Privacy Policy

Data We Collect

• User Queries & Interactions: We store user queries and interactions to improve our services, provide better responses, and enhance the user experience. This data is used solely for the purpose of service improvement and is handled in accordance with our data protection policies.
• Metadata: We collect timestamps, IP addresses, device/browser details, and related metadata for security and analytics purposes.
• User-Uploaded Content: Documents, text input, videos, and related data uploaded or provided by users for processing and interaction. We strongly recommend scrubbing any personally identifiable information (PII) from content before uploading.
• Payment Information: Billing is handled by Stripe; we do not store payment details.
• Model Training: We use third-party model providers (see the subprocessor list in Section 3) under terms that do not train their models on your content, and we do not use customer data to train or fine-tune models.

• Uploaded Content & Generated Responses: Retained until the user deletes them.
• Account Deletion: When a user requests account deletion, their uploaded content and generated responses are permanently deleted. However, logs, analytics, and metadata may be retained for operational, security, and compliance reasons.

We do not sell user data. We share data with the service providers (subprocessors) below only as necessary to operate the service. Each processes data for the stated purpose under its own terms. Each provider name links to its data-processing terms.

• Hosting & Storage: Amazon Web Services (AWS) for application hosting, database, and file storage.
• Authentication: Google and Microsoft for single sign-on and identity.
• Model Providers: OpenAI, Anthropic, Google, and Mistral process your content and queries to generate answers, lessons, and quizzes. We do not permit these providers to train their models on your content.
• Transcription & Voice: AssemblyAI and Deepgram (speech-to-text) and ElevenLabs (voice) process the audio and video you provide.
• Media Delivery: Cloudflare for video streaming, image delivery, and related processing.
• Email & SMS: Resend (email) and Twilio (SMS) for transactional and notification messages.
• Payments: Stripe for billing and subscriptions. We do not store payment card details.
• Analytics & Monitoring: Mixpanel and GrowthBook (product analytics and feature flags) and Sentry (error monitoring, which may include session diagnostics).
• Integrations You Connect: If you choose to connect them, Confluence and Slack exchange data to import or sync the content you authorize.

• Data Encryption: Data is encrypted in transit. Sensitive data, such as passwords, is encrypted at rest.
• Breach Notification: In the event of a data breach, affected users will be notified within 72 hours of discovery.
• Compliance: We do not currently claim compliance with GDPR, CCPA, HIPAA, or other regulatory frameworks.

• Data Access: Users can log in to view their generated training content but cannot export data at this time.
• Account & Data Deletion: Users may request account deletion by contacting us.

• Cookies: We use cookies and similar browser storage for authentication and for product analytics.
• Third-Party Tracking: We use Mixpanel and GrowthBook for analytics and Sentry for error monitoring, which may collect usage and browsing data.

• Model Training: We do not use customer data to train or fine-tune models, and our model providers do not train on your content.
• Risk Mitigation: Mereon does not automate decision-making processes. Generated outputs are for informational purposes only, and users are responsible for verifying content before application.

For privacy-related inquiries, contact us.

Mereon reserves the right to update this Privacy Policy. Changes will be posted on this page.

By using Mereon, you acknowledge and agree to this Privacy Policy.