Privacy
Privacy policy
Who we are
Meridian Inc. is a Delaware C corporation with its office at 535 Mission Street, Suite 1400, San Francisco, CA 94105, United States. We are the controller of the personal information described here. Questions go to privacy@meridianalabs.com.
What we collect
| What | Why | Kept for |
|---|---|---|
| Name, email, firm name | To run your account and reply to you | Life of the account, then 30 days |
| Password hash | To sign you in. We never see the password itself | Life of the account |
| Deck and data-room text you submit | To produce your memo and let you open it again | Until you delete it |
| Memos we produce | So you can come back to them | Until you delete them |
| Usage counts | To enforce the free tier and bill correctly | 24 months |
| Form submissions | To answer your message or application | 24 months |
| Server logs | Reliability and abuse prevention. No document content | 30 days |
What we do not collect
- We do not run advertising trackers, and there are no third-party advertising cookies on this site.
- We do not buy personal information from data brokers.
- We do not ask for payment card numbers. If you subscribe, Stripe handles the card and we never see it.
- We do not collect special category personal information, and you should not put any into a memo.
- We do not use your document text or the memos produced from it to train any model.
Who your information goes to
Our model providers receive the document text needed to produce your memo, under business API terms that prohibit training on that traffic. The routing table on the How the AI works page names which models are live.
Our hosting and database providers store the data on our behalf inside the United States. Stripe processes payments if you subscribe. That is the complete list of processors, and we will keep it complete: if it changes, this page changes.
Legal bases
Where the GDPR or UK GDPR applies to you, we rely on: performance of a contract, to give you the service you asked for; legitimate interests, to keep the service secure, prevent abuse and understand aggregate usage; and consent, for anything optional, which you can withdraw at any time.
Your rights
You can ask for a copy of what we hold, correct it, delete it, or object to a particular use. Most of it you can do yourself: memos delete from the deals list and the whole account deletes from Settings.
For anything else, email privacy@meridianalabs.com and we will answer within 30 days. We will not make you jump through hoops and we will not charge you for it. If you are in California, the CCPA rights to know, delete and opt out of sale apply, and we do not sell personal information.
Children
Meridian is a professional investing tool and is not directed at anyone under 18. We do not knowingly collect information from children, and if we learn we have, we will delete it.
Changes
If we change this policy in a way that matters, we will email account holders before it takes effect rather than quietly updating a date. This version is effective 1 July 2026.
The practical version of this, with the actual retention windows and what happens to an uploaded deck, is on the your data page. Cookies are covered on the cookies page.