隐私政策

Welcome to Meridian Protocol ("the Platform" or "we"). We understand the importance of personal information and enterprise business data to you. This Privacy Policy explains how we collect, use, store, share, and protect your data when you visit our website, use our APIs, and related AI generation services. By clicking agree or actually using the Services, you are deemed to have read and agreed to the entire content of this Policy.

We collect the following information only for lawful, legitimate, and necessary purposes: • Account Registration Information: Your email address, display name, and password. • User Input and Business Data (Customer Content): Prompts you enter, uploaded documents, blueprints, images, and system-generated outputs. • Usage and Log Data: Operation logs, IP addresses, device information, browser types, API call frequency, and compute credits consumption records. • Payment Information: Processed by a third-party payment institution (Stripe). We do not directly collect or store your full credit card number, only receiving payment status and necessary billing information.

The information we collect will only be used to: provide, maintain, and improve our core functions and services; process your transactions, manage compute credits, and send billing notices; conduct identity verification, customer service, security prevention, fraud monitoring, archiving, and backups; and comply with applicable laws and regulatory requirements.

We understand the critical importance of trade secrets to our enterprise customers. The Platform provides generation services by calling top-tier third-party Large Language Model APIs (including Google Gemini, Anthropic Claude). We solemnly promise: Meridian Protocol will NEVER use any of your input data (Prompts), uploaded files, or generated business content (Outputs) to train, fine-tune, or improve our foundational AI models. We have executed strict "Zero Data Retention" enterprise agreements with all third-party AI providers, ensuring your data is only processed ephemerally to provide real-time generation services and will never be used by third parties for any model training purposes.

Meridian Protocol is committed to providing global business and compliance AI services. Our core infrastructure is deployed in the Hong Kong Special Administrative Region, China. By using the Services, you explicitly consent to the encrypted transfer and secure storage of your personal information and business data on our cloud servers located in Hong Kong (powered by Vercel and Supabase). We strictly comply with applicable data protection laws (including the PIPL of China) and employ industry-standard security measures (such as TLS 1.3 encryption and Row Level Security data isolation) to ensure the absolute security of your data during cross-border transfer and storage.

To provide you with stable and efficient services, we integrate the following trusted third-party services. These third parties process your data only to the extent necessary to provide their specific services and are bound by strict confidentiality agreements: • Cloud Infrastructure & Storage: Vercel Inc., Supabase Inc. • AI Model Inference: Google LLC, Anthropic PBC, Fal.ai • Payment Processing: Stripe, Inc. • Analytics: Baidu Analytics (Collects only anonymous visit data to optimize website experience, not linked to your identity).

When you actively delete your account or business data, the system employs a "Soft Delete" mechanism to prevent accidental loss. Your data will be isolated from our active database for 30 days after being marked for deletion, and will be permanently physically purged from backup systems after 90 days, unless a longer retention period is required by law.

If you join an "Organization" workspace (e.g., your employer or enterprise) as an "Authorized User" (e.g., an employee), all inputs, outputs, and operation logs generated by you within this workspace are considered data controlled by the "Organization". The administrators of the Organization have the right to access, modify, export, or delete such data, and to restrict or terminate your access. In this scenario, the Platform acts solely as a "Data Processor", and the Organization is the "Data Controller". Any privacy rights requests (e.g., deletion requests) regarding such data should be directed to your Organization's administrator.

Subject to applicable law, you have the following rights regarding your personal data: the right to access, rectification, erasure (right to be forgotten), restriction of processing, and data portability. To exercise these rights, please contact us using the contact information at the bottom of this Policy.

The Platform is primarily intended for enterprises and adult users with full civil capacity. We do not intentionally collect personal information from minors under the age of 18. If you are a minor, please do not register or use the Services.

We may revise this Privacy Policy from time to time. When material changes are made, we will provide prominent notice via pop-ups upon login, site messages, or emails to your registered address. Your continued use of the Services constitutes your agreement to be bound by the revised Privacy Policy.

If you have any questions, comments, or suggestions regarding this Privacy Policy or data security, please contact our privacy compliance team at: privacy@meridian-protocol.com