Scope and controller
Meridian (“Meridian”) is responsible for the processing described here across the public site, authenticated platform, email, and related services.
Policy version 2026-08-22.1, effective 2026-08-22. Counsel covering the actual operating entity and launch markets must review this baseline before launch.
Information we process
We apply data minimisation and do not ask users to place sensitive information in search, profiles, or uploads.
- Account and authentication data managed by Clerk; Meridian stores a stable external user ID, not passwords or OAuth credentials.
- Profile and personalization data you provide as a Founder, Investor, or Mentor.
- Product activity such as collections, connections, notification preferences, content interactions, and privacy requests.
- Strictly allowlisted analytics events only after consent; full URLs, email, IP addresses, and upload contents are not added automatically.
- Public and editorial Entity facts from official sites, public materials, content intentionally made public, and Meridian review.
Purposes and legal bases
Each purpose has its own applicable basis; consent for one purpose is not bundled into every processing activity.
- Contract/service delivery: accounts, profiles, Search, Collections, Connections, and personalization.
- Consent: optional analytics and any future marketing or transfers that legally require separate consent.
- Legitimate interests or security: abuse prevention, troubleshooting, account protection, and proportionate product improvement.
- Legal obligation and claims: lawful requests, necessary audit evidence, and disputes.
Public, Members, and Private
Every persona profile starts Private. Public fields appear only after an explicit Public choice and through an allowlisted projection; Members is limited to signed-in members and is not a public webpage.
Clerk IDs, locale, onboarding needs, a Founder's fundraising status, private collections, connections, notifications, privacy requests, and permissions never enter the public profile.
Editorial Investor, Accelerator, and other Entity records are separate from account profiles. You may request correction or report stale information; account deletion does not automatically erase independently sourced editorial facts with a valid public-interest basis.
Providers and international processing
Core providers are Clerk (authentication), Supabase (application data), and Cloudflare (runtime, CDN, DNS, and potentially R2 later). Email or analytics vendors receive minimum data only when actually configured. Meridian does not sell personal information or use it for cross-context behavioral advertising.
Cross-region service may process information outside your location. Before launch, Meridian will document locations, recipients, purposes, safeguards, and transfer mechanisms. Separate consent or assessments will not be bundled into general terms where required.
Retention
Information is retained by purpose, then deleted, anonymized, or restricted.
- Analytics choices last up to 365 days and events up to 395 days.
- Security logs target 90 days; export artifacts expire after 7 days.
- Minimum privacy-request evidence targets 1095 days.
- Account content remains while the service is used and is removed from active systems after confirmed deletion. Backups expire under the recovery policy, and completed deletions must be replayed after a disaster restore.
Your rights and requests
Depending on where you live, you may have rights to notice, access, copy/export, correction, deletion, restriction, objection, consent withdrawal, and complaint. Authenticated Privacy Settings will provide export and deletion; before account UI launches or when sign-in is unavailable, use the contact below.
We verify identity with only what is necessary and normally provide exports in a structured, machine-readable format. Deletion can have legal, security, anti-fraud, expression, or claims exceptions; where full deletion is unavailable, we explain why and restrict other processing.
Contact and complaints
Contact lucasjin.work@gmail.com for privacy requests. Meridian will provide convenient request methods and will not reduce service because you exercise a privacy right. You may also complain to a competent regulator in your location.