This Privacy Policy explains how Meridian ("Meridian", "we", "us", "our"), currently operated by Vishesh Puri as an early-stage venture based in Newfoundland and Labrador, Canada, collects, uses, and discloses information when you use the Meridian website and dashboard (the "Service"). This Policy is governed by Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
| Category | Examples |
|---|---|
| Account information | Email address, password (hashed by AWS Cognito), account creation date |
| Investor profile | Province/territory, investment goal, risk tolerance, investment horizon, account types held (TFSA/RRSP/FHSA/RESP/taxable/margin) |
| Portfolio & watchlist data | Tickers, quantities, and holdings you manually enter — we do not connect to brokerage accounts |
| AI interaction data | Questions you ask, chat history, and generated responses |
| Billing information | Subscription tier and payment status — full card details are handled directly by Stripe and never stored on our servers |
| Usage data | Feature usage counts, query counts, pages visited, basic device/browser information |
When you use AI features (chat, dividend analysis, portfolio DNA, tax optimization, etc.), relevant profile and portfolio data is sent to Anthropic's Claude models via Amazon Bedrock to generate a response. This processing occurs in AWS's us-east-1 region. Under AWS Bedrock's standard terms, prompts and outputs sent through Bedrock are not used to train Anthropic's or AWS's underlying models. We do not sell this data or share it with data brokers or advertisers.
| Provider | Purpose |
|---|---|
| Amazon Web Services (Cognito, Aurora/RDS, Lambda, S3) | Authentication, database storage, application hosting — primarily in ca-central-1 (Canada) |
| Amazon Bedrock / Anthropic | AI model inference for chat and analysis features — processed in us-east-1 (U.S.) |
| Stripe | Subscription billing and payment processing |
| TMX Money, Twelve Data, Bank of Canada Valet API, SEDAR+ | Market data, filings, and FX rates — these providers do not receive your personal account information |
Your account, profile, and portfolio data are stored in AWS's Canada (Central) region (ca-central-1). AI prompts and the portfolio/profile context needed to answer them are transmitted to AWS's U.S. East region (us-east-1) for processing because Bedrock is not yet available in Canada, but are not persistently stored there beyond what is needed to generate a response.
We retain your account and profile data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where retention is required for legal, tax, or fraud-prevention purposes (e.g., billing records).
Under PIPEDA and applicable provincial privacy law, you have the right to: access the personal information we hold about you; request correction of inaccurate information; withdraw consent to certain processing (which may limit Service functionality); and request deletion of your account and associated data. To exercise any of these rights, contact us at vpuri@mun.ca.
We use essential cookies and local storage to keep you signed in and remember basic preferences (such as theme). We do not currently use third-party advertising or tracking cookies.
The Service is not directed at, and should not be used by, anyone under the age of 18. We do not knowingly collect personal information from children.
We rely on AWS-managed infrastructure (Cognito for authentication, encrypted storage, and access-controlled databases) to protect your information. No system is completely secure, and we cannot guarantee absolute security of data transmitted to or from the Service.
We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email before they take effect.
Questions about this Privacy Policy or your data can be sent to vpuri@mun.ca.