitute targeted advertising, which involves displaying
personalized ads based on your activity across non-affiliated websites or applications over time. This may
include embedding third-party tracking technologies in the MEZZA Services or sharing hashed
identifiers with third-party platforms to help deliver or measure personalized campaigns.
For clarity, messaging consent information is not shared with third parties or affiliates for their own
marketing or promotional purposes. Mobile phone numbers are not shared with third parties or affiliates
for their own marketing or promotional purposes.
2.9 Referrals or Gifts
We use information you provide when referring others or sending gifted credit to enable us to deliver such
referrals or credits at your request.
2.10 Merchant Partners
We may use your information to improve the services offered by our Merchant Partners and to provide
you with information related to those partners. For example, we may share your name and email address
with a Merchant Partner to match your information with transaction data and recognize you as a VIP
customer at a participating location.
2.11 Security and Legal Protection
We use your information to safeguard the rights, property, safety, and well-being of MEZZA, our users,
and others. This includes detecting, investigating, and preventing fraudulent, harmful, or unlawful
activity.
2.12 At Your Direction
We use your information in accordance with your instructions, including to process reservations, fulfill
orders, or generate purchase confirmations on your behalf.
2.13 With Your Consent
We may also use your personal information for additional purposes that are not listed here, but only after
providing specific notice to you and obtaining your consent, where legally required.
2.14 Use of De-Identified and Aggregated Data
Notwithstanding the above, we may use information that does not identify you (including data that has
been aggregated or de-identified in accordance with applicable law) for any purpose to the extent
permitted by law.
For information about your rights and choices with respect to how we use your data, please consult the
“Your Rights and Choices” section below.
3. When Do We Disclose Information?
MEZZA may disclose personal information about you to third parties under specific circumstances,
including:
● (a) with your knowledge and consent;
● (b) as described in this Privacy Policy;
● (c) when required by applicable law, regulatory authorities, or legal process;
● (d) as permitted in order to protect the rights, property, safety, confidentiality, or reputation of
MEZZA or its users;
● (e) to enforce our terms and conditions;
● (f) to detect, prevent, or address fraud, cybercrime, or other harmful activity; or
● (g) to pursue available legal remedies or mitigate potential damages.
We may disclose your information to the following categories of recipients:
4. Service Providers
We may share your information with third-party service providers under contractual obligations that
require the protection of your data. These providers assist us with data hosting, storage, processing,
analytics, marketing, customer support, and communication services, among other business operations. To
the extent required by applicable law, service providers are prohibited from using your personal
information for purposes other than providing services to MEZZA, although they may use de-identified
or aggregated information to the extent permitted by law.
Notwithstanding the foregoing, we do not provide mobile phone numbers or messaging consent
information to service providers for their own marketing or promotional purposes. Service providers that
process such information may do so only on MEZZA’s documented instructions and solely to provide
services to MEZZA.
5. Affiliates and Related Entities
We may share certain personal information with our parent company, subsidiaries, affiliates or other
companies under common ownership or control for internal administration, security, fraud prevention,
legal compliance and operation of the MEZZA Services.
We do not share, sell, rent or otherwise provide mobile phone numbers or messaging consent information
to affiliates for their own marketing or promotional purposes.
6. Third-Party Vendors and Other Independent Controllers
Some third parties we work with operate as independent data controllers and determine their own
purposes and means of processing your information. For example, we may disclose data to advertising
networks, social media platforms, analytics providers, and technology vendors involved in delivering or
measuring targeted advertising. Because these entities act independently, we encourage you to consult
their privacy policies and terms of use for more information on how they process your data.
The information disclosed to advertising, analytics or technology providers does not include messaging
consent information. We do not provide mobile phone numbers or messaging consent information to these
third parties for their own marketing or promotional purposes.
7. Merchants and Transaction Processors
When you place an order with a Merchant through MEZZA, we may share the necessary details—such as
your name, order contents, phone number, and address—with the partner or their delivery provider to
facilitate the transaction and address any service-related issues.
Mobile phone numbers shared for these purposes may only be used to fulfil the transaction, provide
service-related support, or address transaction-related issues, and may not be used by the recipient for its
own marketing or promotional purposes.
