Where your data is stored

Your contacts, notes and account are stored in a database in Singapore. Meishio's servers are in Singapore too, and every connection is encrypted.

Card photos are straightened, resized and saved without camera or location data. The original upload is not kept, and the saved card is shown only to you.

What your team sees

When you share someone into a team workspace, teammates see their name, title and company. A work email and office phone numbers are included only if you switch each one on. The team also sees that you know them, and a relationship summary drawn from how you know them. Notes, numbers saved as mobile or personal, places, photos and card images stay in your own account.

A team has three roles: admin, editor and viewer. Admins manage who is in the team and can export the team list. A team record the team has edited or used can stay after you unshare, leave, or delete your account.

The privacy information states exactly which fields are copied.

Who can see it

Your personal address book is scoped to your account. Other users cannot browse it. If you choose to share a workspace copy, a public card or an export link, that copy follows its separate sharing controls.

Administrators can manage accounts, credit balances and access, and the service operator has operational access to stored data to run and repair the service.

Which AI services read your data, and why

• Reading a card. The card image goes to OpenAI (or Google's Gemini API, if OpenAI is unavailable) to read the text. The read details may go to TypeSafe to check their accuracy, or to OpenAI (or Gemini) when TypeSafe does not answer.
• Meishio Search. To look for job changes, a contact's name, company, title, city and work-email domain go to Serper for Google web results and to Exa for public search results or page excerpts. Discovery also uses optional clues and a LinkedIn profile link you supply; full email addresses and personal email domains are not sent. The TypeSafe API, a third-party AI model provider, or OpenAI (Gemini if OpenAI is unavailable) compares the results with the contact;for contacts imported from Google, TypeSafe only.
• Company news. Company news is found with Exa by company name only — never your contacts' names or details. An article's public text is sent to OpenAI (or Gemini) to write a short summary; only the summary and the link are kept.
• Company names from email domains. To suggest company names, Meishio looks up the public website of a work email's domain (for example kitagawa-motors.co.in) and keeps the company name it finds. Personal email domains like gmail.com are never looked up. Only the domain is sent and stored, never a name or an email address.
• Sorting an import. Each entry's organisation, title and work email domain, never its name, phone number or full email address, may go to the TypeSafe API, a third-party AI model provider, or OpenAI (Gemini if OpenAI is unavailable), to tell business contacts from personal ones. A free-mail domain such as gmail.com, or a domain that contains the person's name, is not sent. An entry left with none of those three is not sent: it waits in Maybe for you to decide. Entries from Google Contacts go to TypeSafe only, and Meishio's own rules sort the rest. Google user data sent this way is not used to train a generalized model.
• Tidying an import. Only when you choose “Suggest tidy-ups”, each entry's name (with phone numbers and email addresses taken out), organisation, title, email domain, and phone and email labels go to OpenAI (Gemini if OpenAI is unavailable) to suggest cleaner names, companies and labels. Phone numbers, full email addresses, postal addresses and notes are not sent, and nothing changes until you apply a suggestion. Entries from Google Contacts are never sent for tidy-ups.
• Follow-up drafts. The event name and each person's company, title and draft language (English or Japanese) go to OpenAI (or Gemini, if OpenAI is unavailable) to write a short follow-up. The person's name, email address, phone number and your notes are not sent; Meishio adds the name to the draft afterwards. People imported from Google get a draft Meishio writes itself.
• Contacts from Google. Contacts imported from Google, including people you add from “People you've emailed”, are not sent to OpenAI, Google's Gemini API or any other AI writing service.
• Trying it without an account. On the try page, your photo goes to OpenAI (or Gemini) to be read and is not stored.

Public web results in Meishio Search

When Meishio Search looks up public web pages about a person or company, it may reuse results found in the last 30 days for other Meishio users looking up the same public page. Only public web results are shared — never your contacts, notes, phone numbers or emails.

Never sold

Meishio does not sell your data or your contacts to anyone.

Google Contacts, on your terms

Signing in with Google does not connect your contacts or give access to Gmail messages. When you choose to connect Contacts, Google asks for read and write permission upfront. You choose which people to save in Meishio. Sending edits back starts off for a new primary connection; you can enable automatic sync in Connections. Existing connections keep your earlier choice. Additional accounts refresh when you choose to read them, and receive only updates you review for that destination.

Google refresh credentials are stored encrypted using AES-256-GCM. Additional-account disconnect removes its stored credentials without deleting your Google contacts. Turning off the primary connection attempts to remove only the Google copies Meishio created, then clears its stored credentials; a failed cleanup is shown so you can retry. Meishio never deletes contacts that were already in Google. Approved fixes to those contacts can be undone.

Export and delete

You can export your contacts as a CSV or vCard file and delete any contact at any time. A CSV can use the column names of Outlook, HubSpot, Zoho CRM, Salesforce, Pipedrive or kintone, and leaves out your private notes unless you tick “Include my notes”. A subscribable vCard link is off until you make one; anyone holding it can download those contacts (never notes or photos), and you can turn it off at any time. In Settings, “Download my data” gives you everything in one ZIP, and “Delete my account” deletes your whole account; your Google contacts stay in Google. What is kept afterwards is in the privacy information.