Privacy Notice

1. Who we are

Meridian is operated by Jamaldin Ramadhan Keitany ("we", "us"), trading as Meridian. We act as the data controller for personal data processed in connection with the Service.

2. Data we collect

• Account data: name, email, login credentials, display name.
• Workspace content: documents, meeting notes, chat content and other material you upload.
• Communications: WhatsApp messages and media you connect, support requests.
• Usage and telemetry: pages visited, features used, error logs.
• Device data: IP address, browser, operating system, device identifiers.

3. Why we use it

• Provide the Service: account creation, authentication, hosting your workspace, AI features (legal basis: contract performance).
• Security and fraud prevention: detecting abuse, protecting accounts (legitimate interests).
• Product improvement: diagnostics, analytics (legitimate interests).
• Customer support: responding to questions (contract / legitimate interests).
• Legal compliance: tax, accounting, responding to lawful requests (legal obligation).
• Marketing: only with your consent where required.

4. Who we share it with

• Service providers / subprocessors: hosting, database, AI inference, analytics and support tooling.
• Merchant of Record (Paddle): for sale of the Service, subscription management, payments, tax compliance and invoicing.
• Professional advisers: legal, accounting and similar advisers, where necessary.
• Authorities: where required by law or to protect rights and safety.

5. International transfers

Where personal data is transferred outside the UK / EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep personal data for as long as your account is active and for a reasonable period afterward to comply with legal obligations and resolve disputes. We delete or anonymize data when it is no longer needed.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and routine reviews.

8. Your rights

Depending on your jurisdiction (including GDPR / UK GDPR), you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent. You may also lodge a complaint with your supervisory authority. We will respond within one month of a verified request.

9. Cookies

We use essential cookies to operate the Service (e.g. authentication) and may use analytics cookies to understand usage. You can manage cookies through your browser settings.

10. Contact

For privacy questions or to exercise your rights, contact us via the support details available in-app.