A current list of our platform integrations is available at:
https://mezza.integrationsplatforms.com
8. Business Transfers (Mergers, Acquisitions, etc.)
As MEZZA continues to evolve, we may reorganize, merge with, or sell portions of our business or
assets. In connection with such transactions—including bankruptcy, acquisition, or
restructuring—customer data may be disclosed or transferred as a business asset, subject to the
commitments made in this Policy at the time of collection.
9. Legal Compliance and Security
We may disclose personal information where necessary to comply with legal obligations, including in
response to subpoenas, court orders, law enforcement requests, or other lawful government demands. We
may also disclose data to protect the rights, safety, or property of MEZZA, its users, or others.
10. At Your Direction
We may disclose personal information to third parties based on your request or explicit instructions, such
as when you authorize a reservation, referral, or credit transfer to another person or platform.
11. Disclosure of De-Identified or Aggregated Data
We may share information that does not identify you personally—including information that has been
aggregated or de-identified in compliance with applicable law—with third parties for lawful business
purposes. Such purposes may include:
● industry research and analysis,
● demographic profiling,
● investor reporting,
● publication in industry white papers or media articles.
These disclosures do not contain data that could reasonably be used to identify you.
12. Your Rights and Choices
Depending on your jurisdiction, you may have additional rights and choices regarding your personal
information. This section outlines the mechanisms available to you to exercise control over your data.
13. Jurisdictional Rights
If you are a resident of California, Colorado, Connecticut, Montana, Nevada, Oregon, Texas, Utah, or
Virginia, please refer to the state-specific disclosures at the end of this Privacy Policy for information
about your additional legal rights under applicable state laws.
14. Account Management
You may access, review, update, correct, or delete certain personal information associated with your
account directly through the MEZZA Services:
● To edit your information, log in to the Application, navigate to the Profile section, and make the
necessary changes in Account Info.
● To remove a saved payment card, go to Wallet Section select the card you wish to remove, and
follow the prompts to unlink it.
● If you delete all personal information in your profile, your account may become deactivated.
● To request deletion of your entire account and associated records, you may contact us at
privacy@mezzapay.com
Please note that we may retain certain information as necessary to comply with legal obligations, resolve
disputes, and enforce our agreements.
15. Tracking Technology Management
The MEZZA Services may place cookies and similar tracking technologies on your browser or device.
You may adjust your browser settings to block cookies or to alert you when a website attempts to place a
cookie on your device. If you use multiple browsers, you must adjust settings individually for each one.
Blocking or deleting cookies may impact your ability to access certain features or functionality of the
MEZZA Services.
Some browsers or browser extensions may support automated preference signals (e.g., Global Privacy
Control) indicating your choices regarding the use of tracking technologies. Where required by law, we
honor such signals.
If you wish to opt out of the sale or sharing of your personal information (as defined under applicable
law) without using a browser preference signal, you may also do so via the “Your Privacy Choices” link
located in the footer of our website.
You may stop all data collection via the mobile application by uninstalling it from your device.
If you use Apple iOS, we will only access your device's Advertising Identifier (IDFA) if you have
granted us permission. You may reset or limit the use of this identifier at any time through your iOS
privacy settings.
16. Third-Party Opt-Out Tools
You may exercise additional choices regarding third-party data collection through the following industry
tools:
● Google Analytics Opt-Out: https://tools.google.com/dlpage/gaoptout
● Google Display Advertising Settings: https://www.google.com/settings/ads/onweb/
● Digital Advertising Alliance (DAA): https://youradchoices.com/control
● Network Advertising Initiative (NAI): https://www.networkadvertising.org/choices/
Please be advised that these tools apply only to the specific browser or device you are using at the time
you opt out. MEZZA is not responsible for the effectiveness or accuracy of third-party opt-out
mechanisms.
17. International Data Transfers
MEZZA is headquartered in the United States, and any information we collect is governed by U.S. law. If
you are located outside the United States, please note that your data may be transferred to, stored in, and
processed in countries whose data protection laws may not offer the same level of protection as those in
your jurisdiction.
By using the MEZZA Services and submitting your information, you acknowledge and consent to the
transfer, processing, and storage of your data in the United States and other jurisdictions.
18. Links to Third-Party Sites and Services
The MEZZA Services may contain links to third-party websites or services, including through APIs or
embedded content. These links are provided for your convenience, and their presence does not imply any
affiliation, sponsorship, or endorsement by MEZZA.
