Privacy Policy

Effective 12 October 2026

MEL-USA, INC. ("MEL-USA", "we", "us") builds and operates data integrations for the label, packaging and folding-carton industries. We serve customers in the Americas, in Europe and the United Kingdom, and in the Middle East, and this policy is written to meet our obligations in each of those regions. It explains what personal information we handle, why, and the rights you have over it.

Who we are

MEL-USA, INC.
1266 West Paces Ferry Rd #434
Atlanta, GA 30327, United States
+1‑404‑379‑6900
privacy@melusa.com

For information collected through this website, MEL-USA is the data controller. For the business records our integration services move on a customer's instructions, we act as a service provider (processor) on that customer's behalf — see Data we process for our customers below.

Information we collect on this website

Information we handle as part of our services

Our integration agents move business records — such as invoices, customer and vendor records, and payment references — between a customer's management system and their accounting platform (for example Xero, QuickBooks, Odoo, Sage, SAP or Microsoft Dynamics 365 Business Central), on that customer's instructions. Those records belong to our customer; we process them only to provide the contracted service, and any request about them should be made to the business you deal with, which we will support in answering it.

To operate the service we also hold limited contact details for the people at each customer who manage their integrations: name, business email address, and their notification preference. We use these to send operational status emails — a daily summary of what their integration did. These emails are consent-based: a contact whose notifications are switched off is never emailed, and any recipient can opt out at any time by replying to a status email or contacting us.

Why we process it, and on what basis

Sharing

We do not sell personal information, and we do not share it for advertising. Information is shared only with: the platforms your business connects through us (at your business's direction); our hosting provider (InterServer.net, data centre in Secaucus, New Jersey, United States), our e-mail service provider (Microsoft 365) and our remote-support provider (Splashtop), each of whom acts under contract and is bound to protect the data to the standard of this policy; and public authorities where the law requires it, including to meet national security or law enforcement requirements.

International transfers

We are headquartered in the United States and serve customers in North and Central America, the European Union, the United Kingdom, and the Middle East (including Oman and the United Arab Emirates). Where personal information moves across borders — for example from the EEA, the UK, or a Gulf state to the United States — we protect it as follows. For personal data from the European Economic Area, the United Kingdom and Switzerland we rely on the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework (see Data Privacy Framework below), and, where the Framework does not apply, on the European Commission's Standard Contractual Clauses and their UK equivalent. For other regions we rely on appropriate contractual safeguards, including the transfer mechanisms recognised under the UAE and Oman personal data protection laws.

Data Privacy Framework

MEL-USA complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. MEL-USA has submitted its self-certification to the U.S. Department of Commerce that it adheres to the EU-U.S. DPF Principles with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and to the Swiss-U.S. DPF Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms of this policy and the EU-U.S. DPF Principles or the Swiss-U.S. DPF Principles, the Principles govern. To learn more about the Data Privacy Framework program, visit dataprivacyframework.gov.

The personal data we receive in reliance on the DPF is the business data described above: customer and supplier contact details and the transaction records that carry them, processed on our customers' instructions, plus the operational status records and e-mails that let each customer monitor its integration. We do not process human resources data in reliance on the DPF. Should we ever intend to disclose personal data to a third party other than a service provider acting on our behalf, or to use it for a purpose materially different from the one for which it was collected, we will offer the individuals concerned the choice to opt out first.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, MEL-USA commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact MEL-USA at privacy@melusa.com. We will respond within 45 days.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, MEL-USA commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. Recourse to the DPAs, the ICO and the FDPIC is free of charge to you. If your complaint is not resolved through these channels, under certain conditions you may invoke binding arbitration under Annex I of the DPF Principles.

MEL-USA remains responsible under the DPF Principles if a service provider it engages processes personal data in a manner inconsistent with the Principles, unless MEL-USA proves that it is not responsible for the event giving rise to the damage. The Federal Trade Commission has jurisdiction over MEL-USA's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

Retention

Enquiries are kept while we are dealing with them and for a reasonable period afterwards. Operational records of what our integrations did are kept while the customer relationship lasts, because they are the audit trail of the service itself. Records we no longer need are deleted or anonymised.

Security

Credentials and connection secrets are encrypted at rest; administrative access requires two-factor authentication; access to personal information is limited to authorised staff. No system is perfectly secure, but security decisions in our platform are made deny-first.

Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct it, and — subject to our legal obligations — ask us to delete it. Depending on your region you have additional rights:

To exercise any of these, contact us using the details above or the contact form. We will verify the request and respond within the time your local law requires. Where we process records on a customer's behalf, we may refer the request to that customer and help them answer it.

Children

Our services and this website are for businesses and are not directed at children. We do not knowingly collect information about anyone under 18.

Changes

When this policy changes, the new version appears here with a new effective date. A change that affects how we handle information already collected will be communicated to the affected customers directly.

Contact

MEL-USA, INC., 1266 West Paces Ferry Rd #434, Atlanta, GA 30327, United States · +1‑404‑379‑6900 · privacy@melusa.com · melusa.com/contact