Last Updated: March 12, 2026
Protecting your privacy is fundamental to the way Meridian AI, Inc. (“Meridian”, “we”, “us”, or “our”) conducts business. This Privacy Notice explains how we may collect, use and disclose your personal information when you access our digital or online properties or services that link to this Privacy Notice (including, our website https://www.meridian-ai.com/ (“Site”), our paid web application (“Web App”), our Chrome extension, our Outlook Add-in, our marketing activities, our live events, and other activities described in this Privacy Notice) (collectively, the “Online Services”). This Privacy Notice does not apply to your use of third-party sites linked to this website.
We reserve the right to update this Privacy Notice periodically. We will make note of the changes on our website and your continued access to the Online Services is deemed to be your acceptance of those changes, so we encourage you to check back periodically for updates.
You can jump to particular topics by going to the headings below:
What is Personal Information?
Personal Information refers to any information that identifies, relates to, or is reasonably capable of being associated with an identifiable individual or household. This includes, but is not limited to names, addresses, geolocation data, online identifiers, and other unique characteristics. Personal Information can also include indirect identifiers such as device identifiers and aggregated data if it can reasonably be linked to an individual.
An identifiable natural person, or "Data Subject," is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location information, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Personal Information We Collect from You
We collect personal information you voluntarily provide when you express interest in our company, services, participate in related activities, or contact us directly. The type of information collected depends on the nature of your interaction, your choices, and the specific services you use.
The personal information we collect may include the following:
| Context | Types of Data | Primary Purpose for Collection and Use of Data |
|---|---|---|
| Client Information | We collect the name, usernames, and contact information, of our clients and their employees with whom we may interact. | We have a legitimate interest in contacting our clients and communicating with them concerning normal business administration such as projects, services, and billing. |
| Client and User Account information | We collect personal information from our clients and users of our Online Services when they create an account to access and use the Online Services. This information could include business contact information such as name, email address, title, company information, and password for the Online Services as well as audiovisual information such as pictures uploaded or used in the Online Services. | We have a legitimate interest in providing account-related functionalities to our users, monitoring account log-ins, and detecting potential fraudulent logins or account misuse. Additionally, we use this information to fulfill our contract to provide you with services. |
| Cookies and First-Party tracking | We use cookies and clear GIFs. “Cookies” are small pieces of information that a website sends to a computer’s hard drive while a website is viewed. Our Chrome extension utilizes the same cookies and data processing methods as our website to ensure a seamless user experience. | We have a legitimate interest in making our website operate efficiently and improving our marketing efforts and Online Services. |
| Cookies and Third-Party Tracking | We participate in behavior-based advertising, this means that a third party uses technology (e.g., a cookie) to collect information about your use of our website so that they can provide advertising about products and services tailored to your interests on our website, or on other websites. | We have a legitimate interest in engaging in behavior-based advertising and capturing website analytics in improving our marketing efforts. |
| Demographic Information | We collect personal information, such as your age, identified gender, identified ethnicity, identified race or location. | We have a legitimate interest in understanding our users and providing tailored services that take into account these attributes. |
| Email Interconnectivity | If you receive an email from us, we may use certain tools to capture data related to when you open our message, click on any links or banners it contains and make purchases. | We have a legitimate interest in understanding how you interact with our communications to you. |
| Employment | If you apply for a job posting or become an employee of Meridian, we collect the information necessary to process your application or to retain you as an employee. This may include, among other things, your Social Security Number. Providing this information is required for employment. | We use information about current employees to perform our contract of employment or the anticipation of a contract of employment with you. In some contexts, we are also required by law to collect information about our employees. We also have a legitimate interest in using your information to have efficient staffing and workforce operations. |
| Feedback / Support | We collect personal information from you contained in any inquiry you submit to us regarding the Online Services, such as completing our online forms, calling, or emailing for the purposes of general inquiries, support requests, or to report an issue. When you communicate with us over the phone, your calls may be recorded and analyzed for training, quality control and for sales and marketing purposes. During such calls, we will notify you of the recording via either voice prompt or script. | We have a legitimate interest in receiving and acting upon, your feedback, issues, or inquiries. |
| Mailing List | When you sign up for one of our mailing lists we collect your email address or postal address. | We share information about our Online Services with individuals that consent to receive such information. We also have a legitimate interest in sharing information about our Online Services. |
| Order Placement | We collect your name, billing address, e-mail address, phone number, and use a third party, PCI compliant service to process your payment card number when you place an order. | We use your information to perform our contract to provide you with Online Services. |
