Privacy Policy

Information We Collect

Information you provide directly:

• Contact information — name, email address, and any message content submitted through our contact form or via email.
• Business information — company name, project details, or other information you share when requesting a consultation or engaging our services.
• Chat messages — messages you type into the AI chat assistant on the Site, used solely to generate a response to your question.

Information collected automatically:

• Usage data — pages visited, time spent on the Site, referring URLs, browser type, and device information, collected via standard web server logs and analytics tools.
• Cookies — small data files stored on your device to improve Site functionality. See Section 4 for details.

We do not collect sensitive personal information such as Social Security numbers, financial account details, or health information through this Site.

How We Use Your Information

We use collected information to:

• Respond to your inquiries and provide requested services;
• Communicate about projects, proposals, and invoices;
• Improve the Site and our service offerings;
• Send relevant updates or information about Meridian Tech (you may opt out at any time);
• Comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

How We Share Your Information

We may share your information with:

• Service providers — trusted third parties that help us operate the Site and deliver services (e.g., email providers, payment processors like Stripe, hosting providers like AWS). These providers are contractually bound to protect your information.
• Legal requirements — when required by law, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.

Cookies

This Site uses cookies and similar tracking technologies to enhance your experience. Types of cookies we use:

• Essential cookies — required for basic Site functionality;
• Analytics cookies — help us understand how visitors use the Site (e.g., page views, traffic sources).

You can control cookie settings through your browser. Disabling cookies may affect Site functionality.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Contact form submissions are typically retained for up to 3 years. Client project information is retained for up to 7 years for business record purposes.

Data Security

We implement reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your data. To exercise these rights, contact us at meridiantechllc@meridian-hq.com. We will respond within 30 days.

Meridian AI Workspace & Connected Accounts

This section applies to customers of Meridian AI Workspace, our subscription product in which a business connects its own accounts (such as Google, Notion, or Asana) so that its AI assistant can work with real business data. It does not apply to ordinary visitors to this Site.

What we access, and only with your permission

Connections are established through each provider’s own authorization screen (OAuth). We never ask for, receive, or store your password for any connected account. You choose which accounts to connect, you see the specific permissions requested before granting them, and you may disconnect at any time — from within the Workspace, or directly from the provider (for Google, at myaccount.google.com/permissions).

Depending on the connections you enable, we may access:

• Google Calendar — events, times, and attendees, so the assistant can answer questions about your schedule and prepare summaries of your week.
• Gmail — message metadata and content you direct the assistant to work with, so it can summarize messages and prepare draft replies for your review. Drafts are never sent without your explicit approval.
• Notion / Asana — pages, projects, and tasks you have shared with the integration, so the assistant can reference them when answering questions.
• Documents you upload — files you add to your workspace knowledge base, which are indexed so the assistant can answer from your own policies, pricing, and procedures.

How we use it

Data from connected accounts is used solely to provide the features you requested within your own workspace. Specifically, we do not:

• use it to train, fine-tune, or improve any artificial-intelligence or machine-learning model, whether ours or a third party’s;
• sell, rent, or license it to anyone;
• use it for advertising, marketing, or any form of profiling;
• make it available to other customers — each workspace is isolated, and data is accessible only to members of your own workspace;
• allow our staff to read it, except where you explicitly request support and grant access, or where required by law.

Google API Services Limited Use disclosure

Meridian AI Workspace’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

To generate responses, relevant excerpts of your data are sent to the AI model provider you select (such as Anthropic, OpenAI, or Google). Where you supply your own provider API key, that processing occurs under your agreement with that provider. Where you use Meridian-managed AI, processing occurs under our agreements, which are configured so that your content is not used to train the providers’ models. Only the excerpts needed to answer a given request are transmitted — never your entire mailbox, calendar, or document set.

Storage, security, and deletion

• Authorization tokens and any API keys you provide are encrypted at rest using AES-256-GCM, with encryption keys held outside the database. They are decrypted only in server memory at the moment a request is made, and are never exposed to your browser or to other customers.
• Each workspace’s data is isolated at the database level, so one customer’s data cannot be reached from another’s account.
• Actions the assistant proposes — such as an outbound message — are recorded in an audit log visible to you, and require your approval before they are carried out.
• Disconnecting an account deletes the stored authorization tokens for it. Deleting your workspace, or emailing us at the address below, deletes the associated data, including uploaded documents and their indexes, within 30 days, except where retention is required by law.

Third-Party Services

Our Site uses the following third-party services, each with their own privacy policies:

• Amazon Web Services — website hosting and infrastructure (aws.amazon.com/privacy)
• Google Analytics & Google Ads — site analytics and advertising measurement (policies.google.com/privacy)
• Anthropic — powers the AI chat assistant; chat messages are processed to generate responses (anthropic.com/privacy)
• Stripe — payment processing for client engagements (stripe.com/privacy)
• Supabase — database, authentication, and file storage for Meridian AI Workspace (supabase.com/privacy)
• Vercel — application hosting for Meridian AI Workspace (vercel.com/legal/privacy-policy)
• OpenAI / Google — optional AI model providers within Meridian AI Workspace, used only when you select them (openai.com/policies, policies.google.com/privacy)

Children’s Privacy

This Site is not directed to children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the Site after changes constitutes acceptance of the revised Policy.

Contact Us

Questions or concerns about this Privacy Policy? We’re happy to help.