Privacy Policy

1. Introduction

Meridian is a scheduling platform developed and operated by i60, a software company based in South Africa. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use Meridian (“the Service”).

By creating an account or using Meridian, you acknowledge that you have read and understood this policy. If you do not agree with how we handle your data, please discontinue use of the Service.

2. Information We Collect

We collect only the information necessary to provide a functional scheduling experience. This includes:

• Account information — your name and email address, collected when you register or sign in via Google OAuth.
• Calendar data — calendar events and availability information accessed via the Google Calendar API, used solely to display your free/busy times and prevent double bookings.
• Booking data — the name, email address, and selected meeting times of people who book appointments with you through your scheduling links.
• Usage data — basic analytics such as pages visited and features used, collected to improve the product. We do not sell this data.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the core scheduling functionality of Meridian.
• To send booking confirmation and reminder emails to both you and your invitees via SendGrid.
• To synchronise your calendar availability in real time using the Google Calendar API, ensuring accurate scheduling.
• To communicate with you about your account, such as password resets or important service updates.
• To analyse aggregate usage patterns and improve the reliability and features of the platform.

We will never sell your personal information to third parties or use it for advertising purposes.

4. Third-Party Services

Meridian relies on a small set of trusted third-party services to function. Each has its own privacy practices:

• Google Calendar API & Google OAuth — used for calendar synchronisation and sign-in. Governed by Google’s Privacy Policy.
• SendGrid (Twilio) — used to deliver transactional emails such as booking confirmations and reminders. Your email address is shared with SendGrid only for the purpose of delivering these messages.
• Railway — our hosting and infrastructure provider. Your data is stored on Railway-provisioned PostgreSQL databases located in their cloud infrastructure.

We choose third-party providers carefully and limit the data shared with them to what is strictly required.

5. Data Retention

We retain your personal data for as long as your account remains active. If you delete your account, your profile information and associated booking data will be permanently removed from our systems within 30 days of the deletion request.

Aggregated, anonymised analytics data that cannot be linked back to you may be retained indefinitely for product improvement purposes.

6. Your Rights

You have the following rights regarding your personal information:

• Access — you can view the data associated with your account from your dashboard at any time.
• Correction — you can update your name and other profile details directly from your account settings.
• Deletion — you can delete your account and all associated data at any time from your account settings, or by contacting us.
• Portability — you may request a copy of your data in a machine-readable format by contacting us at the address below.

To exercise any of these rights, please contact us at i60.co.

7. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse:

• All data is transmitted over HTTPS using TLS encryption.
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Authentication is session-based, with sessions invalidated on sign-out or after a period of inactivity.
• Access to production systems and databases is restricted to authorised personnel only.

While we strive to protect your data, no system is completely immune to security risks. We encourage you to use a strong, unique password for your account.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email.

We encourage you to review this page periodically. Your continued use of Meridian after changes are posted constitutes your acceptance of the updated policy.

9. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us through our website:

https://i60.co
i60 — South Africa