Effective date: August 29, 2026

Meridth, LLC (“we,” “us”) operates the website meridth.io and builds software applications (together, the “Services”). This policy explains what information we collect across our website and the applications we create, how we use it, and the choices you have. We collect the minimum we need to operate the Services, and we do not sell your personal information. Individual applications may publish their own privacy policy with application-specific detail; where one exists, it supplements this policy.

Information We Collect

Information you provide.

• Contact information — your name and email address when you email us or schedule a meeting with us.
• Account information — when an application we create offers accounts: your email address and authentication credentials. Our applications use modern authentication (such as passkeys, or passwords with optional two-factor authentication); passwords are stored only as secure hashes.
• Application data — the content you enter into an application to use it, such as records, preferences, and settings.

Information collected automatically.

• Usage data — we use Google Analytics on meridth.io to understand aggregate site traffic. Your browser’s IP address and pages visited are processed as described in Google’s privacy policy.
• Logs — our servers record standard technical logs (IP address, timestamps, requested pages) for security and troubleshooting, retained for 90 days.

Financial account information.

Where an application we create offers financial account connectivity, it is provided through a dedicated third-party provider such as Plaid Inc.:

• You authenticate directly with your financial institution through the provider. We never receive or store your bank username or password.
• The provider gives us only the data needed to power features you use, which we use solely to provide the application’s functionality to you.
• The provider’s handling of your information is governed by its own policy — for Plaid, the Plaid End User Privacy Policy.
• You can disconnect a linked account at any time within the application, which removes the connection and invalidates the associated access tokens.

How We Use Information

We use your information to provide and improve the Services, respond to your inquiries, secure our systems, and meet legal obligations. We do not use your data for advertising, and we do not sell or rent personal information to anyone.

How We Share Information

We share information only with service providers that help us operate the Services — such as Google (email, analytics), financial connectivity providers like Plaid, email delivery providers, and our hosting providers — each acting under their own contractual and legal obligations, and only as needed to deliver the Services. We may also disclose information if required by law or to protect the rights, safety, or property of our users or the public.

Data Retention and Deletion

We retain personal data only as long as needed for the purposes above or as required by law. Application account data is deleted within 30 days of account deletion or a verified deletion request, and linked financial connections are removed immediately when you disconnect them. Details are in our Data Retention and Disposal Policy, available on request.

Security

We protect your information with TLS encryption in transit, full-disk encryption on company devices, multi-factor authentication on our systems, and least-privilege access controls. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard practices.

Your Rights

You may request access to, correction of, or deletion of your personal information by emailing [email protected]. We will verify your request and respond within 30 days. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to This Policy

We will post any changes to this policy on this page and update the effective date above. Material changes to how an application handles your data will be communicated in that application or by email.

Contact

Meridth, LLC — San Antonio, TX Email: [email protected] Privacy and security contact: Jason Meridth, CEO/Principal Consultant ([email protected])