Privacy Policy

Information We Collect

Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.

"Voluntarily provided" information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.

"Automatically collected" information refers to any information automatically sent by your devices in the course of accessing our products and services.

Log Data

When you visit our website, our servers may automatically log the standard data provided by your web browser. It may include your device’s Internet Protocol (IP) address, your browser type and version, the pages you visit, the time and date of your visit, the time spent on each page, and other details about your visit.

Additionally, if you encounter certain errors while using the site, we may automatically collect data about the error and the circumstances surrounding its occurrence. This data may include technical details about your device, what you were trying to do when the error happened, and other technical information relating to the problem. You may or may not receive notice of such errors, even in the moment they occur, that they have occurred, or what the nature of the error is.

Please be aware that while this information may not be personally identifying by itself, it may be possible to combine it with other data to personally identify individual persons.

Device and Technical Data

When you visit our website or interact with our Services, we and our service providers may automatically collect technical information such as:

• device type;
• operating system;
• browser type and version;
• Internet Protocol (IP) address;
• device or browser identifiers;
• pages, features, and functions accessed;
• dates, times, and duration of activity;
• referring pages or sources; and
• diagnostic, performance, security, and error information.

Some service providers may infer an approximate geographic region from an IP address for purposes such as security, fraud prevention, analytics, or service operation. MeridianHub does not seek to collect precise GPS or similarly precise geolocation through ordinary use of the Services unless a feature expressly tells you otherwise.

Personal Information

We may collect personal information that you provide directly to us or that is provided in connection with your use of the Services, including:

• name;
• email address;
• account and authentication information;
• business or professional information, such as company or brokerage name, professional role, title, and business contact information;
• subscription, billing, and transaction information, such as your selected plan, subscription status, invoices, transaction identifiers, and billing contact information;
• communications with MeridianHub, including support requests and other correspondence; and
• information you choose to provide through the Services.

Payment card information is processed by our payment processor. MeridianHub does not need to receive or store your complete payment card number in order to provide subscription billing.

The Services also allow customers and Authorized Users to process information concerning real estate leads, clients, transactions, properties, projects, investors, contractors, collaborators, vendors, and other persons as Customer Content, as described below.

We do not require a date of birth or gender as part of an ordinary MeridianHub account unless a particular future feature clearly requires that information and we update our practices and disclosures accordingly.

Customer Content and Information Processed for Customers

MeridianHub is a business software platform. Customers and Authorized Users may submit, upload, store, generate, or otherwise process information through the Services, including information relating to leads, clients, customers, transactions, properties, projects, investors, contractors, collaborators, vendors, documents, communications, and other business records ("Customer Content").

Customer Content is generally private to the applicable customer, Account, Team, Organization, project, or other authorized workspace according to the permissions configured within the Services. MeridianHub does not treat private Customer Content as content submitted for public publication merely because it is stored or processed through the Services.

When a business customer uses MeridianHub to process personal information about another individual, such as a lead, client, investor, contractor, or collaborator, the business customer generally determines why that information is collected and how it is used. To the extent applicable under privacy law, MeridianHub processes such information on behalf of that customer as a service provider or processor.

If your personal information was entered into MeridianHub by one of our customers and your request concerns that customer's use of the information, we may direct you to the applicable customer where appropriate.

Public Forms and Shared Information

Certain MeridianHub features may allow a customer to operate a public form, lead-capture page, sharing link, or other intentionally public or externally accessible feature.

If you submit personal information through a public form or page operated for a MeridianHub customer, the information you submit may be provided to and used by that customer. The customer's own privacy obligations and notices may also apply to its use of your information.

Information does not become public merely because it is stored in MeridianHub. It becomes externally accessible only where a user intentionally uses a feature designed to make that information available to others.

Reasons We Process Personal Information

We collect and process personal information only where we have an appropriate business or legal reason to do so.

