PRIVACY
POLICY

MeetMyCXO (“MeetMyCXO”, “we”, “us”) operates meetmycxo.com and the MeetMyCXO executive suite, including the sibling applications for the CMO, CFO, CRO, COO, and CTO products. MeetMyCXO is the account, sign-in, and billing hub for that suite, and is the data controller for the personal information described in this policy.

Questions about this policy or about your personal information can be sent to info@meetmycxo.com.

• Account information. Your email address, the authentication method you used, your organization and membership role, and the sign-in metadata our authentication provider records (such as sign-in timestamps).
• Billing and subscription data. Your plan tier, billing interval, selected products, trial and billing period dates, cancellation state, and the identifiers Stripe assigns to your customer and subscription records. We do not receive or store full card numbers — see Payments below.
• Content you provide. Company facts, metrics, questions you ask in the Boardroom, approvals and decisions you record, and anything else you type into or connect to the product.
• Usage and device data. Pages viewed, approximate location derived from IP address, browser and device characteristics, and referral source, collected through analytics and advertising technologies described below.

• To provide, operate, and secure the product and your account.
• To run the features you request, including generating your daily brief and Boardroom responses.
• To take payment, manage subscriptions and trials, and enforce plan entitlements.
• To send transactional and service email relating to your account and your recorded decisions.
• To understand how the site and product are used, and to measure and improve marketing.
• To meet legal, accounting, and tax obligations, and to investigate abuse or security incidents.

Where we rely on legal bases under the UK GDPR and EU GDPR, these are: performance of our contract with you (providing the service and billing), our legitimate interests (securing and improving the product), your consent (analytics and advertising cookies, where consent is required), and compliance with legal obligations.

We use cookies and similar browser storage for two purposes. Strictly necessary cookies keep you signed in and maintain your session — the product cannot function without them. Analytics and advertising cookies are set by Google and are described in the next two sections; these are not required for the product to work and can be controlled through the opt-out links below or your browser settings.

Our pages also load web fonts from Google Fonts. Your browser contacts Google’s servers to fetch those fonts, which means your IP address is visible to Google as part of that request.

We use Google Analytics 4 to understand how visitors find and use meetmycxo.com. Google Analytics sets cookies and collects usage and device data, including a truncated or approximated IP address, pages viewed, and interaction events. We use this in aggregate to improve the site; we do not use it to build advertising profiles of named individuals.

You can opt out of Google Analytics across all sites using Google’s browser add-on at tools.google.com/dlpage/gaoptout.

We participate in Google AdSense. Google and its partners may use cookies and similar identifiers to serve and measure ads, including ads based on your prior visits to this and other websites. Google’s use of advertising cookies is governed by Google’s own privacy and advertising policies.

You can control or opt out of personalized advertising here:

• https://adssettings.google.com — Google Ads Settings, to turn off ad personalization.
• https://optout.aboutads.info — the Digital Advertising Alliance industry opt-out.

The daily brief and the Boardroom are powered by Claude models from Anthropic. When you use these features, the content of the request is sent to Anthropic’s API for processing. That content includes the company facts and health signals stored in your workspace, any external benchmark context we attach, and — in the Boardroom — the question you typed.

Anthropic is the only AI model provider this application sends data to. If AI is not configured for your environment, these features return an honest empty state rather than generated content.

Please do not paste sensitive personal data into AI features — including government identifiers, financial account or card numbers, health information, credentials, or confidential information about third parties that you are not permitted to share. Treat anything you type into the Boardroom as content that leaves our systems for processing.

Authentication is handled by Supabase Auth. You can sign in to MeetMyCXO in these ways:

• Google — OAuth sign-in with your Google account.
• Microsoft — OAuth sign-in with your Microsoft (Entra ID) account.
• Email magic link — a one-time sign-in link sent to your email address.

When you sign in with Google or Microsoft, we receive your email address and basic profile identifiers from that provider so we can create and match your account. We do not receive your password from them, and MeetMyCXO does not operate its own password-based login.

Subscription payments are processed by Stripe. Checkout runs on Stripe’s own hosted Checkout pages and subscription changes run through Stripe’s hosted Billing Portal, so your card details are entered directly into Stripe’s systems.

Card numbers, CVC codes, and full payment credentials never pass through MeetMyCXO’s servers and we do not store them. What we store is limited to the Stripe customer and subscription identifiers, your plan tier and billing interval, your selected products, trial and billing period dates, and whether the subscription is set to cancel at period end.

Stripe acts as an independent controller of the payment data it collects and processes it under its own privacy policy. Billing disputes, refunds, and payment method changes are handled through Stripe’s billing portal, which you can reach from your account.

We share personal information only with the providers below, each of which processes it to deliver a specific part of the service. We do not sell personal information and we do not share it for cross-context behavioral advertising beyond the Google advertising technologies described above.

We may also disclose information where required by law, to enforce our terms, or in connection with a merger, acquisition, or sale of assets — in which case we will tell you before your information becomes subject to a different policy.

MeetMyCXO is operated from, and its infrastructure is hosted in, the United States. Our providers listed above process data in the United States and may process it in other countries where they or their sub-processors operate. If you access the service from the United Kingdom, the European Economic Area, or another region with data transfer restrictions, your information will be transferred to the United States.

Where those transfers require a safeguard, we rely on the Standard Contractual Clauses or the UK International Data Transfer Addendum incorporated into our agreements with these providers, or on their certification under an applicable adequacy framework.

We keep account, organization, and workspace content for as long as your account is active. If you close your account, we delete or anonymize that content within a reasonable period, except where we need to retain it longer.

Billing and subscription records are retained for as long as required for tax, accounting, and audit purposes. Security, audit, and approval logs are retained so that recorded decisions remain inspectable. Analytics and advertising data are retained according to the retention settings of the Google products described above.

If you are in the United Kingdom or the European Economic Area, you have the right to access your personal information, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner’s Office.

If you are a California resident, you have the right to know what personal information we collect and how it is used and disclosed, the right to request deletion, the right to request correction, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined by the CCPA/CPRA, other than through the Google advertising cookies described in the Advertising section, which you can disable using the opt-out links provided there.

To exercise any of these rights, email info@meetmycxo.com. We may need to verify your identity before acting on a request, and you may use an authorized agent where the law allows it.

MeetMyCXO is a business product intended for use by adults in a professional capacity. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

We may update this policy as the product and the providers it relies on change. When we do, we will revise the “last updated” date at the top of this page. If a change materially affects how we handle your personal information, we will give you notice through the product or by email before it takes effect.

For privacy questions, data requests, or complaints, email info@meetmycxo.com.

You can also read about how the product is built to handle high-trust work on our security page.