Privacy Policy
Effective September 2026 · Meridian Techverse Limited
Who we are
Meridian is operated by Meridian Techverse Limited (RC 9849528), a company incorporated in the Federal Republic of Nigeria. This policy explains what information we collect through getmeridiananalytics.com and the Meridian application (together, the "Service"), why we collect it, and how it is handled.
Information we collect
Account information. Your email address, company name, and a password, stored as a salted cryptographic hash — never in plain text.
Connected data source credentials. If you connect a database, its host, username, and password are encrypted at rest before being stored. Meridian does not store a copy of your underlying business data — each question runs a live, read-only, authorized query against your own database at the moment you ask it.
Uploaded documents. If you upload a PDF, Word, PowerPoint, Excel, or CSV file, its extracted text is stored so you can ask questions about it, until you delete it.
Payment information. Handled entirely by Paystack — see "Payment security" below. Meridian never receives or stores your card number, expiry date, or CVV.
Usage and audit data. Every query, connection change, sign-in, and export is recorded in a hash-chained audit log for your organization's own security and accountability. This log is visible to your own account's administrators — it is not sold, shared, or used for any other purpose.
How we use it
We use the information above to provide and secure the Service: authenticating you, running the queries and analyses you request, enforcing the access controls your organization configures, billing your subscription, sending transactional emails (welcome messages, invites, security notifications), and investigating misuse or security incidents. We do not use your connected business data or document content to train any model, and we do not sell personal information.
How your data reaches an AI model
When you ask a question, the relevant authorized schema (table and column names, never raw records beyond what your question's result actually returns), the computed result, and any document text you have attached are sent to Anthropic's Claude API to generate a clear, human-readable explanation. Meridian is read-only by design — the AI can query and explain; it cannot write, alter, or delete anything in your connected systems.
Third parties we rely on
Meridian uses a small number of specialist providers, each for exactly one job:
- Anthropic — processes your questions and data to generate answers.
- Paystack — processes subscription payments; Meridian never sees or stores your card details directly.
- Resend — delivers transactional emails (welcome, invites, security notifications).
- Railway — hosts the application and its database.
- Umami — provides internal, privacy-focused analytics on our own website (page visits, approximate location by country, and specific actions like signing up or subscribing). Cookie-free, and used only by Meridian to understand and improve the site — never sold, shared, or used for advertising.
- Meta (Facebook) — measures our advertising. Its pixel runs on our home page and our enquiry page only, and reports that the page was viewed and whether an enquiry was submitted. It is never loaded inside the signed-in product, and it never receives your business data or the contents of an enquiry. See "Cookies and similar technologies" below.
Apart from Meta, none of these providers is permitted to use your data for its own purposes beyond providing its service to us. Meta uses the advertising data it collects for its own purposes as well, under its own terms, which is why we limit it to the two marketing pages named above.
Payment security
All payments are processed by Paystack, a PCI DSS Level 1 certified payment processor — the highest level of certification in the payments industry. Your card details are entered directly into Paystack's secure checkout and never pass through Meridian's own servers. We receive only a confirmation that payment succeeded and a reference number for our records.
How we protect your data
Two-factor authentication (with self-service recovery), encrypted credentials, row- and column-level access control enforced on every query, and a tamper-evident audit trail — security is checked on every request, not configured once and forgotten. See "Built for a real security review" on our homepage for specifics.
Data retention
Your data is retained for as long as your account is active. If you delete a document, a connection, or your account, the underlying records are removed. If you need something deleted outside of that, contact us at the address below and we will handle it directly.
International data transfers
Meridian's infrastructure and service providers may process data outside Nigeria. Where this occurs, we rely on providers that maintain appropriate technical and contractual safeguards for cross-border data processing.
Children's privacy
Meridian is a business analytics product intended for organizations and their employees. It is not directed at, and we do not knowingly collect information from, individuals under 18.
Your rights
You can request a copy of your account's data, correction of inaccurate information, or deletion of your account at any time by contacting us at hello@getmeridiananalytics.com.
Changes to this policy
If this policy changes materially, we will update the effective date at the top of this page and, where the change is significant, notify account administrators by email.
Contact
Questions about this policy or your data: hello@getmeridiananalytics.com