Depending on the circumstances and applicable law, these reasons may include:

• providing and performing the Services you or a customer requested;
• creating, authenticating, and maintaining Accounts;
• administering subscriptions, billing, Teams, Organizations, Seats, and permissions;
• carrying out a customer's or user's instructions;
• providing customer support;
• securing the Services and preventing fraud, abuse, and unauthorized access;
• maintaining, troubleshooting, analyzing, and improving the Services;
• communicating with users about the Services;
• complying with legal obligations and lawful requests;
• establishing, exercising, or defending legal rights; and
• processing information with consent where consent is required.

We seek to collect and use personal information that is reasonably necessary and appropriate for these purposes.

Collection and Use of Information

We may collect personal information when you:

• visit or use our website;
• register for, sign in to, or use an Account;
• purchase, manage, or cancel a Subscription;
• join or administer a Team or Organization;
• send or accept an invitation;
• use Agent or Developer workflow features;
• enter, upload, generate, or otherwise process Customer Content;
• use an integration or Third-Party Service connected with MeridianHub;
• use an AI-Assisted Feature;
• submit information through a public MeridianHub-powered form;
• communicate with us for support, billing, security, or other purposes; or
• otherwise interact with the Services.

We may collect, hold, use, and disclose personal information for purposes including:

• providing, operating, maintaining, and securing the Services;
• creating and authenticating Accounts;
• maintaining permissions and authorized access;
• administering subscriptions, payments, billing, Seats, Teams, and Organizations;
• processing Customer Content according to customer and user instructions;
• delivering communications, notifications, and customer support;
• preventing fraud, abuse, unauthorized access, and security incidents;
• diagnosing errors and monitoring reliability and performance;
• measuring use of the Services and understanding how features are used;
• developing, testing, and improving our Services;
• maintaining internal business and financial records;
• enforcing our Terms and other policies;
• complying with applicable legal requirements;
• responding to lawful requests and resolving disputes; and
• protecting the rights, property, safety, and security of MeridianHub, our customers, users, and others.

We may combine information collected from different interactions with the Services where reasonably necessary for these purposes and permitted by applicable law.

We do not use private Customer Content to publicly advertise or publish a customer's private CRM or project information.

AI-Assisted Features

MeridianHub may offer optional features that use artificial intelligence or machine-learning technologies.

When you choose to use an AI-Assisted Feature, information necessary to perform the requested function may be transmitted to a third-party AI service provider. This information may include Customer Content that you submit and Customer Content from records your Account is already authorized to access, where that content is relevant to the requested function.

We use AI service providers to support the requested feature and related technical operation. We do not represent AI-generated output as guaranteed to be accurate, and users are responsible for reviewing AI-assisted outputs as described in our Terms.

We do not use AI-Assisted Features to make autonomous legal, credit, housing eligibility, employment, lending, or similarly consequential decisions on behalf of users.

Additional information about service providers and data processing may be provided in this Privacy Policy or related notices where appropriate.

Security of Your Personal Information

When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorised access, disclosure, copying, use or modification.

Although we will do our best to protect the personal information you provide to us, we advise that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security.

You are responsible for selecting any password and its overall security strength, ensuring the security of your own information within the bounds of our services. For example, ensuring any passwords associated with accessing your personal information and accounts are secure and confidential.

How Long We Keep Your Personal Information

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain an Account or Subscription, satisfy customer instructions, secure our systems, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary depending on the type of information, why it was collected, whether it belongs to an individual or shared Team or Organization workspace, applicable legal or contractual requirements, and whether continued retention is reasonably necessary for security, financial, audit, fraud-prevention, dispute-resolution, or similar purposes.

When an Account is deleted, personal information associated solely with that Account may be deleted or anonymized through our deletion process. Information belonging to or shared with a surviving Team, Organization, or project may remain where appropriate to preserve that shared workspace and the rights of other authorized users.

Where an Account owner leaves a shared Team or Organization, certain shared information may remain during an applicable ownership-transfer or ownerless claim period as described in our Terms.

We may retain limited records after deletion where reasonably necessary or permitted for legal compliance, financial and audit records, fraud and abuse prevention, security, dispute resolution, enforcement, and suppression of marketing communications.

When personal information is no longer reasonably necessary for an applicable purpose, we will delete, anonymize, or otherwise dispose of it as appropriate, subject to applicable law.

