Trust

Security and privacy

Your artwork isn't kept

To lay out a format, Mestra reads the structure of your master: frames, text and positions. Mestra doesn't keep the artwork or copy it reads from your master. Settings you enter, such as campaign copy and logos, are kept until you delete them. If a trial or subscription ends, or an invoice is 14 days unpaid, your organisation becomes read-only. Unless you subscribe or pay the overdue invoice within 60 days, its content and settings are then deleted, and we keep only what our Privacy Policy describes.

An optional file library

Owners can turn on a library that keeps exported files for 30, 90 or 365 days. It's off by default. Files are encrypted with a key unique to your organisation, and deleted when they expire.

Hosted in Australia

Mestra's service and database run in Sydney. Traffic is protected by Cloudflare.

Access and sign-in

Invite people as owners, editors or viewers. Sign in with an emailed link, Google or Microsoft (work and school accounts). Design apps connect through a browser approval, so nobody pastes passwords or tokens. Sign-ins and changes are kept in an audit log for a year.

Reporting a security issue

Email security@withmestra.com. We'll reply within two business days.