Privacy policy · Meridio

1.What this policy covers

In short: What we collect, why, who handles it for us, how long we keep it, and how to delete it.

This policy explains what information we collect when you use the Meridio website and calling service, what we do with it, which companies handle it for us, how long we keep it, and what you can ask us to do. It goes together with our terms of service.

“You” means the person using Meridio: the account owner who signed up, or a team member the owner added. “Leads” means the people you put in your CRM.

2.What we collect

In short: Your account details, your billing details, the leads and calls you put in, and a little technical data to keep things working.

Your account: your name, email address, password (stored scrambled, never readable by us), time zone, calendar hours, how you meet clients, and the choices you make in Settings.
Billing: the name on your card and your billing address. Your card number goes straight to our payment processor and never touches our servers; we keep only the card brand and its last four digits so you can recognize it.
Your leads and your work: the leads you add or import (names, addresses, phone numbers, ages, notes, tags), documents you attach, policies and replacements you record, appointments, tasks, call lists, routes, your Do Not Call list, and scanned mail pages you upload to the Direct Mail Extractor.
Calls: for every call, who was called, from which of your numbers, when, how long, and the result you logged. If you turn recording on, the recording of that call. Voicemails left for you. Your business name request, if you make one.
Technical details: a login cookie, your internet address (to stop password guessing and abuse), the browser you use, and short error reports when something breaks (with names, numbers and ids blanked out).
Your location: only when you press a feature that needs it (Nearby, calling order by distance, routes), used right then to sort or map leads, and not stored.

3.How we use it

In short: Only to run Meridio for you, bill you, support you and keep it safe. We never sell your data or show ads.

We use this information to:

run the CRM for you: keep your leads, place calls, count minutes, show your calendar and history;
bill you and send receipts, reminders and account notices by email;
answer your questions and help you when something doesn't work;
keep Meridio safe: stop password guessing, abuse and fraud, and fix errors;
understand how features are used so we can improve them.

We do not sell your information, share it with advertisers, or use your leads for anything other than running your CRM.

4.Who handles it for us

In short: A few service companies (hosting, payments, phone, email, AI reading) see only what they need to do their job.

A few service companies do part of the work, under contracts that limit them to that job. Each one sees only what it needs:

Hosting, database and file storage (in the United States): where the website runs and where your data, documents, recordings and backups are stored.
Payment processor: handles your card, charges and refunds. It sees your card and billing details; we don't.
Phone carrier: provides your phone numbers and carries your calls. Call details, recordings and voicemails pass through it, and it keeps its own call records as phone companies must.
Email delivery service: sends the emails Meridio sends you (password links, receipts, notices).
AI reading service: when you use the Direct Mail Extractor, the scanned pages are sent to an AI service to read the handwriting and print. Only those pages are sent, only when you use the feature, and the service doesn't keep them to train its models.
Uptime monitor: checks every few minutes that the site answers. It sees no personal data.

Meridio's own staff can see your account details (plan, minutes, numbers, invoices, who is on your team) to support you and to approve business names. We may also share information when the law requires it, to protect someone's safety, or if Meridio is sold to another company (you'd be told).

5.Your leads' information

In short: The people in your CRM are your customers. You decide what goes in; we keep it for you and help you honor their requests.

The information about your leads is yours: you decide what goes in, and you are responsible for having the right to collect it, keep it and contact them. We process it only on your behalf.
If a lead asks you what you have about them, or asks to be removed, you can look them up, export, update or delete them yourself. Email us if you need help.
Leads you delete stay in the Trash for 15 days (so a mistake can be undone), then they are removed for good.

6.How long we keep it

In short: While your account exists. Trash 15 days, recordings 30 days, backups 14 days, error reports 90 days.

Your account and your leads: as long as your account exists. A canceled account is locked, not deleted, so you can come back; email us to have it deleted for good.
Trash: 15 days. Call recordings: 30 days, then deleted (you can delete one sooner). Voicemails: while your account exists. Backups: 14 days. Error reports: 90 days after they were last seen.
Call records (who, when, how long, minutes used) are kept while your account exists, because they are your billing history.
Sign-up and billing records may be kept after deletion for as long as tax and accounting rules require.

7.Your choices

In short: Export everything any time, delete leads and recordings yourself, and email us to delete your whole account.

See and take your data: the account owner can download everything as spreadsheets any time in Settings → Your data, and export leads from the Leads page.
Fix it: change your name, email, password and settings in Settings → Profile; edit any lead any time.
Delete it: delete leads, documents and recordings yourself. To delete your whole account and everything in it, email us from the account's email address; we do it within 30 days, and the last backup copy rolls off 14 days later.
Emails: while you have an account we send only account emails (password links, receipts, reminders, notices); there is no newsletter to unsubscribe from.

8.How we protect it

In short: Encrypted connections, hashed passwords, each account walled off, nightly backups, and alerts when something breaks.

Every connection to Meridio is encrypted (the padlock in your browser).
Passwords are stored scrambled with a one-way method; we can't read them.
Each account's data is walled off: nobody can reach another account's leads, calls or files.
Backups are made every night; repeated wrong passwords and unusual traffic are slowed down and reported.
No system is perfect. If we learn of a breach that affects you, we'll email you about it as soon as we can.

9.Cookies

In short: One cookie that keeps you logged in. No advertising or tracking cookies.

Meridio sets one cookie, which keeps you logged in. We don't use advertising cookies or tracking analytics. The card form on the signup and billing pages is provided by our payment processor and may set its own cookies to prevent fraud.

10.Age

In short: Meridio is for working insurance agents, 18 and over.

Meridio is made for working insurance agents and their teams. You must be 18 or older to have an account. We don't knowingly collect information about children.

11.Changes to this policy

In short: We change the date at the top and email you about anything important.

When we change this policy we change the date at the top. For a change that matters to you, we'll email the account owner too. Using Meridio after that means you accept the updated policy.

12.Contact us

In short: Email us with any question or request about your data.

Questions, requests about your data, or a deletion request: email meridiocrm@gmail.com.