| Payment Information | We collect payment and billing information when you register for certain paid Online Services, such as our Web App. For example, we ask you to designate a billing representative, including name and contact information, upon registration. You might also provide payment information, such as payment card details, which we collect via secure payment processing services. | We have a legitimate interest in getting paid for certain Online Services. |
| Promotions | Promotions, incentives or giveaways may be made available by us or third parties from time to time. You do not have to participate in these, however, if you choose to participate, you may be asked to disclose some personal information. Additionally, at the time of entering the promotion, we will disclose in the promotion’s materials specific terms and conditions regarding how your personal information will be used. Please do not participate in any promotion if you do not agree to such usage. | We have a legitimate interest in sharing information about our Online Services and providing incentives to our customers. |
| Surveys | When you participate in a survey, we collect information that you provide through the survey. If the survey is provided by a third-party service provider, the third party’s privacy Notice applies to the collection, use, and disclosure of your information. | We have a legitimate interest in understanding your opinions and collecting information relevant to our organization. |
| Website interactions | We use technology to monitor how you interact with our Online Services. This may include which links you click on, or information that you type into our online forms. This may also include information about your device or browser. | We have a legitimate interest in understanding how you interact with our Online Services to better improve them, and to understand your preferences and interests in order to select offerings that you might find most useful. We also have a legitimate interest in detecting and preventing fraud. |
| Web logs | We collect information, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to a computer when the Internet is used), domain name, click-activity, referring website, and/or a date/time stamp for visitors. | We have a legitimate interest in monitoring our networks and visitors to our Online Services. Among other things, it helps us understand which of our Online Services is the most popular. |
| Email Metadata and User Profile Information | Our Outlook add-in utilizes Microsoft Graph API permissions, including openid, user.read, files.read, and profile, to enable email synchronization features. We do not access or store any email content without user consent. When using the add-in, we may collect email metadata - such as sender and recipient email addresses, subject lines, timestamps, and email thread IDs - as well as basic Microsoft profile details, including your name, email address, and company information, to facilitate seamless integration with Meridian. | We have a legitimate interest in collecting this data to provide CRM functionality, fulfill contractual obligations to users, and ensure efficient communication and workflow management within the platform. |
| Social Media | When an individual interacts with our Services through various social media networks, such as when someone follows us or shares our content on YouTube, LinkedIn, or other social networks, we may receive some information about individuals that they permit the social network to share with third-parties. The information we receive is dependent upon an individual’s privacy settings with the social network, and may include your profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, and any other information you permit the social network to share with third-parties. | We use this information to update and maintain the page to provide you with content and features of our Online Services, as well as to improve our product outreach. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We have a legitimate interest and/or may obtain your consent to collect this information. |
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
In addition to the information that we collect from you directly, we may also receive information about you from other sources, including third parties, business partners, our affiliates, or publicly available sources. For example, if you submit a job application, or become an employee, we may conduct a background check.
If we wish to use your personal information for a purpose which is not compatible with the purpose for which it was collected for, we will request your consent, unless there is an exception which applies under applicable law. In all cases, we balance our legal use of your personal information with your interests, rights, and freedoms in accordance with applicable laws and regulations.
Our Chrome extension operates in accordance with our existing data collection and processing practices. It does not collect any additional personal data beyond what is outlined in this Privacy Notice, nor does it introduce new tracking mechanisms. For more details, please refer to the relevant sections of this Privacy Notice or contact us at privacyinfo@meridian.com.
Our Outlook add-in follows our established data collection and processing policies. It does not gather any personal data beyond what is specified in this Privacy Notice, nor does it store or access email content without user permission. The add-in leverages Microsoft Graph API permissions to facilitate secure and efficient email synchronization while upholding strict security and compliance measures. You can revoke the add-in's permissions at any time via their Microsoft account settings. For more information, please review the relevant sections of this Privacy Notice or reach out to us at privacyinfo@meridian.com.
Legal Basis for Processing Your Information
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
How Long We Use Personal Information
We use the personal information which you provide to us to perform our Online Services as outlined in this Privacy Notice. When you are our prospective or current business client of our Web App, we use personal information about you and your employees to:
• deliver the Site and Web App;
• carry out "Know Your Client" checks and screenings prior to starting a new engagement;
• carry out client communications, services, billing, and administration;
• configure our Online Services and your dashboard access, enhance CRM functionality and other professional services that you may request;
• secure client feedback;
• deal with client complaints and requests;
• create marketing materials such as white papers, case studies, and social media content; or
• contacting and marketing to our clients.
