Privacy Policy
Last updated: February 2026
1. Data Controller
Meridian is operated from Denmark. For questions about this privacy policy or your personal data, contact us at: privacy@meridian.email
2. Data We Collect
Newsletter Subscription
When you subscribe to our newsletter, we collect your email address. This data is processed by our newsletter provider, Beehiiv.
Website Analytics
With your consent, we may collect anonymized usage data to improve our service. No analytics are loaded if you decline cookies.
News Article Processing
We process publicly available news articles from various sources. Article content (headlines, descriptions, and snippets) is sent to AI providers for processing. This does not include any personal data you provide to us.
3. Data Processors
We use the following third-party services to operate Meridian:
| Provider | Purpose | Data Processed |
|---|---|---|
| Supabase | Database hosting | Article content, summaries |
| OpenAI | AI summarization | Article content for summary generation |
| Anthropic | AI quality review | Article content and summaries for quality verification |
| Beehiiv | Newsletter delivery | Email addresses, delivery metrics |
| Railway | Backend hosting | Server logs, application data |
| Vercel | Frontend hosting | Access logs, edge cache |
Important: Article content is processed by both OpenAI (for generating summaries) and Anthropic (for independent quality review). This dual-AI approach ensures accuracy but means article text is shared with both providers. Neither provider uses this data to train their models under our data processing agreements.
4. Lawful Basis for Processing
Consent (GDPR Art. 6(1)(a))
Newsletter subscription is based on your explicit consent. You can withdraw consent at any time by unsubscribing.
Legitimate Interest (GDPR Art. 6(1)(f))
Website analytics (when consented) and security logging are based on our legitimate interest in improving our service and preventing abuse.
5. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interest
- Restriction: Request limited processing of your data
To exercise these rights, email privacy@meridian.email. We will respond within 30 days.
6. Data Retention
- Newsletter subscriptions: Until you unsubscribe
- Article summaries: Indefinitely (for archive purposes)
- Server logs: 30 days
- Analytics data: 26 months (if consented)
7. International Data Transfers
Some of our processors are based outside the EU/EEA (OpenAI and Anthropic are US-based). Data transfers are protected by Standard Contractual Clauses (SCCs) and appropriate supplementary measures as required by GDPR.
8. Cookies
We use essential cookies required for website functionality. Analytics cookies are only set with your explicit consent. You can manage your preferences at any time via the cookie banner.
9. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Website: datatilsynet.dk
Email: dt@datatilsynet.dk
10. Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be announced via our newsletter or website. The "Last updated" date at the top indicates when this policy was last revised.
Questions? Contact our privacy team. See also our Terms of Service.