Privacy Policy

Product: Meridian Social · Operated by Meridian Software LLC · Effective date: 2026-10-28

Draft for legal review. This policy is complete enough to submit to Meta and LinkedIn app review; have counsel confirm the jurisdiction-specific sections (GDPR/CCPA) before publishing.

1. Who we are

Meridian Social is a social media management tool operated by Meridian Software LLC (“Meridian,” “we,” “us”), a limited liability company registered in New Jersey, USA. Authorized operators use Meridian Social to schedule and publish content, and to read engagement metrics, for social media accounts that the account owner has explicitly connected and authorized. Contact: privacy@meridian-saas.com.

2. Scope

This policy covers information processed through the Meridian Social application and its related services. It does not cover the practices of the social media platforms you connect (Facebook, Instagram, LinkedIn), which are governed by their own policies.

3. Information we collect

a. Operator account data

• Name and email address.
• A securely hashed password (we never store passwords in clear text).
• Login and session activity for security.

b. Connected social account data

• Page/profile identifiers, display names, usernames, and avatar images for the accounts you connect.
• OAuth access (and refresh) tokens granted by Facebook, Instagram, and LinkedIn. Tokens are encrypted at rest and are used only to perform the actions you request.

c. Content you create

• Post text, uploaded media, schedules, targeting choices, and publish results/history.

d. Engagement metrics

• Performance data retrieved from the connected platforms for reporting -- e.g. impressions, reach, likes, comments, shares, link clicks, and follower counts.

e. Technical and log data

• IP address, browser/device information, and usage logs, used to operate and secure the service.

f. Cookies

• A single session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

4. How we use information

• To provide the service: publishing on your behalf to accounts you connected, and scheduling your content.
• To generate analytics and client reports.
• To operate, maintain, secure, and improve the service.
• To provide support and communicate about the service.
• To comply with legal obligations.

We do not sell personal data, and we do not use data obtained from the connected platforms for advertising.

5. Platform data and developer policies

Data obtained through Meta (Facebook/Instagram) and LinkedIn APIs is used strictly in accordance with those platforms' developer terms, including the Meta Platform Terms and the LinkedIn API Terms of Use, and only for the purposes you authorize. You can disconnect any account at any time, which revokes and deletes our stored token and stops all further access.

6. How we share information

• Connected platforms: to perform the actions you request (e.g. publishing a post).
• Service providers: infrastructure/hosting providers that process data on our behalf under confidentiality obligations.
• Legal: where required by law or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Data retention

We retain your data while your account is active and for as long as needed to provide the service. Disconnecting a social account deletes its stored tokens immediately. You may request deletion of your data at any time.

8. Your rights and data deletion

Depending on your location, you may have rights to access, correct, delete, export, or object to the processing of your personal data. You can delete your data by:

• In the app: opening a connected account and choosing Disconnect & delete data.
• By request: emailing privacy@meridian-saas.com.
• Via Facebook: deletion requests initiated through Facebook are handled automatically by our data-deletion callback, which returns a confirmation code you can track.

9. Security

We protect data with encryption in transit (TLS) and encryption at rest for OAuth tokens, along with access controls and operational safeguards. No method of transmission or storage is perfectly secure, but we work to protect your information.

10. International users

We operate in the United States. If you access the service from outside the U.S., your information may be processed in the U.S. We rely on appropriate safeguards where required.

11. Children

Meridian Social is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16.

12. Changes

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice within the service.

13. Contact

Meridian Software LLC — privacy@meridian-saas.com