Mezban
Kitchen content, sorted

Privacy Policy

Last updated: June 23, 2026

1. Who we are

Mezban ("we," "us," "our") is a social media content generation tool for Indian restaurants and cloud kitchens, operated at mezbans.in. We help restaurant owners create and publish Instagram and WhatsApp content using AI.

2. Information we collect

We collect the following information when you use Mezban:

  • Account information: your name, email address, and password (stored securely via Supabase Auth — passwords are never stored in plaintext).
  • Restaurant profile: your restaurant's name, cuisine, city, specialty dish, vibe description, typical customers, tone of voice, and caption language preference.
  • Generated content: Instagram captions, hashtags, WhatsApp messages, and AI-generated images created by Mezban on your behalf.
  • Instagram account data: if you connect your Instagram account, we store an access token to post on your behalf. We access your Instagram profile ID, username, and post content only to the extent required to publish content you approve.
  • Contact form submissions: name, email, restaurant name, and message if you contact us.
  • Usage data: we log the number of content generation requests per account for rate-limiting purposes.

3. How we use your information

  • To generate personalised social media content for your restaurant using AI (via the Anthropic Claude API and image generation APIs).
  • To publish content to Instagram on your behalf, only when you explicitly initiate a post from within Mezban.
  • To authenticate you and secure your account.
  • To respond to support or contact requests.
  • To enforce fair usage limits on AI generation.

We do not sell your data. We do not use your data to train AI models. We do not share your data with third parties except as described in Section 4.

4. Third-party services

Mezban uses the following third-party services to operate:

  • Supabase — database, authentication, and file storage. Data is stored in Singapore (ap-southeast-1). Privacy policy: supabase.com/privacy
  • Anthropic — AI caption and content generation. Your restaurant profile and content requests are sent to Anthropic's API. Privacy policy: anthropic.com/privacy
  • OpenAI — AI image generation via DALL-E. Your restaurant profile and post context are sent to generate relevant food photography images. Privacy policy: openai.com/privacy
  • Meta (Instagram Graph API) — if you connect Instagram, we use Meta's API to publish posts. We request only the minimum permissions needed. Meta's data policy: facebook.com/policy
  • Vercel — hosting and serverless functions. Privacy policy: vercel.com/legal/privacy-policy

5. Instagram data

If you choose to connect your Instagram account to Mezban:

  • We request access to publish content on your behalf via the Instagram Graph API.
  • We store your Instagram access token securely in our database to enable posting.
  • We only post content that you have reviewed and explicitly chosen to publish from within Mezban.
  • We do not read your existing Instagram posts, followers, messages, or any other data beyond what is necessary to publish content.
  • You can disconnect your Instagram account from Mezban at any time from your profile settings, which will delete your stored access token.
  • Revoking Mezban's access from your Instagram/Facebook settings immediately invalidates the stored token.

6. Data retention

We retain your account and restaurant profile data for as long as your account is active. Generated posts and broadcasts are retained so you can access them across sessions. If you delete your account, all associated data is permanently deleted from our database within 30 days.

Contact form submissions are retained for up to 12 months.

7. Your rights

You have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Disconnect your Instagram account at any time
  • Export your generated content

To exercise any of these rights, contact us at privacy@mezbans.in.

8. Security

We use industry-standard security practices: passwords are hashed with bcrypt, all data is transmitted over HTTPS, database access is controlled by Row Level Security (each user can only access their own data), and API keys are never exposed to the browser.

9. Children

Mezban is intended for restaurant business owners and operators. We do not knowingly collect data from anyone under the age of 18.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on the site. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy questions or requests, email us at privacy@mezbans.in.