MESA Privacy Policy
Multinational Exchange for Sustainable Agriculture (MESA), Inc. Effective Date: July 1, 2026 Last Updated: September 1, 2026
MESA, Inc. ("MESA," "we," "us," or "our") operates the website www.mesaprogram.org (the "Site") and administers agricultural exchange, training, and grant programs, including SAGE, SPRIG, and GAPP. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to visitors to our Site, newsletter subscribers, donors, program applicants and participants ("Stewards"), Host Farms and organizations, and other partners.
If you do not agree with this policy, please do not use the Site or provide us with your personal information.
Information We Collect
a. Information you provide directly
Contact form submissions: name, email address, phone number, and the content of your message, when you contact us through our Contact page.
Newsletter sign-up: name and email address when you subscribe to receive MESA updates.
Donations: name, billing address, email address, and payment information when you make a donation through our Donate page. Payment card details are collected and processed directly by our third-party payment processor(s) (e.g., Stripe, PayPal, or Squarespace Payments) — MESA does not directly store your full payment card number.
Program applications and participation (SAGE, SPRIG, GAPP): because SAGE is a U.S. Department of State-designated J-1 Exchange Visitor Program, applicants and participants ("Stewards") and their U.S. Host Farms may be asked to provide more extensive personal information, which can include: full legal name, date of birth, nationality, passport and visa information, immigration status, contact and emergency contact details, educational and work history, health or insurance information required for visa sponsorship, photographs, and references. GAPP fellowship and SPRIG grant applicants may similarly be asked for identifying, financial, and program-related information as needed to evaluate and administer applications and awards.
Correspondence: any information you choose to include when you email us, apply for a program, or otherwise communicate with MESA staff.
b. Information collected automatically
When you visit the Site, we (and our service providers) may automatically collect:
IP address, browser type, device type, and operating system
Pages visited, time spent on pages, referring/exit pages, and click activity
Approximate geographic location (derived from IP address)
This information is typically collected through cookies and similar tracking technologies (see Section 5) and through our website platform, Squarespace, and analytics tools such as Google Analytics.
c. Information from third parties
We may receive information about you from:
Payment processors, in connection with donations
Social media platforms (Instagram, Facebook, LinkedIn, YouTube), if you interact with our pages there
Partner organizations, Host Farms, and referring institutions involved in our exchange and grant programs
Public or governmental databases where relevant to visa sponsorship or program compliance
How We Use Your Information
We use personal information to:
Operate, maintain, and improve the Site
Process and acknowledge donations, and issue tax receipts
Send newsletters, program updates, and communications you've requested (you may unsubscribe at any time)
Evaluate, administer, and support applications to SAGE, SPRIG, GAPP, and other MESA programs
Fulfill our obligations as a U.S. Department of State-designated Exchange Visitor Program sponsor, including required reporting to the Department of State and entry of participant information into the Student and Exchange Visitor Information System (SEVIS)
Coordinate with Host Farms, partner organizations, and program participants
Respond to inquiries and provide customer/participant support
Comply with legal, tax, grant-reporting, and regulatory obligations
Protect the security and integrity of the Site and our programs
Analyze usage trends to improve our programs and outreach
We do not sell personal information.
When We Share Your Information
We may share personal information with:
Service providers, such as our main website host (Squarespace), email/newsletter platform, payment processors, and analytics providers, solely to help us operate the Site and our programs.
Government agencies, including the U.S. Department of State and SEVIS, as required for J-1 Exchange Visitor Program compliance, and other agencies where required by law (e.g., tax authorities).
Program partners, including Host Farms, global partner organizations, and funding partners, as necessary to place, support, and evaluate program participants.
Professional advisors, such as auditors, accountants, or legal counsel, where necessary.
Successors, in the event of a merger, reorganization, or transfer of MESA's operations (a rare event for a nonprofit, but disclosed for completeness).
As required by law, such as in response to a subpoena, court order, or to protect the rights, safety, or property of MESA, our participants, or others.
We do not share donor or participant information with third parties for their own marketing purposes.
Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, including to maintain program and financial records, meet legal and grant-reporting obligations (including Department of State recordkeeping requirements for exchange visitor programs), and support alumni relations. When information is no longer needed, we take reasonable steps to delete or anonymize it.
Cookies and Tracking Technologies
Our Sites, built on Squarespace and Wordpress, use cookies and similar technologies to:
Enable core site functionality (e.g., shopping cart/donation processing)
Analyze site traffic and usage (e.g., Google Analytics)
Remember your preferences
You can control cookies through your browser settings, including blocking or deleting them; doing so may affect some Site functionality. Where required by law, we will request your consent before placing non-essential cookies.
Your Rights and Choices
Depending on where you live, you may have rights to:
Access, correct, or request deletion of your personal information
Opt out of the sale or "sharing" of personal information (MESA does not sell personal information)
Unsubscribe from marketing emails at any time via the link in our emails
Request a copy of the information we hold about you
California residents: Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. To make a request, contact us using the information in Section 10.
To exercise any of these rights, please contact us at the email address below. We may need to verify your identity before processing certain requests.
International Participants and Data Transfers
MESA works with individuals and organizations located outside the United States, particularly through our exchange programs. If you are located outside the U.S., please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By participating in our programs or using our Site, you consent to this transfer and processing.
Children's Privacy
Our Site and programs are intended for adults (our exchange and grant programs generally require participants to be of legal working/travel age). We do not knowingly collect personal information from children under 13. If we learn we have inadvertently collected such information, we will delete it.
Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:
MESA, Inc. 2222 Harold Way Berkeley, CA 94704 Email: mesa@mesaprogram.org Phone: 510.654.8858
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.