Privacy Policy

1. What We Collect

We collect the following categories of information when you use Meridian Arc:

• Account data: email address, name, and account preferences you provide during onboarding
• Goal and journal data: objectives, outcomes, journal entries, and confidence scores you enter
• Usage data: sweep history, signal reads, and feature interactions
• Device data: IP address, browser type, and session metadata (via Supabase Auth)

We do not collect payment card data directly — this will be handled by Stripe when billing is enabled.

2. How We Use Your Data

We use your data to:

• Provide, personalize, and improve the Meridian Arc service
• Run AI sweeps and generate confidence scores for your goals
• Send transactional emails (sweep reports, confidence alerts)
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. How We Share Your Data

We do not sell your personal data. We share data only with:

• Supabase: database and authentication (data stored in US-East region)
• OpenAI / Anthropic: AI models used to analyze sweep signals (your goal context may be included in prompts)
• Resend: transactional email delivery
• Vercel: hosting and edge infrastructure

Each third party is bound by their own privacy policies and data processing agreements.

4. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it by law.

5. Security

Your data is stored securely in Supabase with row-level security policies. All data in transit is encrypted via TLS. We do not store passwords — authentication is managed by Supabase Auth.

No system is perfectly secure. If you discover a security issue, please report it to jason@solvega.ai.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to restrict or object to its processing. To exercise any of these rights, contact us at jason@solvega.ai.

7. Cookies

Meridian Arc uses cookies and local storage solely for session management (Supabase Auth tokens). We do not use third-party advertising or tracking cookies.

8. Children

Meridian Arc is not directed at children under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy at any time. The updated version will be posted at this URL with a revised “Last updated” date. Your continued use after a change constitutes acceptance.

10. Contact

Questions about this Privacy Policy? jason@solvega.ai