Privacy notice
Last updated: October 2026
This notice covers shop.meshsat.net: the mailing list, orders once ordering opens, the withdrawal form, the chat, support e-mail and analytics. The MeshSat apps and the Bridge send us nothing; their notice is on meshsat.net/privacy/.
Who is responsible
Elli.Z.G., trading as MeshSat, Floresstraat 17, 2315 HP Leiden, the Netherlands, Chamber of Commerce 99812584. Contact: hello@meshsat.net.
The mailing list
When you ask to be notified about pre-orders we store your e-mail address, your name if you give it, and the time you signed up and the time you confirmed. We send one mail to confirm the address; nothing is stored as confirmed until you click the link in it. Then we write about MeshSat Compact v2 pre-orders and launch news only. The list runs on listmonk, software we host on our own servers in the Netherlands; no third party sees it. Legal basis: your consent. We keep the address until you unsubscribe, which every mail lets you do with one click, or until you ask us at support@. Kickstarter’s own notification list, if you follow the project there, is Kickstarter’s and under Kickstarter’s notice.
The sign-up form is guarded by Cloudflare Turnstile, a check that tells people from bots without a puzzle. For that check Cloudflare, Inc. receives your IP address and signals from your browser, and nothing from the form itself; Cloudflare states that it uses them for the check only, under its privacy policy. Legal basis: our legitimate interest in keeping automated sign-ups off the list.
Orders
When ordering is open and you buy a unit we store your name, delivery and billing address, e-mail address, telephone number for the carrier, what you ordered, what you paid and when, and the serial number of the unit you received. Payment is taken by Stripe, which sees your card or bank details; we never do. Stripe processes that data under its own notice as an independent controller for the payment. The order lives in our order system on hub.meshsat.net, on our own servers. The invoice and any credit note are issued by Invoice Ninja, software we host ourselves. Legal basis: the contract with you and, for invoices, the Dutch tax law that makes us keep them for seven years. The carrier receives your name, address and telephone number to deliver the parcel.
The withdrawal form
The online withdrawal function stores your name, the order or invoice number, your e-mail address, the reason if you give one, and the date and time you sent it. We keep it with the order, for the same seven years, because it is part of the contract’s record.
The chat
The chat on this site is answered by MeshSat’s automated assistant, an AI system we run ourselves, not by a person; a person reads the conversation afterwards and may write to you. We store what you type, what the assistant answers, the e-mail address if you give one, and the time. The service that passes your messages to the assistant keeps none of them and logs only a coded reference to the conversation. The assistant and the conversation are on our own servers in the Netherlands, and so is the technical record of each request the assistant makes to its language model. To write its answers the assistant sends the conversation to a language model that Microsoft runs for us in Azure OpenAI in the EU (EU Data Zone), as our processor.
Each conversation becomes a ticket, with a summary written by the assistant and the transcript, in our support desk, which runs on our own servers in Norway, inside the EEA. The summary and the transcript are also mailed to the mailbox of the person who looks after support, which Proton AG hosts in Switzerland, so that we can follow up, and a short notice of each new chat goes to our internal messaging, which runs on our own server. If you give your e-mail address and ask about an order, the assistant checks the address against our order records and sends the details to it by e-mail; they never appear in the chat. The chat is guarded by Cloudflare Turnstile in the same way as the sign-up form. Legal basis: answering your questions before and after a purchase, and our legitimate interest in support that answers at any hour. We keep the conversation, its transcript and the technical records of the assistant’s requests for 90 days and then delete them; the ticket with the assistant’s summary stays for two years after your last contact with us, unless it became part of an order’s record, which then follows the rules for orders above. Backups of these systems are kept for 14 days. Please do not type passwords, card numbers or health details into the chat.
Support e-mail
Mail to hello@meshsat.net and support@meshsat.net arrives in a mailbox that Proton AG hosts for us in Switzerland. Mail to support@ is also filed as a ticket in our support desk, which runs on our own servers in Norway, inside the EEA, and it is answered by MeshSat’s automated assistant, an AI system that says so in its reply. To write the reply the assistant may look up your orders by your address and sends your message to a language model that Microsoft runs for us in Azure OpenAI in the EU (EU Data Zone), as our processor. We keep mail as long as the matter is open and for the time the law requires afterwards. The assistant’s copy of a conversation is deleted after 90 days, and the ticket with its summary two years after your last contact with us.
Analytics
We use Umami, self-hosted on our own infrastructure. It sets no cookies and builds no profile of you; it counts page views and which buttons were used. Nothing is shared with anyone.
Your rights
You may ask what we hold about you, have it corrected or deleted, object to its use, or receive it in a portable form, by writing to hello@meshsat.net. We answer within a month. Invoices stay for the seven years the tax law requires even when you ask for deletion. You may complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
If this notice changes, the date at the top changes with it, and anyone on the mailing list is told in the next mail.