We also process personal information about our clients/prospective clients and employees of our clients/prospective clients to:
When you are a visitor to our Site, our Web App, attend our live events, or request marketing information, we may use your personal information to:
Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you sign up for our Web App, we may collect your information to complete that transaction, but we also collect your information as we have a legitimate interest in maintaining your information after your transaction is complete so that we can quickly and easily respond to any questions about the Online Services.
If we wish to use your personal information for a purpose which is not compatible with the purpose for which it was collected for, we will request your consent, unless there is an exception which applies under applicable law, such as those listed in the section below. In all cases, we balance our legal use of your personal information with your interests, rights, and freedoms in accordance with applicable laws and regulations.
Cookie Policy
We use cookies (small text files placed on your device to track activity) and similar tracking technologies (such as web beacons and pixels) to collect information when you interact with our Services. These technologies help us:
We also permit third parties and service providers to use cookies and similar technologies for analytics and advertising purposes. These technologies may:
These advertisements may appear both on our Services and across other websites.
Google Analytics
Meridian uses Google Analytics to understand how users engage with our website. Google Analytics collects information such as:
This helps us enhance our website’s performance and improve the overall user experience.
Google Analytics operates through cookies that may remain on your device even after your session ends. You can control your preferences for Google Analytics through:
For additional options, you may visit:
For more details on how Google collects and processes data, please see the Google Privacy and Terms page.
Note: Disabling Google Analytics may affect some functionality but will not prevent you from using our Online Services.
If you have further questions about the use of Google Analytics, please contact us at privacyinfo@meridian.com.
Disclosure of Personal Information
In addition to the specific situations discussed elsewhere in this Privacy Notice, we may disclose personal information we collect from you:
(1) if we believe disclosure is necessary or appropriate to protect the rights, property or safety of us, our clients or others;
(2) to our authorized service providers such as our contractors and other third parties we use to support our business;
(3) to fulfill the purpose for which you provide it;
(4) to a buyer or other successor in the event of a sale, merger, reorganization or transfer of some or all of our business or assets;
(5) for any other purpose disclosed by us when you provide the information;
(6) to comply with any court order, law or legal process, including responding to any government or regulatory request;
(7) to carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections; or
(8) with your consent.
We do not sell your personal information or otherwise share personal information with third parties for direct marketing purposes.
Use of Subprocessors
Meridian engages certain third-party service providers (“subprocessors”) to support the delivery of our Online Services. We maintain an up-to-date list of these subprocessors on our Site, where we disclose the nature of the services provided. We may add or replace subprocessors as our business needs evolve and will update our subprocessor list accordingly.
We encourage users to review this list periodically to stay informed of any updates. In situations where we are required to provide notice under applicable law or a specific contractual obligation, we will notify users of such changes directly. By continuing to use our Online Services, you acknowledge and accept any changes made to our subprocessor list. If you have questions or concerns about our subprocessors, please contact us at privacyinfo@meridian.com.
Your Privacy Rights
You can make the following choices regarding your personal information:
Please address written requests and questions about your rights to privacyinfo@meridian.com.
Note that, as required by law, we will require you to prove your identity. We may verify your identity by a phone call or email. Depending on your request, we will ask for information such as your name or other account information. We may also ask you to provide a signed declaration confirming your identity. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.
In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. We will require verification that you provided the authorized agent permission to make a request on your behalf. You must provide us with a copy of the signed permission you have given to the authorized agent to submit the request on your behalf and verify your own identity directly with us. If you are an authorized agent submitting a request on behalf of an individual you must attach a copy of the following information to the request:
Data Security
We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access and disclosure. The use of, and access to, your personal information by us is restricted to authorized individuals who need to know that information to provide services to you, and who receive training about the importance of protection personal information. We maintain physical, electronic and procedural safeguards to limit access to your nonpublic personal information. Only authorized individuals access your personal information, and they receive training about the importance of protecting personal information.
Our Chrome extension follows the same stringent security measures as our Web App to protect user data from unauthorized access or misuse. Our Outlook add-in meets security standards by encrypting all stored user data using AES-256 encryption, securing access to email data through OAuth 2.0 authentication, and ensuring that no user credentials are stored. Our service providers and business partners are also contractually bound to maintain the confidentiality of personal information and may not use the information for any unauthorized purposes.