Children's Privacy

MeridianHub is intended for adults and business professionals and is not intended for individuals under 18 years of age, or below the age of majority applicable to use of the Services where higher.

We do not knowingly permit individuals below the applicable minimum age to create or use MeridianHub Accounts.

If we learn that personal information has been provided directly to us by an individual who is not permitted to use the Services, we may take appropriate steps to delete or restrict that information in accordance with applicable law.

Disclosure of Personal Information

We may disclose personal information where reasonably necessary to operate MeridianHub or for the purposes described in this Privacy Policy.

Recipients may include:

• cloud hosting and infrastructure providers;
• database, storage, and authentication providers;
• payment processors and billing providers;
• email and communications service providers;
• analytics providers;
• error monitoring, logging, reliability, and performance providers;
• security, fraud-prevention, abuse-prevention, and network providers;
• AI service providers when a user chooses to use an AI-Assisted Feature;
• professional advisers where reasonably necessary, such as legal, accounting, tax, insurance, or security advisers;
• contractors supporting MeridianHub subject to appropriate confidentiality and access restrictions;
• government authorities, courts, regulators, law enforcement, or other parties where disclosure is required or permitted by applicable law;
• parties involved in investigating or responding to fraud, security incidents, violations of our Terms, or threats to rights or safety; and
• a purchaser, successor, investor, or other relevant party in connection with an actual or proposed merger, financing, acquisition, restructuring, sale of assets, or similar corporate transaction, subject to applicable law.

Where a user intentionally shares information with another Authorized User, Team member, Organization member, External Collaborator, customer, or other recipient through the Services, we disclose the information according to that user's instructions and applicable access permissions.

Our service providers may process personal information only for the purposes for which we make it available to them, subject to applicable contractual and legal requirements.

We do not sell personal information for monetary consideration. We do not currently use personal information for cross-context behavioral advertising or targeted advertising based on activity across unrelated businesses or websites.

International Transfers of Personal Information

MeridianHub is based in the United States. Personal information may be stored or processed in the United States and in other locations where we or our service providers maintain infrastructure or personnel.

Data protection laws in those locations may differ from the laws where you live.

Where applicable law requires safeguards for an international transfer of personal information, we will use appropriate transfer mechanisms or other legally recognized safeguards as required.

Your Rights and Choices

Depending on where you live and which privacy laws apply, you may have certain rights regarding your personal information. These may include rights to:

• request access to personal information we maintain about you;
• request correction of inaccurate personal information;
• request deletion of certain personal information;
• obtain a portable copy of certain personal information;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing where applicable;
• opt out of certain sales, targeted advertising, or profiling where applicable; and
• appeal certain decisions regarding a privacy-rights request where applicable law provides that right.

These rights are subject to exceptions and limitations under applicable law.

You may submit a privacy request using the contact information at the end of this Privacy Policy. We may need to verify your identity before completing certain requests. Where permitted or required by law, an authorized agent may submit a request on your behalf, subject to appropriate verification.

If the information at issue is Customer Content controlled by a MeridianHub business customer, we may direct your request to that customer or assist the customer in responding where appropriate.

Account Information

Certain Account information may be viewable or editable through the Services. Where available, Account deletion may also be requested through Account settings as described in our Terms.

Marketing Communications

You may opt out of promotional marketing emails by using the unsubscribe mechanism contained in the message or by contacting us.

Opting out of promotional marketing does not prevent us from sending necessary non-promotional communications, such as authentication messages, security alerts, billing information, subscription notices, service announcements, or responses to support requests.

Non-Discrimination

Where required by applicable law, we will not unlawfully discriminate against you because you exercised an applicable privacy right.

Data Breaches

We will provide notifications relating to a security breach when and as required by applicable law.

Complaints

If you have a concern about our handling of personal information, please contact us using the information below. Depending on where you live, you may also have a right to contact an applicable privacy regulator or governmental authority.

Use of Cookies and Similar Technologies

We and our service providers may use cookies, local storage, and similar technologies to operate and secure the Services, maintain sessions and preferences, understand use of our website and Services, and perform analytics.

