Merchant terms and data processing

Using Meridian

Meridian provides merchant tools for storefront customization, bundle creation, A/B experiments, and related analytics. By installing or using Meridian, the merchant authorizes Meridian to access the Shopify resources and app data needed to provide those features within the scopes granted by the merchant.

The merchant is responsible for its store, offers, customer notices, and for reviewing any generated or automated changes before relying on them in its business.

Data processing for merchants

For the app services, Meridian processes merchant/store information, limited order-level analytics, and consent-aware pseudonymous storefront experiment events as described in the Privacy Policy and Data Protection page. Meridian uses this information to operate, secure, support, and improve the merchant-facing services. Relevant store context and derived performance summaries may be sent to AI providers, whose additional uses are described below.

Meridian does not request customer identity fields such as name, email, phone, or address for its bundle analytics workflows. The merchant remains responsible for providing customer notices and obtaining any permissions required for its own storefront and customer relationship. Meridian remains responsible for its own processing and provider selection obligations.

Security and service providers

Meridian restricts operational access to personnel and service accounts with a need to operate, secure, or support the service. Meridian uses hosting, database, queueing, AI, Shopify, and other service providers. Providers that use AI content for their own training purposes do not necessarily act solely as Meridian's subprocessors.

Meridian uses reasonable technical and organisational measures appropriate to the service, including HTTPS/TLS for production traffic and the encrypted-at-rest controls provided by its production infrastructure providers.

AI features and provider training

Meridian uses third-party AI services, including requests routed through OpenRouter to providers such as Meta. Some services permit those providers to retain and use inputs and outputs to train, develop, evaluate, and improve their own AI models, products, and services. This includes relevant context assembled automatically during onboarding, AI Page Setup, customization, and automated planning, as well as prompts, history, images, screenshots, code, settings, and generated responses.

You must have the rights and authority needed to share any material you supply for those uses. Do not submit personal information, customer information, credentials, sensitive information, or confidential material to training-enabled AI workflows, including through attachments or connected store content. Confidentiality obligations and provider restrictions continue to apply even if you consent to sharing.

Where Shopify terms or applicable law require permission for training use, that permission must be obtained before the affected content is sent. Installing the app, granting Shopify access scopes, or publication of these terms does not by itself establish separate training consent. These terms do not authorize training use of Shopify information outside the scope Shopify permits, waive anyone's privacy rights, or grant rights you do not hold.

If provider training is unacceptable or your content is restricted, contact getmeridian.app@gmail.com before using AI features. Meridian does not promise a training opt-out or a non-training route for every workflow. Do not use an affected AI feature until an eligible processing arrangement is confirmed.

AI outputs may be inaccurate, resemble content generated for others, or contain material subject to third-party rights. Review generated offers, claims, code, and storefront changes before using them, and comply with applicable disclosure and intellectual-property requirements.

Retention and deletion

Meridian applies the retention periods published in its Privacy Policy and Data Protection page. Raw analytics and temporary operational records are deleted automatically when their purpose ends, while aggregate merchant metrics remain available during the merchant's installation.

Merchants may contact getmeridian.app@gmail.com for privacy questions or deletion assistance. Meridian also processes Shopify compliance webhooks for customer and shop redaction where applicable.

These commitments apply to Meridian-held records. Providers apply their own retention and deletion terms. Meridian cannot promise that deleting app records, uninstalling the app, or withdrawing permission will remove provider-held copies or reverse completed model training; applicable legal rights remain unaffected.