Meridian

Privacy Policy

Effective September 2026 · Meridian Techverse Limited

Who we are

Meridian is operated by Meridian Techverse Limited (RC 9849528), a company incorporated in the Federal Republic of Nigeria. This policy explains what information we collect through getmeridiananalytics.com and the Meridian application (together, the "Service"), why we collect it, and how it is handled.

Information we collect

Account information. Your email address, company name, and a password, stored as a salted cryptographic hash — never in plain text.

Connected data source credentials. If you connect a database, its host, username, and password are encrypted at rest before being stored. Meridian does not store a copy of your underlying business data — each question runs a live, read-only, authorized query against your own database at the moment you ask it.

Uploaded documents. If you upload a PDF, Word, PowerPoint, Excel, or CSV file, its extracted text is stored so you can ask questions about it, until you delete it.

Payment information. Handled entirely by Paystack — see "Payment security" below. Meridian never receives or stores your card number, expiry date, or CVV.

Usage and audit data. Every query, connection change, sign-in, and export is recorded in a hash-chained audit log for your organization's own security and accountability. This log is visible to your own account's administrators — it is not sold, shared, or used for any other purpose.

How we use it

We use the information above to provide and secure the Service: authenticating you, running the queries and analyses you request, enforcing the access controls your organization configures, billing your subscription, sending transactional emails (welcome messages, invites, security notifications), and investigating misuse or security incidents. We do not use your connected business data or document content to train any model, and we do not sell personal information.

How your data reaches an AI model

When you ask a question, the relevant authorized schema (table and column names, never raw records beyond what your question's result actually returns), the computed result, and any document text you have attached are sent to Anthropic's Claude API to generate a clear, human-readable explanation. Meridian is read-only by design — the AI can query and explain; it cannot write, alter, or delete anything in your connected systems.

Third parties we rely on

Meridian uses a small number of specialist providers, each for exactly one job:

  • Anthropic — processes your questions and data to generate answers.
  • Paystack — processes subscription payments; Meridian never sees or stores your card details directly.
  • Resend — delivers transactional emails (welcome, invites, security notifications).
  • Railway — hosts the application and its database.
  • Umami — provides internal, privacy-focused analytics on our own website (page visits, approximate location by country, and specific actions like signing up or subscribing). Cookie-free, and used only by Meridian to understand and improve the site — never sold, shared, or used for advertising.
  • Meta (Facebook) — measures our advertising. Its pixel runs on our home page and our enquiry page only, and reports that the page was viewed and whether an enquiry was submitted. It is never loaded inside the signed-in product, and it never receives your business data or the contents of an enquiry. See "Cookies and similar technologies" below.

Apart from Meta, none of these providers is permitted to use your data for its own purposes beyond providing its service to us. Meta uses the advertising data it collects for its own purposes as well, under its own terms, which is why we limit it to the two marketing pages named above.

Payment security

All payments are processed by Paystack, a PCI DSS Level 1 certified payment processor — the highest level of certification in the payments industry. Your card details are entered directly into Paystack's secure checkout and never pass through Meridian's own servers. We receive only a confirmation that payment succeeded and a reference number for our records.

Cookies and similar technologies

Meridian uses only the minimum browser storage required to keep you signed in during a session and to remember interface preferences (such as a collapsed panel). Our internal website analytics (Umami, see "Third parties we rely on" above) works without cookies entirely.

On two public marketing pages only — our home page and our enquiry page — we also run the Meta (Facebook) advertising pixel, which does set cookies and does report to Meta. It tells Meta that one of those pages was viewed, and whether an enquiry form was submitted, so that we can tell which advertisements bring genuine enquiries. It never receives the contents of the form, and it is not loaded anywhere inside the signed-in product, so it never sees your business data or what you analyse. You can limit this through your Facebook ad preferences, or by blocking the pixel in your browser.

How we protect your data

Two-factor authentication (with self-service recovery), encrypted credentials, row- and column-level access control enforced on every query, and a tamper-evident audit trail — security is checked on every request, not configured once and forgotten. See "Built for a real security review" on our homepage for specifics.

Data retention

Your data is retained for as long as your account is active. If you delete a document, a connection, or your account, the underlying records are removed. If you need something deleted outside of that, contact us at the address below and we will handle it directly.

International data transfers

Meridian's infrastructure and service providers may process data outside Nigeria. Where this occurs, we rely on providers that maintain appropriate technical and contractual safeguards for cross-border data processing.

Children's privacy

Meridian is a business analytics product intended for organizations and their employees. It is not directed at, and we do not knowingly collect information from, individuals under 18.

Your rights

You can request a copy of your account's data, correction of inaccurate information, or deletion of your account at any time by contacting us at hello@getmeridiananalytics.com.

Changes to this policy

If this policy changes materially, we will update the effective date at the top of this page and, where the change is significant, notify account administrators by email.

Contact

Questions about this policy or your data: hello@getmeridiananalytics.com