Privacy Policy

1. Information We Collect

Account information: When you register, we collect your username, email address, and password (stored securely using hashing).

Profile data: Through conversations with our AI mentor, we collect information you share about your background, education, work experience, career interests, constraints, and preferences. This is stored as structured profile data to personalize your experience.

Conversation data: We store the messages you exchange with our AI mentor, including onboarding conversations, career discovery sessions, and skill taster interactions.

Usage data: We collect information about how you interact with skill tasters, including your responses to exercises and time spent on modules.

2. How We Use Your Information

We use your information to:

• Provide personalized career recommendations and guidance
• Generate tailored skill tasters based on your background and interests
• Maintain context across conversations so your AI mentor can reference previous interactions
• Improve the quality and relevance of our AI-generated content
• Communicate with you about your account (e.g., welcome emails)

3. AI Processing

Your profile data and conversation history are sent to our AI provider (Anthropic's Claude) to generate personalized responses. This data is used solely for generating your recommendations and is subject to our AI provider's data handling policies.

4. Data Sharing

We may share your information only in the following limited circumstances:

• AI processing: With our AI provider (Anthropic) as necessary to provide the service
• Legal requirements: If required by law, regulation, or legal process
• Safety: To protect the rights, safety, or property of Meridian, our users, or the public

5. Data Security

We implement reasonable security measures to protect your information, including:

• Passwords are hashed and never stored in plain text
• Authentication via secure HTTP-only cookies with JWT tokens
• CORS restrictions limiting access to authorized origins

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. Conversation histories may be summarized over time to manage storage, but key information is preserved in your profile. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing of your data

To exercise these rights, contact us at hello@meridian.dev.

8. Children's Privacy

Meridian is not intended for children under 16. We do not knowingly collect information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

9. Cookies

We use essential cookies only — specifically HTTP-only authentication cookies to keep you signed in. We do not use tracking cookies or third-party analytics cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our platform. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions or concerns, contact us at hello@meridian.dev.