Driven Success LLC provides the SearchMesh website, dashboard, API, and MCP service. This policy explains how we process personal data when you use them.
Information we collect
We collect the verified name, email address, and provider account identifier supplied by Google or Apple when you sign in; account, session, API-key, provider-configuration, request-history, usage, and support information you provide or generate; and technical information such as timestamps, browser and device information, and security events. For completed searches, we may retain the sanitized validated query and options, normalized provider input, provider outcome metadata, and normalized successful results for 30 days. We do not retain raw upstream bodies, provider-specific transport requests, authorization data, headers, credentials, or exception text in these diagnostic snapshots. We do not store the full value of SearchMesh API keys. Provider credentials are encrypted at rest and are not displayed again after storage.
How we use information
We use information to authenticate users, operate and secure the service, execute requested searches, maintain accounts and usage records, investigate abuse or outages, comply with law, and communicate about the service. Authorized platform administrators may access sanitized request and result diagnostics across accounts for support, security, and debugging. We do not sell personal information or use Customer Content to train models.
Sharing and international transfers
We share information only with service providers needed to operate SearchMesh, including Cloudflare for Worker, database, and network services; Google or Apple for sign-in; OpenAI for automatic provider selection; the search providers called for a request; and, only with consent, the analytics provider described in our Cookie Policy. When at least one locally ready, entitled provider candidate exists, automatic search sends the user's validated query text verbatim and a fixed set of generic search-capability questions to OpenAI so SearchMesh can choose provider categories. SearchMesh does not append provider identities, credentials, secrets, or account metadata to this request. Because the query is forwarded verbatim, it may itself contain identifiers or sensitive data supplied by the user. To avoid sending a query to OpenAI, use search_providers, which bypasses automatic selection and sends the query only to explicitly listed providers, or to every provider backed by an available account credential when the list is omitted. Search providers receive the request data necessary to perform the search and process it under their own terms and privacy notices. We may disclose information where required by law or to protect people, SearchMesh, or the public. These providers may process data outside your country.
Retention and security
Sanitized search request and successful-result diagnostics expire after 30 days. Other data is retained only for as long as needed to provide the service, meet legal obligations, resolve disputes, and protect the service. Deleting an account permanently removes its account-scoped sessions, API keys, provider settings and credentials, request history, and usage data from active systems. An account containing a platform administrator must first have that role removed by another platform administrator. Backups may persist until their normal rotation. We use technical and organizational safeguards appropriate to the service, but no system is completely secure.
Your choices and rights
You can update your profile, revoke API keys and MCP connections, remove provider credentials, and delete your account from the dashboard. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to complain to a data-protection authority. Contact us to exercise those rights. You may also manage non-essential cookies as described in the Cookie Policy.
Contact
For privacy questions or requests, contact privacy@openclaw.direct. See our Legal Notice for the operating entity.