Privacy, with care.

Meridian stores professional account details, customer-supplied client and property records, documented contact permissions, reviewed messages, homeowner conversation requests, and follow-up history to provide the workspace.

Your records and permissions

Import only records you and your company are authorized to use. Data import rights, email contact permission, and a homeowner’s permission to share a conversation request are recorded separately. An opt-out pauses outreach and invalidates approved drafts. The minimum suppression record is retained to prevent recontact.

Private by default

Account access uses code-free email verification or configured Google sign-in. Sessions are stored in PostgreSQL with protected cookies. Each account’s records are scoped to that account. No credit reports, income documents, Social Security numbers, live valuation feeds, or automated SMS are collected. Outreach message drafting uses your entered facts.

Optional device notifications

Your private inbox shows workspace follow-ups and homeowner requests, including whether you have read or dismissed an update. If you enable device notifications, Meridian stores that browser’s push endpoint, encryption keys, and your notification preferences. The browser’s push service delivers encrypted reminders with general lock-screen text; client names and financial details remain inside your workspace.

Notifications require your explicit permission. In Settings, turn off this device to remove its connection, or pause push for all connected devices. On a shared device, turn off its notifications before signing out. The notification worker does not cache private pages or client records for offline use.

Optional email reminders and saved preferences

If you enable workspace email updates, Meridian uses Resend to send a daily reminder to your verified sign-in email when follow-ups or homeowner requests need attention. These reminders contain counts and a workspace link, without client names or financial details. Delivery records support retry and duplicate prevention. You can turn email reminders off in Settings or through the unsubscribe link in a reminder. Sign-in emails remain available. These reminders do not send outreach to your clients.

Display, workspace, and notification choices are saved to your account. Account & security shows your active browser sessions and lets you sign out other devices. No session credentials are displayed.

Providers and retention

Remember this stores the notes, transcripts, source dates, goals and follow-ups you review and save. Selected email and calendar files are read in your browser; only the selected text you submit enters Meridian. These imports do not connect or synchronize an inbox or calendar.

When voice transcription is configured and you explicitly choose it, the selected audio is sent to OpenAI for transcription. Meridian does not retain the audio. Optional AI capture suggestions send only the text and source context you submit to OpenAI after your consent; they do not upload your client database. Transcripts and suggestions may be inaccurate and require your review before saving. OpenAI handles this processing under its API data policies; provider retention can apply. Saving a replacement note retains the earlier note as superseded.

When you choose to connect Google Contacts or Microsoft Outlook, Meridian reads contact names, email addresses and phone numbers into a private review list. You choose which contacts to import and which later changes to apply. Connection credentials are encrypted on the server. This connection does not access your email messages or calendar and does not send messages. Disconnecting deletes the connection credentials and review list; contacts already imported remain in your workspace. You can also revoke Meridian’s access in your provider’s account settings.

The hosted workspace is designed for Railway with PostgreSQL storage. Stripe handles subscription payment information when configured; card details do not enter Meridian. Records remain stored when a trial or subscription ends. An automatic long-term deletion schedule is not yet enabled in this pilot.

Access, correction, and deletion

Export your customer-supplied records in Settings, including after paid access ends. Record a correction or deletion request in Settings for fulfillment by Lighthouse. Deletion requests are queued rather than executed immediately. Contact your named professional for homeowner-record questions. For privacy, correction, or deletion questions, email meridianapp@lighthousecompanies.pro. A retention process still requires review before public launch.

Homeowner choice

A conversation link exposes the professional’s identity and request form, not the client’s loan or property estimate. A request shares only the fields shown in its confirmation. Homeowners can cancel open requests or stop further messages through that link.