Privacy Policy

Effective 26 August 2026

MEL-USA, INC. ("MEL-USA", "we", "us") builds and operates data integrations for the label, packaging and folding-carton industries. We serve customers in the Americas, in Europe and the United Kingdom, and in the Middle East, and this policy is written to meet our obligations in each of those regions. It explains what personal information we handle, why, and the rights you have over it.

Who we are

MEL-USA, INC.
1266 West Paces Ferry Rd #434
Atlanta, GA 30327, United States
+1‑404‑890‑0150

For information collected through this website, MEL-USA is the data controller. For the business records our integration services move on a customer's instructions, we act as a service provider (processor) on that customer's behalf — see Data we process for our customers below.

Information we collect on this website

• Enquiries. When you use our contact form we collect the name, email address, company and message you provide. We use them to respond to you and to assess whether we can help — nothing else. Enquiries are visible only to authorised MEL-USA administrators.
• Technical information. Our servers record IP addresses and request information for security, abuse prevention and rate limiting. We do not use this to profile visitors.
• Cookies. This site uses only the cookies it needs to function — session, sign-in and request-security cookies. We run no advertising trackers and no third-party analytics.

Information we handle as part of our services

Our integration agents move business records — such as invoices, customer and vendor records, and payment references — between a customer's management system and their accounting platform (for example Xero, QuickBooks, Odoo, Sage, SAP or Microsoft Dynamics 365 Business Central), on that customer's instructions. Those records belong to our customer; we process them only to provide the contracted service, and any request about them should be made to the business you deal with, which we will support in answering it.

To operate the service we also hold limited contact details for the people at each customer who manage their integrations: name, business email address, and their notification preference. We use these to send operational status emails — a daily summary of what their integration did. These emails are consent-based: a contact whose notifications are switched off is never emailed, and any recipient can opt out at any time by replying to a status email or contacting us.

Why we process it, and on what basis

• Performing our contract with your business — running the integrations and telling the right people how they are running.
• Legitimate interests — responding to enquiries, securing our systems, and keeping honest operational records of what our software did.
• Consent — for status notifications, which you can withdraw at any time.
• Legal obligations — where retention or disclosure is required by law.

Sharing

We do not sell personal information, and we do not share it for advertising. Information is shared only with: the platforms your business connects through us (at your business's direction); our hosting and email-delivery providers, who act under contract; and authorities where the law requires it.

International transfers

We are headquartered in the United States and serve customers in North and Central America, the European Union, the United Kingdom, and the Middle East (including Oman and the United Arab Emirates). Where personal information moves across borders — for example from the EEA, the UK, or a Gulf state to the United States — we protect it with appropriate contractual safeguards, such as the European Commission's Standard Contractual Clauses and their UK equivalent, and the transfer mechanisms recognised under the UAE and Oman personal data protection laws.

Retention

Enquiries are kept while we are dealing with them and for a reasonable period afterwards. Operational records of what our integrations did are kept while the customer relationship lasts, because they are the audit trail of the service itself. Records we no longer need are deleted or anonymised.

Security

Credentials and connection secrets are encrypted at rest; administrative access requires two-factor authentication; access to personal information is limited to authorised staff. No system is perfectly secure, but security decisions in our platform are made deny-first.

Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct it, and — subject to our legal obligations — ask us to delete it. Depending on your region you have additional rights:

• European Union / EEA and United Kingdom (GDPR and UK GDPR). Rights of access, rectification, erasure, restriction, portability and objection; the right to withdraw consent at any time; and the right to complain to your supervisory authority (in the UK, the Information Commissioner's Office).
• Middle East. For the United Arab Emirates, the rights provided by Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data; for Oman, the rights provided by the Personal Data Protection Law (Royal Decree 6/2022), including access, correction and erasure, and complaint to the competent authority.
• United States. Rights under applicable state privacy laws (such as the California Consumer Privacy Act as amended), including the rights to know, correct and delete. We do not sell personal information or share it for cross-context behavioural advertising, and we do not discriminate against anyone for exercising their rights.
• Canada (PIPEDA), Mexico (LFPDPPP) and Brazil (LGPD). The access, correction, deletion and objection rights those laws provide, including Mexico's ARCO rights.

To exercise any of these, contact us using the details above or the contact form. We will verify the request and respond within the time your local law requires. Where we process records on a customer's behalf, we may refer the request to that customer and help them answer it.

Children

Our services and this website are for businesses and are not directed at children. We do not knowingly collect information about anyone under 18.

Changes

When this policy changes, the new version appears here with a new effective date. A change that affects how we handle information already collected will be communicated to the affected customers directly.

Contact

MEL-USA, INC., 1266 West Paces Ferry Rd #434, Atlanta, GA 30327, United States · +1‑404‑890‑0150 · melusa.com/contact