Privacy Policy

Last updated: March 2026

This document is provided for informational purposes and does not constitute legal advice. Please consult your own legal counsel for specific questions.

Meridian is operated by Arclight Holdings LLC, doing business as Grow Meridian. In this policy, "Meridian," "we," "us," and "our" refer to Arclight Holdings LLC.

1. Information We Collect

We collect information you provide directly when creating and using your account. This includes account data such as your email address, display name, username, and avatar. It also includes grow data: plant records, journal entries, environment readings, photos, nutrient recipes, and space configurations including equipment selections and layouts.

We collect usage data including pages visited, features used, and session duration through Sentry and analytics tools. Payment data is processed by Stripe — we do not store full card numbers. When you use AI features, we process your prompts and the resulting responses to provide the service; this data is processed by Meridian's AI system and is not shared with third parties.

2. How We Use Your Data

We use your data to provide and improve the Meridian platform, process payments, send transactional emails (account confirmations, task reminders, metric alerts), and generate AI-powered recommendations. We aggregate anonymous usage statistics to understand how features are used and guide development priorities.

We do not sell personal data to third parties. We do not display advertising. We do not share individual user data with other users unless you explicitly opt into a public profile, in which case only the information you choose to display is visible.

3. Data Storage & Security

Your data is stored on Supabase, hosted on AWS infrastructure. All data is encrypted in transit using TLS and encrypted at rest. We enforce row-level security on all database tables, ensuring that authenticated users can only access their own data. Administrative access is restricted to authorized personnel and all admin actions are recorded in an audit log.

4. Third-Party Services

Meridian relies on the following third-party services, each with their own privacy policies: Supabase for database, authentication, and file storage; Stripe for payment processing; Resend for transactional email delivery; Vercel for hosting and CDN; Sentry for error tracking and performance monitoring; PostHog for product analytics; Google Analytics for website traffic analytics. Meridian's AI features are built on a proprietary knowledge base and diagnostic engine. Language model inference is processed through secure, industry-standard infrastructure. No personally identifiable information is included in AI processing — only anonymized, grow-related context necessary to generate responses.

5. Cookies

We use essential cookies to maintain your authentication session. We also use analytics cookies from PostHog and Google Analytics to understand how the platform is used. You can accept or decline non-essential cookies via the cookie banner. We do not use advertising cookies or third-party marketing cookies.

6. Your Rights

You can access all of your data through your Meridian dashboard at any time. Pro subscribers can export grow data as CSV files. You can delete your account and all associated data through Account Settings. You can opt out of email notifications in Settings, control your profile visibility with the public/private toggle, and withdraw AI consent at any time. You may also request data deletion by emailing support@growmeridian.com.

7. Children's Privacy

Meridian is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account, we will take steps to delete the account and associated data promptly.

8. Data Retention

Data for active accounts is retained for as long as your account remains active. When you delete your account, your data is removed within 30 days. Automated backups may retain data for up to 90 days for disaster recovery purposes, after which it is permanently purged.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new effective date. Material changes will be communicated via email to the address associated with your account.

10. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of North Carolina.

11. Contact

If you have questions about this privacy policy or how your data is handled, please contact Arclight Holdings LLC at support@growmeridian.com.

Terms of Service

We use cookies to improve your experience and analyze site usage. See our Privacy Policy.