This Privacy Policy describes how 33 45 Ltd (“Company,” “we,” “us,” or “our”), which operates Mezzo, collects, uses, and protects information through the Mezzo speaker discovery platform (the “Service”).
We are committed to protecting your privacy and being transparent about our data practices. This policy covers two distinct types of data:
User Data: Information you provide when creating an account and using our platform
Speaker Data: Publicly available information about professional speakers that we aggregate to power our discovery service
Data Controller 33 45 Ltd, a company registered in England and Wales (company number 17334548), registered office: Unit 4 Block B, Knowledge Gateway, Nesfield Road, Colchester, Essex, CO4 3ZL, England Email: hello@talkmezzo.com
2. Information We Collect from Users
Account Information
When you create an account, we collect:
Email address (required for authentication)
Name (optional)
Company name, phone number, and location (optional profile details)
Payment Information
If you subscribe to a paid plan, payment information is collected and processed by our payment processor, Stripe. We do not store your credit card details. We receive only confirmation of payment status, subscription tier, and billing history.
Usage Data
We automatically collect information about how you use the Service, including:
Shortlists you create and speakers you add to them
Search queries and filter selections
Session data (login times, pages viewed)
Device Information
We may collect device and browser information such as IP address, browser type, and operating system for security and analytics purposes.
3. How We Source Speaker Information
Mezzo aggregates publicly available information about professional speakers from a variety of public sources to help event organizers discover and evaluate potential speakers for their events.
Sources of Speaker Information
We collect publicly available speaker information from:
Conference websites: Speaker listings from events such as TED, Web Summit, SXSW, Cannes Lions, CES, Slush, and similar public events
Video platforms: Publicly available talks on YouTube, Vimeo, and conference video archives
Speaker bureaus (historical): Some older profiles came from public listings of speaker representation agencies; we no longer collect from bureaus
Professional profiles: Information speakers have chosen to make publicly accessible
Company websites: Public executive bios and speaking pages
What Speaker Information We Collect
Name, professional title, and current company
Biography and professional background
Speaking topics and areas of expertise
Links to publicly available talks and videos
Professional contact information (where publicly listed)
Links to speaker bureau representation
Publicly shared professional photos
An inferred gender, which a speaker can correct or ask us to remove
Links to public social media profiles (LinkedIn, Twitter/X)
What We Do NOT Collect
We do not access private accounts, restricted databases, or information behind authentication
We do not collect home addresses or private phone numbers. Where a speaker has published an email address in a professional context (for example on their own website), we may store it to contact them about their profile
We do not access private social media content or direct messages
We do not collect sensitive personal data (health, religion, political views, etc.)
Images and Visual Content
Where speaker profiles include photos, these are professional headshots that were publicly shared on conference websites, speakers' own sites or similar sources. Our image service may resize and cache a copy to display it, and photos uploaded by claimed speakers are stored by us. Anyone with rights in an image can ask us to remove it at /image-rights.
Our Lawful Basis and Your Right to Object
We process speaker information on the basis of our legitimate interests (UK GDPR and EU GDPR Article 6(1)(f)): maintaining an accurate public record of who has spoken where, so that event organisers can find speakers and speakers can be found. We limit this to information published in a professional capacity.
Because we did not collect this information from you directly, this section and the sources listed above are our notice to you under Article 14. Where we contact a speaker about their profile, that message says so and explains how to opt out.
You can object at any time (Article 21): email hello@talkmezzo.com (or, if you have claimed your profile, use the removal request in your account settings), and we will stop processing your information and remove your profile unless we have a compelling reason not to, which we will explain.
Important Note:
We only aggregate information that speakers have made publicly available in their professional capacity. Our goal is to help event organizers discover speakers while respecting speaker privacy. Speakers can claim their profile, update their information, or request removal at any time.
