Privacy Policy

Meridium Holdings, LLC ("Company," "we," "us," or "our") operates PlugGTM, an AI-powered Go-To-Market Operating System (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide, including:

• Account Information: Name, email address, and authentication credentials when you create an account
• Organization Information: Company name, industry, and team details when setting up your organization
• Brand DNA: Brand identity, target audience, competitive landscape, voice and tone preferences, and content guidelines you provide during onboarding
• Content Inputs: Topics, keywords, and prompts you provide for content generation
• Generated Content: Blog posts, social media content, and other materials created through the Service
• Communications: Messages you send to us for support or feedback

1.2 Information Collected Automatically

When you access the Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns
• Log Data: IP address, access times, referring URLs
• Cookies and Tracking: Session cookies, authentication tokens, and analytics identifiers

1.3 Information from Third Parties

We may receive information from:

• Authentication Providers: Account information from Clerk (our authentication service)
• Analytics Services: Aggregated usage statistics and performance metrics
• Platform APIs: Public content from YouTube, Reddit, and X/Twitter when you use our Discovery feature

2. How We Use Your Information

We use collected information to:

• Provide the Service: Generate content, discover strategies, and deliver platform functionality
• Personalize Experience: Use your Brand DNA to tailor content generation to your brand voice
• Improve the Service: Analyze usage patterns, identify bugs, and develop new features
• Communicate: Send service updates, security alerts, and support responses
• Ensure Security: Detect fraud, prevent abuse, and protect user accounts
• Comply with Law: Meet legal obligations and respond to lawful requests

3. AI and Content Generation

PlugGTM uses artificial intelligence and large language models (LLMs) to generate content. You should understand:

• AI Processing: Your inputs (Brand DNA, topics, keywords) are processed by AI models to generate content
• Third-Party AI: We use third-party AI providers (such as OpenRouter, Anthropic, OpenAI, and Perplexity) to power content generation
• No Training on Your Data: We do not use your Brand DNA or generated content to train AI models
• Content Ownership: You retain ownership of content generated for your organization (see Terms of Service)
• AI Limitations: AI-generated content should be reviewed before publication; we do not guarantee accuracy

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Cloud hosting (Vercel)
• Authentication (Clerk)
• AI processing (OpenRouter and model providers)
• Workflow automation (n8n)
• Analytics services

4.2 Legal Requirements

We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 Published Content

If you choose to publish content through our Content Hub feature, that content becomes publicly accessible and may be indexed by search engines and AI systems.

4.5 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained until you delete your account
• Brand DNA: Retained until you delete it or close your account
• Generated Content: Retained until you delete it; archived content retained for 30 days before permanent deletion
• Usage Logs: Retained for up to 12 months for analytics and security purposes
• Legal Compliance: Some data may be retained longer if required by law

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data encrypted in transit (TLS) and at rest
• Access Controls: Role-based access with principle of least privilege
• Authentication: Secure authentication via Clerk with support for multi-factor authentication
• Infrastructure: Hosted on Vercel with enterprise-grade security
• Monitoring: Continuous monitoring for security threats

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Restriction: Request we limit processing of your information

To exercise these rights, contact us at [email protected]

8. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how users interact with the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale (note: we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: