Privacy Policy

Effective Date: May 16, 2026

Meridian CRE Intelligence LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform. By creating an account or using the Platform, you agree to the practices described in this Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your full name and email address. We collect this information solely for account creation and Platform communication purposes.

1.2 Payment Information

Payments are processed securely through Stripe, Inc. We do not collect, store, or have access to your full payment card number, CVV, or bank account details. We retain only the last four digits of your card and expiration date as provided by Stripe for billing reference purposes. Your payment data is governed by the Stripe Privacy Policy at stripe.com/privacy.

1.3 Uploaded Documents

When you use the AI-Powered Comprehensive Deal Analyzer, you may upload financial documents including offering memorandums, T12 statements, rent rolls, and other property-related files. These documents are:

1. Processed solely to generate your requested analysis
2. Deleted from our servers within 24 hours of upload unless you explicitly save an analysis
3. Never shared with third parties for any purpose
4. Never used to train, fine-tune, or improve AI or machine learning models without your explicit written consent

1.4 Calculator Inputs

Numerical inputs you provide to our calculators are processed solely to generate your requested calculation. This data is not stored unless you explicitly save an analysis to your account.

1.5 Usage Data

We may collect non-personally identifiable usage data such as features accessed, session duration, and general platform activity to improve the Service. This data cannot be used to identify you individually.

1.6 Cookies and Tracking

We use essential cookies necessary for Platform functionality such as maintaining your login session. We do not use advertising cookies, tracking pixels, or third-party behavioral tracking. We use anonymized analytics tools to understand aggregate usage patterns. You may disable cookies in your browser settings, though this may affect Platform functionality.

2. How We Use Your Information

We use the information we collect exclusively for the following purposes:

1. Creating and managing your account
2. Processing your subscription payments through Stripe
3. Sending communications related to your account, billing, Platform updates, and new features
4. Processing your Uploaded Documents to generate requested analyses
5. Responding to your support requests and feedback
6. Improving Platform functionality using anonymized usage data
7. Complying with legal obligations

We will never use your information for advertising, profiling, or any purpose not listed above.

3. What We Do Not Do

Meridian CRE Intelligence LLC explicitly commits to the following:

1. We do NOT sell, rent, or lease your personal information to any third party
2. We do NOT share your name, email, or Uploaded Documents with any third party for any commercial purpose
3. We do NOT use your Uploaded Documents to train AI models without explicit written consent
4. We do NOT display third-party advertising on the Platform
5. We do NOT engage in cross-context behavioral advertising
6. We do NOT store your full payment card details

4. Data Retention Schedule

We retain your data only as long as necessary to provide the Service or as required by law:

1. Uploaded Documents: Deleted within 24 hours of upload unless explicitly saved to your account
2. Saved analysis data (extracted figures): Retained until you delete the analysis or close your account
3. Account information (name and email): Retained while your account is active and for 30 days following account deletion
4. Payment records: Retained for 7 years as required by applicable tax and financial regulations
5. Exported reports: Not stored — generated on demand and not retained on our servers
6. Usage logs: Retained for up to 90 days in anonymized form

5. Data Security

We implement industry-standard security measures to protect your personal information and Uploaded Documents, including:

1. Encrypted data transmission using SSL/TLS protocols
2. Secure server storage with access controls
3. Strict internal access limitations — only personnel who need access to provide the Service may access user data
4. Regular security reviews of our systems and practices

While we take reasonable precautions, no method of transmission or storage is 100% secure. In the event of a data breach affecting your personal information, we will notify you within 72 hours in accordance with applicable California law and take prompt action to mitigate harm.

6. Third-Party Services and Infrastructure

The Platform uses the following third-party infrastructure providers necessary to deliver the Service. These providers are contractually prohibited from using your data for any purpose other than providing their services to us:

1. Vercel — platform hosting and deployment
2. Stripe, Inc. — payment processing
3. Resend — transactional email
4. Supabase — authentication provider

We do not integrate with advertising networks, data brokers, or marketing platforms. The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

7. Your Rights and Choices

7.1 Access and Correction

You may request access to the personal information we hold about you or request correction of inaccurate information at any time by contacting us at invest@meridiancre.net.

7.2 Deletion

You may request deletion of your account and all associated personal information at any time. We will process deletion requests within 30 days. Note that we may retain certain information as required by law, including payment records required by applicable tax regulations.

7.3 Communication Preferences

You may unsubscribe from non-essential communications at any time by clicking the unsubscribe link in any email or by contacting us directly. You will continue to receive essential account-related and billing communications.

7.4 Data Portability

Upon request, we will provide you with a copy of your saved analysis data in a structured, machine-readable format within 30 days.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

1. Right to Know: Request disclosure of the personal information we collect, use, and share
2. Right to Delete: Request deletion of your personal information, subject to certain exceptions
3. Right to Correct: Request correction of inaccurate personal information
4. Right to Opt-Out: We do not sell or share personal information for cross-context behavioral advertising
5. Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA
6. Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your CCPA/CPRA rights, contact us at invest@meridiancre.net with the subject line "California Privacy Request." We will respond within 45 days.

9. GDPR Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

1. Right of Access: Obtain a copy of your personal data
2. Right to Rectification: Correct inaccurate or incomplete personal data
3. Right to Erasure: Request deletion of your personal data
4. Right to Restriction: Request restriction of processing of your personal data
5. Right to Data Portability: Receive your personal data in a structured, machine-readable format
6. Right to Object: Object to processing of your personal data

Our legal basis for processing your personal data is your explicit consent provided at account creation and our legitimate interest in providing and improving the Service. To exercise your GDPR rights, contact us at invest@meridiancre.net. You also have the right to lodge a complaint with your local supervisory authority.

10. Financial Data and GLBA Notice

Because our Platform processes financial documents and produces investment analysis, we may be subject to the Gramm-Leach-Bliley Act (GLBA) Safeguards Rule. In compliance with applicable requirements, we maintain a written information security program, limit access to nonpublic financial information to authorized personnel only, and conduct regular security assessments of our systems.

11. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately at invest@meridiancre.net and we will delete it promptly.

12. Geographic Scope

The Platform is intended primarily for use within the United States. If you access the Platform from outside the United States, you do so at your own risk and are responsible for compliance with all applicable local laws. We make no representation that the Platform is appropriate or available in all jurisdictions.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by email and update the Effective Date at the top of this document. Your continued use of the Platform following notification constitutes acceptance of the updated Policy.

14. Contact Us

For any questions, concerns, or data requests regarding this Privacy Policy or your personal data, please contact us at:

Meridian CRE Intelligence LLC
Email: invest@meridiancre.net
Website: https://meridiancre.net
Mailing Address: 9528 Miramar Rd, #1082, San Diego, CA 92126, United States

We will respond to all privacy-related inquiries within 30 days.