Theta Meridian™

Privacy Policy

Theta Meridian — Privacy Policy Effective Date: June 8, 2026 Last Updated: June 6, 2026

This Privacy Policy explains what data Theta Meridian, LLC ("we," "us") collects when you use Theta Meridian, how we use it, and the rights you have over it.

1. What We Collect

We collect:

  • Account information — name, email address, password hash, and billing details.
  • Content you create — documents, conversations with AI agents, files you upload, and outputs you generate within the Service.
  • Usage data — log files, IP address, browser type, pages visited, timestamps, and feature interactions. This helps us debug and improve the Service.
  • Payment information — handled by Stripe; we do not store your full card number on our servers.

2. How We Use Your Data

We use your data to:

  • Operate the Service (storage, display, AI processing).
  • Bill you and prevent fraud.
  • Communicate with you about your account and the Service.
  • Improve the Service by analyzing aggregate usage patterns.

3. We Do Not Train AI Models on Your Content

This is a core promise. Your conversations with agents, the documents you upload, and the work you produce in the Service are not used to train AI models — ours or anyone else's. Your work is your intellectual property. We process it to deliver the Service to you. We do not mine it.

4. Third Parties We Share Data With

We use a small number of vendors to operate the Service. Each one processes only the data necessary for its function, and none of them are permitted to use your data for their own purposes:

  • Supabase — database and authentication infrastructure.
  • Vercel — application hosting and content delivery.
  • Anthropic — AI model provider for agent conversations. Anthropic's API terms prohibit training on customer data.
  • OpenAI — AI model provider for voice and embeddings. OpenAI's API terms prohibit training on customer data.
  • Stripe — payment processing and subscription management.
  • Resend — outbound transactional email.

We do not sell your data. We do not share it with advertisers.

5. How Long We Keep Your Data

  • Active account data: kept while your account is active.
  • After cancellation: your content remains available for export for at least 30 days, and is deleted from our active systems no later than 90 days after cancellation. Residual copies in encrypted backups are purged on our regular backup-rotation cycle.
  • Billing and tax records: kept for 7 years to meet legal obligations.
  • Aggregated, non-identifying usage data: kept indefinitely.

6. Your Rights

You can:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and your content.
  • Export your content in a portable format.
  • Object to specific uses of your data.

To exercise any of these rights, email support@thetameridian.com. We respond within 30 days.

7. Security

We use industry-standard practices: encrypted transport (HTTPS), encrypted storage at rest, access controls, and audit logs. No system is perfectly secure. We will notify you promptly if a breach affects your data.

8. Children

The Service is not for children under 18. We do not knowingly collect data from anyone under 18.

9. International Users

The Service is operated from the United States and is intended for users in the United States. We do not currently offer it to residents of the EU, EEA, UK, or Switzerland, and our data practices are not designed for compliance with the GDPR or UK GDPR. If you access the Service from outside the U.S., you do so on your own initiative and are responsible for compliance with local law. Your data is transferred to and processed in the U.S.

10. Changes

We may update this Policy. Material changes will be announced by email at least 14 days before they take effect.

11. Contact

Privacy questions: support@thetameridian.com