We do not control and are not responsible for the privacy practices of third-party sites or services. We
encourage you to read the privacy policies of those external websites before sharing any personal
information.
19. Children’s Privacy
The MEZZA Services is not directed to individuals under the age of 13. We do not knowingly collect
personal information from children under 13 years of age. If you are under 13, please do not submit any
personal data to us.
If you are a parent or legal guardian and believe that your child under 13 has provided us with personal
information, please contact us at privacy@mezzapay.com, and we will take steps to delete such data
from our systems.
20. Data Security
We implement reasonable administrative, technical, and physical safeguards to help protect your personal
information from unauthorized access, use, disclosure, alteration, or destruction.
Despite these efforts, no method of electronic transmission or storage is entirely secure, and we cannot
guarantee the absolute security of your information.
21. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, legal
obligations, or services. Any modifications will take effect immediately upon being posted on our Website
and/or Application, unless otherwise stated.
If we make material changes to the Policy, we will update the “Effective Date” and may notify you by
email or through in-app messaging, where appropriate. We encourage you to periodically review this
Policy to remain informed of how we protect your data.
Continued use of the MEZZA Services following any updates constitutes your acceptance of the revised
Policy.
22. Processing of personal data in accordance with GDPR
22.1 Purpose of processing of personal data
MEZZA, acting as Data Controller, collects and processes your personal data in accordance with
Regulation (EU) 2016/679 of 27 April 2016 (the “GDPR”) and the French Data Protection Act, “Loi
Informatique et Libertés” as amended.
We process your personal data for the following purposes:
● Administering and operating the MEZZA Services, including account management and service
delivery;
● Communicating with you regarding your transactions, account security, and updates to our
services;
● Sending marketing communications and promotional offers, subject to your choices;
● Understanding trends, improving our services, and assessing the effectiveness of our marketing
and advertising;
● Personalizing your user experience, including offers and recommendations;
● Conducting surveys and requesting feedback;
● Supporting advertising and promotional activities, including targeted advertising;
● Processing referrals, gifted credits, and related transactions;
● Collaborating with our Merchant Partners to improve their services and identify VIP customers;
● Ensuring the security of our services, preventing fraud, and protecting MEZZA’s rights and the
rights of others;
● Carrying out activities at your request and with your consent;
● Using de-identified and aggregated data for research, analytics, and lawful business purposes.
Your personal data will be retained only for as long as necessary to fulfil the purposes for which it was
collected, plus any applicable statutory limitation periods.
You have the following rights: access, rectification, erasure, restriction of processing, objection, and data
portability. You may exercise these rights by contacting us at: privacy@mezzapay.com.
You also have the right to lodge a complaint with the French supervisory authority (CNIL).
22.2 Subprocessing and Data Protection
In connection with the performance of this Agreement, the Processor is authorized to process, on behalf
of MEZZA, only the personal data strictly necessary for the agreed purposes, which may include account
management, payment processing, transaction facilitation, analytics, marketing support, customer
communications, fraud prevention, and service improvement.
The Processor undertakes to:
1. Process personal data solely on documented instructions from MEZZA, including with respect to
transfers to a third country, unless required to do so by law;
2. Ensure the confidentiality of personal data and guarantee that any person authorized to process it
is bound by an appropriate confidentiality obligation;
3. Implement appropriate technical and organizational measures to ensure the security of personal
data;
4. Assist MEZZA in fulfilling its obligations regarding data subjects’ rights and personal data
breach notifications;
5. Upon completion of the services, delete or return all personal data in accordance with MEZZA’s
instructions;
6. Make available to MEZZA all information necessary to demonstrate compliance with the GDPR
and the Loi Informatique et Libertés, and allow for and contribute to audits conducted by MEZZA
or its designated auditor.
The Processor may not engage another subprocessor without MEZZA’s prior written authorisation, and
only on condition that such subprocessor is bound by the same contractual obligations as those set out in
this Agreement.
The list of the Data Processor is the following:
● Google Cloud Platform (CGP)
● Sentry.io
● SendGrid
● Twilio
● Apple
● Google
● InfoBip
23. How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you
may contact us at:
Email: privacy@mezzapay.com