Enable event organizers to discover and evaluate speakers
Display relevant information to help with booking decisions
Suggest similar speakers based on topics and expertise
5. Information Sharing
We share information only in the following circumstances:
Service Providers
Supabase: Authentication and file storage
Neon: Database hosting
Vercel: Website hosting and edge functions
Stripe: Payment processing (PCI-DSS compliant)
Resend: Sending email
Anthropic: AI processing used to draft and standardise profile text (such as headlines and short bios) from the public sources above
PostHog: Product analytics and session replay (see Cookies & Tracking)
Sentry: Error monitoring to identify and fix technical issues
Legal Requirements
We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
What We Do NOT Do
We do not sell user data to third parties
We do not share your shortlists or search activity with speakers
We do not provide user data for advertising purposes
6. Speaker Rights (Claim Your Profile)
If you are a speaker featured on Mezzo, we respect your right to control your professional information. You can:
Claim Your Profile
Verify your identity to take ownership of your speaker profile and manage how you're presented.
Update Your Information
Correct inaccuracies, add missing details, or update your bio, topics, and contact preferences.
Manage Visibility
Choose what contact information is displayed and how event organizers can reach you.
Request Removal
If you prefer not to be listed on Mezzo, you can request complete removal of your profile.
Claimed Speaker Accounts
When you claim your speaker profile, you gain additional capabilities:
Add and manage your speaking history (past talks and events)
Review and approve talk suggestions submitted by event organizers or other users
Control which contact information is visible to organizers
Receive notifications when you're added to shortlists (optional)
Talk Suggestions
Users may suggest talks for your profile based on publicly available information. All suggestions require your explicit approval before appearing on your public profile. You can review, edit, or reject any suggested talks through your speaker dashboard.
We aim to respond to all speaker requests within 5 business days. For removal requests, we will remove your profile within 30 days of verification.
7. User Rights
As a user of the Service, you have the right to:
Access: Request a copy of the personal data we hold about you
Rectification: Update or correct your account information
Deletion: Delete your account and associated data
Export: Request an export of your data in a portable format
Objection: Opt out of non-essential communications
UK and EU/EEA Residents (UK GDPR and GDPR)
You also have the rights to restrict processing and to object to processing based on legitimate interests. You can complain to the UK Information Commissioner's Office (ico.org.uk) or, in the EU/EEA, to your local supervisory authority. We would appreciate the chance to resolve any concern first at hello@talkmezzo.com.
For California Residents (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
Account data: Retained until you delete your account
Usage data: Retained for analytics purposes, typically 2 years
Payment records: Retained for 7 years as required by tax and accounting regulations
Speaker data: Retained until a removal request is received and processed
Support communications: Retained for 3 years
When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information by law.
9. International Data Transfers
33 45 Ltd is based in the United Kingdom. Some of our service providers process data in the United States and elsewhere; where information is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, standard contractual clauses or the UK–US data bridge.
Our service providers may process data in various locations:
Supabase: Offers regional data storage options
Stripe: Operates globally with appropriate data protection measures
Vercel: Uses edge locations globally for performance
10. Security Measures
We implement appropriate technical and organizational measures to protect your data, including:
Encryption in transit (HTTPS/TLS)
Encryption at rest for stored data
Secure authentication through Supabase Auth
Access controls limiting data access to authorized personnel
Regular security reviews and updates
While we take reasonable precautions, no internet transmission is completely secure. Please protect your account credentials and notify us immediately if you suspect unauthorized access.
11. Cookies & Tracking
We use cookies and similar technologies for:
Essential Cookies
Required for the Service to function, including authentication and session management. These cannot be disabled.
Preference Cookies
Remember your settings and preferences to improve your experience.
Analytics Cookies
We use PostHog to understand how people use the Service. By default it runs without cookies (in memory only) and records usage such as pages visited and features used, including session replays of page interactions with form inputs masked. If you accept cookies in our banner, PostHog also remembers your browser between visits. If you decline, analytics capture is switched off.
We do not use third-party advertising or tracking cookies. We do not sell your data or use it for targeted advertising.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 30 days before the changes take effect.
We encourage you to review this policy periodically. The “Last updated” date at the top indicates when the policy was last revised.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
33 45 Ltd, a company registered in England and Wales (company number 17334548), registered office: Unit 4 Block B, Knowledge Gateway, Nesfield Road, Colchester, Essex, CO4 3ZL, England Website: https://talkmezzo.com