Unfortunately, no method of transmission of information via the internet or electronic storage is completely secure. Although we use reasonable efforts to protect your personal information, we cannot guarantee the security of your personal information transmitted to us through our website or other electronic means. Any electronic transmission of personal information is at your own risk. In the event that we are required by law to inform you of a breach of your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
How Long We Retain Your Personal Information
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal obligations), or unless you request that we delete it.
The precise periods for which we keep your personal information vary depending on the nature of the information and why we need it. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use and/or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
We may anonymize your personal information (so that it can no longer be associated with you) for research, statistical or other business purposes. We may use this aggregated, anonymized, or de-personalized information indefinitely. We may retain personal information for a commercially reasonable time for backup, archival, audit purposes, and/or to comply with legal obligations, resolve disputes and enforce agreements. You can request further details of retention periods for different aspects of your personal information by contacting us.
International Data Transfers and EU-U.S. Data Privacy Framework
We are a global business, with our primary location in the US. The personal information (or “personal data”) which we collect from you will be stored in the US and in the European Economic Area (“EEA”), and it may be transferred to a destination outside the EEA or the UK, namely to the US. You acknowledge the transfer to, and storing, or processing outside of the EEA or UK of your personal information as set out in this Privacy Notice.
Meridian complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Meridian has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Meridian has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy Notice and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Meridian commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.
Meridian is responsible for the processing of personal data it receives and subsequently transfers to a third party acting as an agent on its behalf. Meridian complies with the EU-U.S. DPF, UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles for onward transfers of personal data, including the onward transfer liability provisions.
The Federal Trade Commission has jurisdiction over Meridian’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, Meridian may be required to disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
In compliance with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Meridian recognizes the right of individuals to seek binding arbitration for the resolution of complaints not resolved by other means. This arbitration can be invoked under certain conditions set forth in Annex I of the DPF Principles.
To initiate binding arbitration, an individual must deliver a notice to Meridian outlining the unresolved issues and the attempts made to resolve them through our standard dispute resolution process. Upon receipt of such notice, Meridian will provide the individual with further instructions on the arbitration procedures, subject to the conditions detailed in Annex I of the DPF Principles. This option is designed as a last resort and is intended to address residual claims regarding data privacy and handling.
Children’s Policy
Because we care about the safety and privacy of children online, we do not knowingly contact or collect personal information from children under 16. Our Site is not intended to solicit information of any kind from children under 16. It is possible that by fraud or deception we may receive information pertaining to children under 16. If we are notified of this, as soon as we verify the information, we will immediately obtain parental consent or otherwise delete the information from our servers. If you want to notify us of our receipt of information by children under 16, please do so by emailing us at privacyinfo@meridian.com
Other Important Information
Changes to Our Privacy Notice. We will post any changes we make to this Privacy Notice on our website. If we make material changes to how we treat personal information we collect from you, we may notify you by email or through a notice on our website homepage. The date this Privacy Notice was last revised is identified above. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting this Privacy Notice on our website to check for any changes.
Contact Information
If you have questions or comments about this Privacy Notice, please call or email us at privacyinfo@meridian.com.
Effective Date: March 10, 2024
Last Update: March 12, 2026
Last Updated: March 3, 2026
If you are a resident of the European Economic Area, we rely on our legitimate interest, contractual relationship, and your consent as described in this Privacy Notice to process your personal information. Additionally, subject to any exemptions as provided by law, you may have certain rights regarding the personal information we maintain about you. We offer you certain choices about what personal information we collect from you, how we use that information, and how we communicate with you. If at any time you wish to exercise your rights, please reach out to us in accordance with the “Contact Us” section below.
According to the GDPR, UK GDPR, and FADP, you have the following rights:
Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply. We will not discriminate against you for exercising such rights.
Except as described in this Notice or provided for under applicable privacy laws, there is no charge to exercise your legal rights. However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge a reasonable fee taking in account the administrative costs of providing the information or taking the action requested; or refuse to act on the request and notify you of the reason for refusing the request.
Contact Us
If you have questions or comments about this Statement, you may contact us at privacyinfo@meridian.com.
If you are dissatisfied with Meridian’s transparency regarding data protection and data privacy, you have the right to contact to your local data protection authority. You can find the list at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.
To learn more about the Data Privacy Framework program, and to view our certification, please visit: https://www.dataprivacyframework.gov/.
