1. Who We Are

MeridianVocari ("we", "us", "our") operates the MeridianVocari platform, a career guidance and assessment service. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

2. Data We Collect

We collect the following categories of personal data:

Account data: name, email address, and authentication credentials provided during sign-up.
Assessment data: your responses to the Life Compass assessment, including aptitude scores, interest ratings, values selections, and life context information.
Content you create: resumes, cover letters, interview recordings, and job application data.
Usage data: pages visited, features used, timestamps, and device/browser information collected through analytics.
Payment data: processed securely by Stripe. We store only your Stripe customer ID — never your card number, CVV, or full payment details.

3. How We Use Your Data

We use your data for the following purposes:

To provide and personalise our career guidance services, including generating your Life Compass profile and career matches.
To process payments and manage your subscription.
To send you service-related communications (e.g., assessment results, account updates).
To improve our platform through aggregated, anonymised usage analytics.
To comply with legal obligations.

4. AI Processing

Your assessment responses are processed by AI language models to generate your Dharma Statement, career matches, and personalised recommendations. This processing is essential to delivering our core service. AI-generated outputs are presented as guidance and suggestions — not definitive assessments of your abilities or potential.

We do not use your personal assessment data to train AI models. Your data is processed in real-time and the AI does not retain your responses after generating your results.

5. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Contract performance: processing necessary to provide the services you signed up for.
Legitimate interest: analytics and service improvement, where your rights are not overridden.
Consent: for optional marketing communications and cookies.
Legal obligation: where required by law (e.g., tax records for payments).

6. Data for Minors

Our Life Compass Student Edition is designed for users aged 14 and above. For users under 16 in the EU (or the applicable age in their jurisdiction), we require verifiable parental or guardian consent before processing personal data. Institutions using our platform for students under 16 are responsible for obtaining this consent.

7. Data Sharing

We do not sell your personal data. We share data only with:

Service providers: Stripe (payments), cloud hosting providers (data storage), and AI model providers (assessment processing).
Institutional administrators: if you access MeridianVocari through a school or university, your institution's administrators may view your assessment results and progress.
Legal authorities: when required by law or to protect our rights.

8. Data Retention

We retain your account and assessment data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., payment records for tax purposes, retained for up to 7 years).

9. Your Rights

Under GDPR and applicable data protection laws, you have the right to:

Access your personal data.
Rectify inaccurate data.
Erase your data ("right to be forgotten").
Restrict processing of your data.
Port your data to another service.
Object to processing based on legitimate interest.
Withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at the email address below.

10. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (Umami) to understand how our platform is used. Analytics data is anonymised and does not track individual users across websites. See our Cookie Policy for details.

11. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encrypted database connections, rate limiting, and access controls. However, no system is completely secure, and we cannot guarantee absolute security.

12. International Transfers

Your data may be processed in countries outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at: [email protected]

Privacy Policy