Some technologies are necessary for authentication, security, and core functionality. Other technologies may be optional depending on their purpose and applicable law.

Please refer to our Cookie Policy for additional information about the technologies we use and the choices available to you.

Business Transfers

If we or our assets are acquired, or in the unlikely event that we go out of business or enter bankruptcy, we would include data, including your personal information, among the assets transferred to any parties who acquire us. You acknowledge that such transfers may occur, and that any parties who acquire us may, to the extent permitted by applicable law, continue to use your personal information according to this policy, which they will be required to assume as it is the basis for any ownership or use rights we have over such information.

Limits of Our Policy

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and policies of those sites, and cannot accept responsibility or liability for their respective privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, service providers, or applicable legal or regulatory requirements.

When we update this Privacy Policy, we will post the updated version and revise the effective or last-updated date as appropriate.

If a change materially affects how we process personal information, or if applicable law requires additional notice or consent, we will provide any required notice and obtain consent where required before applying the change.

Where applicable law requires affirmative consent for a new use of personal information, continued use of the Services alone will not substitute for that consent.

Additional Disclosures for U.S. State Privacy Laws

Certain U.S. state privacy laws provide residents with additional rights when the law applies to a particular business and processing activity. This section applies to the extent MeridianHub is subject to such a law with respect to your personal information.

Nothing in this section is intended to represent that a particular state privacy statute applies to MeridianHub where its legal applicability requirements have not been met.

Categories of Personal Information

Depending on how you interact with MeridianHub, we may collect categories of personal information such as:

• identifiers and contact information, such as name, email address, IP address, and Account identifiers;
• business and professional information, such as company, brokerage, role, and business contact details;
• commercial and subscription information, such as plan, subscription status, billing records, and transaction information;
• Internet, network, and electronic activity information relating to use of our website and Services;
• technical, diagnostic, performance, and security information;
• communications with MeridianHub;
• Customer Content you choose to provide or process through the Services; and
• approximate location information that may be inferred from an IP address by us or our service providers.

We do not seek to collect precise geolocation, date of birth, gender, or complete payment-card numbers as ordinary MeridianHub Account information.

Sources of Personal Information

We may obtain personal information:

• directly from you;
• from the customer, Team, Organization, or administrator through which you use MeridianHub;
• from other users who are authorized to provide information through the Services;
• from public forms you choose to submit;
• automatically from browsers, devices, and use of the Services;
• from payment processors and other service providers;
• from authentication or integration providers you choose to connect; and
• where permitted by law, from other legitimate business sources.

Purposes for Processing

We use these categories for the purposes described elsewhere in this Privacy Policy, including providing and securing the Services, authentication, billing, support, communications, analytics, reliability, fraud prevention, legal compliance, and product improvement.

Categories of Recipients

We may disclose these categories of information to the categories of recipients described in the "Disclosure of Personal Information" section, including infrastructure, authentication, payment, email, analytics, monitoring, security, and AI service providers where applicable.

We may also disclose information according to a user's instructions to another Authorized User, Team, Organization, External Collaborator, customer, or intended recipient.

Sale and Targeted Advertising

MeridianHub does not currently sell personal information for monetary consideration and does not currently use personal information for cross-context behavioral advertising or targeted advertising based on activity across unrelated businesses or websites.

If our practices change, we will update our disclosures and provide any opt-out mechanisms required by applicable law before engaging in such processing where required.

Universal Opt-Out Mechanisms

Certain privacy laws may allow individuals to exercise opt-out rights through a recognized universal opt-out mechanism.

Where MeridianHub is legally required to recognize such a mechanism, including Global Privacy Control (GPC) where applicable, we will process the signal as required by applicable law for the browser or device from which the signal is received.

MeridianHub does not currently sell personal information for monetary consideration or use personal information for cross-context behavioral advertising or targeted advertising based on activity across unrelated businesses or websites. If these practices change, we will update this Privacy Policy and implement applicable opt-out mechanisms before engaging in such processing where required.

Privacy Rights

Where an applicable state privacy law grants you rights, those rights may include access, confirmation, correction, deletion, portability, and rights to opt out of certain sale, targeted advertising, or profiling activities.

