Meridias

Privacy Policy

Privacy Policy

This policy explains how Meridias collects, uses, and protects your information.

1. Our Role: Data Controller and Processor

Meridias Ltd. is the data controller for the account, contact, and usage information described in this policy. For the documents and content you submit for processing, Meridias acts as a data processor on your behalf, processing that content solely to deliver the service you requested.

2. Information We Collect

We collect information you provide directly, such as account and contact details, along with usage data generated as you interact with the Meridias platform, including metadata about each request such as timing, latency, and the provider used. Documents and content you submit are processed transiently to fulfill your request and are not stored by Meridias.

3. How We Use Information

We use collected information to operate and improve the service, route requests to third-party OCR and document AI providers, monitor performance, generate migration recommendations, and communicate with you about your account. Provider evaluation and benchmarking are performed separately using Meridias' own evaluation datasets, not the content of your submitted documents, and are refreshed when a new provider API or model is released or at least monthly.

4. Legal Basis for Processing

We process account and contact information to perform our contract with you, submitted content to deliver the service you requested, and usage data on the basis of our legitimate interest in operating, securing, and improving the platform.

5. Third-Party AI Providers and Sub-processors

When you route requests through Meridias, the documents and content you submit are transmitted to third-party OCR and document AI providers selected by Meridias for processing. Meridias does not store the documents or content you submit; they are transmitted for processing and are not retained on our systems beyond the time required to complete the request. These providers act as sub-processors and are contractually bound to process your content only as necessary to perform the requested processing. A current list of the third-party AI sub-processors we use is available on request.

6. Sharing of Information

We do not sell your personal information. Beyond the third-party providers described above, we may share information with service providers who assist in operating the platform, such as hosting and infrastructure providers, under confidentiality obligations.

7. Data Retention

We do not store the documents or content you submit for processing; they are retained only transiently to fulfill your request. We retain account, contact, and usage information, including metadata about each request such as timing, latency, and the provider used, for the duration of your account relationship and for a limited period afterward as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized.

8. International Data Transfers

Meridias and the third-party providers we route to may process information in countries other than your own, including outside the UK or European Economic Area. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses.

9. Security

We implement technical and organizational measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction. In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

10. Your Rights and Choices

Depending on your location, you may have rights under laws such as the UK GDPR or CCPA to access, correct, delete, or port your personal information. You may exercise these rights by contacting us through the channels listed below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or another relevant supervisory authority. If your personal data appears within content processed on our platform on behalf of one of our customers, please contact that customer directly, as they are the data controller for that information.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain sessions and remember preferences.

12. Order of Precedence

If you have a separately executed data processing agreement or other written agreement with Meridias that expressly governs the processing of personal data, that agreement will take precedence over this policy to the extent of any conflict.

13. Changes to This Policy

We may update this privacy policy from time to time. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us through the channels listed on our website.