Privacy Policy

Meridian may process:

• account information, such as a name, work email address and role;
• organisation information, such as the workspace a person belongs to and what they are allowed to see;
• business files and data that customers choose to upload or connect, and the figures read from them;
• technical information needed to operate and secure the service, such as sign in events and the address a request came from;
• Contact us requests sent from the public site.

Meridian uses information to:

• provide the service;
• import and validate authorised business data;
• produce analytics and forecasts;
• secure accounts and workspaces;
• support features a customer has asked for;
• respond to enquiries.

Customers choose which supported services they connect. Meridian only accesses information the customer has authorised and that is required for the functionality they selected.

An administrator may connect one Google Drive folder so that files saved there are imported automatically. Meridian requests the Google Drive read only scope (drive.readonly) so it can list and read the files in the folder that was chosen, including files added after the folder was connected. Meridian never creates, modifies, moves or deletes anything in Drive, and access can be removed at any time from Meridian or from the Google Account permissions page.

Meridian’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs, such as Google Drive, will likewise adhere to the Google User Data Policy, including the Limited Use requirements. In particular, information received from Google APIs:

• is used only to provide the features described here, which is importing the files in the chosen folder and showing the resulting figures;
• is not sold, and is not transferred to others except as needed to provide the service, for security purposes, or to comply with law;
• is not used for advertising of any kind;
• is not used to train generalised artificial intelligence or machine learning models;
• is not read by people, except with the customer’s consent, where necessary for security, or to comply with applicable law.

Meridian does not sell customer business data. Information may be processed by the service providers required to operate Meridian, such as hosting, database and file storage providers.

Meridian uses reasonable safeguards to protect the information it holds, and retains information only as long as needed to operate the service and to meet legitimate obligations.

Customers control which supported sources they connect, and can remove an authorised connection at any time. Removing a connection stops new files arriving. Data that has already been imported stays in the workspace until it is deleted.

For privacy questions, contact Meridian through the Contact us form.