You may exercise applicable rights by contacting us using the information at the end of this Privacy Policy. We may take reasonable steps to verify your identity and authority before processing a request.

Where required by applicable law, you may also use an authorized agent to submit a request, and you may have a right to appeal a decision we make concerning your request.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

Do Not Track

Some browsers provide a "Do Not Track" setting. There is no single generally accepted industry standard governing how websites must respond to traditional Do Not Track signals, and MeridianHub does not currently respond to traditional Do Not Track signals.

This is separate from legally recognized universal opt-out mechanisms, which we address above where applicable.

Financial Incentives

MeridianHub does not currently offer a financial incentive or price-difference program in exchange for the collection, sale, or sharing of personal information.

Contact Us

For any questions or concerns regarding your privacy, you may contact us using the following details:

MeridianHub Privacy Team support@meridianhub.net

Google Calendar Integration and Google API User Data

Connecting Google Calendar

When you choose to connect a Google Calendar account to MeridianHub, we request your authorization to access certain Google Calendar information and perform supported calendar actions on your behalf.

Depending on the permissions you grant, MeridianHub may access:

• Calendar identifiers, names, time zones, and access permissions;
• Existing calendar events, including event titles, dates, times, locations, descriptions, status, availability, and other information returned by the Google Calendar API;
• Information about attendees, invitations, and responses associated with relevant events; and
• A Google account identifier used to associate and maintain your connection.

Some information returned by Google's APIs may not be displayed in MeridianHub's interface. MeridianHub's Google Calendar connection does not request access to your Gmail messages.

How We Use Google Calendar Information

We use this information to display your calendars and schedules, calculate appointment availability, support booking, create and manage events through MeridianHub, reconcile changes to MeridianHub-managed events, and maintain your authorized connection.

MeridianHub may create, edit, reschedule, or cancel events that it manages on calendars you own. Existing events created outside MeridianHub may be displayed for scheduling purposes without becoming editable through MeridianHub.

Storage, Security, and Sharing

MeridianHub stores information needed to maintain the integration, including connection details, authorized permissions, calendar identifiers, and records of events managed through MeridianHub. These records may contain event titles, locations, notes, dates, times, invited guests, and responses.

General calendar-event information may be retrieved when needed to provide the requested functionality rather than stored as a complete copy of your calendar.

OAuth access and refresh credentials are protected using application-level encryption. Access to stored Calendar information is restricted through applicable authentication, authorization, and database access controls.

We may process Google Calendar information through infrastructure and storage service providers as necessary to operate and secure the integration. Event information may also be transmitted to Google and intended participants when you request an event or invitation. Human access to Google user data is restricted to circumstances permitted by Google's applicable policies, including specific user authorization, security purposes, or legal requirements.

Disconnecting, Retention, and Deletion

You may disconnect Google Calendar through MeridianHub's integration controls.

When you disconnect, MeridianHub attempts to revoke the Google authorization and delete locally stored connection credentials. Technical failures may prevent these operations from completing immediately. You may also independently revoke MeridianHub's access through your Google Account settings.

Certain connection metadata and previously recorded MeridianHub-managed event or booking information may remain subject to our applicable retention practices.

Deleting your MeridianHub Account removes associated local connection and managed-event records through our account-deletion process, subject to applicable retention and backup practices. Account deletion does not itself revoke Google's authorization. Events that already exist in your Google Calendar are not automatically deleted when you disconnect or delete your MeridianHub Account.

Google API Limited Use Compliance

MeridianHub's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the applicable Limited Use requirements.

We do not sell Google API user data or use it for targeted advertising, advertising profiling, creditworthiness determinations, or lending purposes.

We do not use raw, aggregated, anonymized, or derived information received from Google Workspace APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models, or transfer such information to third parties for those purposes.

Google Calendar information obtained through the integration is not automatically provided to MeridianHub's AI-Assisted Features. Information separately submitted by a user to an AI-Assisted Feature is handled according to the AI-Assisted Features section, subject to applicable Google user-data restrictions.

For questions or requests concerning the handling of Google Calendar information, contact support@meridianhub.net.