Privacy Policy

Meridi is a delivery operating system for consulting, implementation, and transformation teams. It helps organizations capture meetings, decisions, and risks across client engagements and internal projects, and turn them into structured next steps inside a shared workspace.

This Privacy Policy explains what information Meridi collects when you use meridi.ai and the Meridi application at app.meridi.ai, how we use it, and the choices you have.

When you create an account or use Meridi, we collect information you provide directly, including:

• Account details such as your name, work email, and password.
• Workspace and project content you or your teammates upload or create (documents, notes, plans, decisions, risks, and similar artifacts).
• Messages and prompts you send to Meridi, including content you paste into chat or extraction tools.
• Billing and contact information when you subscribe to a paid plan or contact us.

We also collect basic technical information about how you use Meridi (for example, log data, device and browser information, and product analytics) to operate, secure, and improve the service.

If you connect a Google account to Meridi, we request a limited set of Google OAuth scopes so Meridi can identify your meetings and bring meeting context into your workspace. The scopes we request are:

• https://www.googleapis.com/auth/userinfo.email — to identify the Google account you connected.
• https://www.googleapis.com/auth/calendar.events.readonly — to read calendar events so Meridi can recognize meetings, schedule the Meridi notetaker, and bring meeting context and transcripts into your workspace.

Meridi requests read-only access to your calendar events. Meridi does not create, edit, delete, or send calendar events on your behalf, and does not request access to your Gmail, Drive, Contacts, or any other Google product.

Google API Services User Data Policy / Limited Use. Meridi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use the Google Calendar data we access to:

• Display upcoming and past meetings inside your Meridi workspace so you can select which ones to capture.
• Schedule the Meridi notetaker to join eligible video meetings and produce a transcript and summary.
• Attach meeting context, transcripts, and extracted decisions, actions, and risks to the right project or client engagement.
• Identify the Google account that authorized the connection so we can manage access correctly.

We do not use Google Calendar data to serve advertising. We do not sell Google user data. We do not use Google user data to train generalized AI or machine learning models. AI features that operate on meeting content (for example, summaries and extracted next steps) run only to provide the service you requested in your workspace.

We do not sell personal information or Google user data. We share information only with service providers that help us operate Meridi, under contracts that require appropriate confidentiality and security. Our key subprocessors include:

• Recall.ai — used to connect calendars and to join, record, and transcribe meetings on your behalf so Meridi can bring meeting context into your workspace.
• Cloud hosting, database, storage, and email infrastructure providers used to run the Meridi application.
• AI model providers used to power summaries, extraction, and assistant features within your workspace.

We may also disclose information if required by law, to protect Meridi or our users, or in connection with a corporate transaction such as a merger or acquisition.

You stay in control of your Google connection and your workspace data. At any time you can:

• Disconnect your Google Calendar from inside Meridi. Future calendar syncing stops as soon as the connection is removed.
• Revoke Meridi's access from your Google Account permissions page.
• Request deletion of your account and associated workspace data by emailing admin@meridi.ai.

We retain workspace content for as long as your account is active or as needed to provide the service. We may retain limited information for legitimate business or legal purposes, such as billing records and security logs.

We use industry-standard safeguards to protect your information, including encryption in transit, encrypted storage at rest with our cloud providers, access controls and least-privilege permissions for our team, and audit logging of administrative actions.

No system is perfectly secure. If you believe your account or data has been compromised, please contact admin@meridi.ai.

Depending on your location, you may have rights to access, correct, export, or delete your personal information. To exercise these rights, or for any privacy question, contact us at admin@meridi.ai.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you in the product.