Privacy Policy

This Privacy Policy explains how Meridian (“we”, “us”) collects, uses, and protects your information when you use our website and web application (the “Service”). We collect only what we need to run Meridian, and we do not sell your personal data.

1. Information we collect

Account information

When you create an account we collect your name, email address, and a securely hashed password. If you upload an avatar, we store that image.

Content you create

We store the notes, databases and their rows, whiteboards, journal entries, folders, uploaded images, and workspace settings you create, so the Service can function and so your work is available the next time you sign in.

Usage data

We may collect privacy-friendly, aggregated usage analytics (such as page views and feature interactions) to understand how the Service is used and improve it. This data is not used to track you across other websites.

2. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your account secure.
• To respond to your requests and provide support.
• To analyse usage in aggregate so we can make Meridian better over time.
• To comply with legal obligations.

We do not read your notes for any purpose other than operating the Service, and we do not use your content to train machine learning models.

3. How we share information

We do not sell your personal data. We share information only with the service providers who help us operate the Service (such as hosting and database providers), only to the extent necessary for them to perform that service, or where required by law.

4. Data storage and security

Your data is stored in a PostgreSQL database on infrastructure we control. We use industry-standard measures including encryption in transit (HTTPS), hashed passwords, and session-based authentication scoped to your account. No system is perfectly secure, but we take reasonable steps to protect your information.

5. Data retention

We keep your content for as long as your account is active. Items you move to Trash remain recoverable until you delete them permanently. When you delete your account, we delete your account record and the content associated with it.

6. Your rights

You can access and edit your content at any time inside the app. You can export everything you have written as a zip of markdown files from Settings → Export. You may request deletion of your account and its data by emailing us from the address linked to your account. Depending on where you live, you may have additional rights over your personal data under laws such as the GDPR.

7. Cookies

We use a session cookie to keep you signed in. It is required for the Service to work and is not used for advertising or cross-site tracking.

8. Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them.

9. Changes to this policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service.

10. Contact

Questions about this Policy or about your data can be sent to [email protected].