Privacy Policy

Last Updated: 17 February 2026

At Meridian Realms ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Contact for Privacy Inquiries: privacy@meridianrealmsai.com

1. Information We Collect

We collect information in several ways when you interact with Meridian Realms.

1.1 Information You Provide

When you create an account or use our Service, you may provide us with:

Account Information: Email address, display name
Profile Information: Chosen user identity names and profiles
Content: Characters, worlds, stories, and other creative content you create
Communications: Messages you send to our support team or other users

1.2 Information Collected Automatically

When you access our Service, we automatically collect:

Device Information: Browser type, operating system, device identifiers
Usage Data: Pages visited, features used, time spent, and interaction patterns
Log Data: IP addresses, access times, and referring URLs
Cookies and Similar Technologies: Session data and preferences
Payment and Subscription Data: Tokenized IDs, transaction metadata, and subscription data.

1.3 Information from Third Parties

We may receive information from:

Authentication Providers: When you sign in using Clerk
Analytics Services: Aggregated usage data from third-party analytics tools
Payment Processors: Transaction confirmations and billing information

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Improve the Service

Operate and maintain Meridian Realms and its features
Process transactions, manage subscriptions, and send related information
Personalize your experience and content recommendations
Develop new features and improve existing ones
Monitor and analyse usage patterns and trends

2.2 Communicate with You

Send service-related announcements and updates
Respond to your inquiries and support requests
Send promotional communications (with your consent)
Notify you about changes to our policies

2.3 Ensure Security and Compliance

Detect and prevent fraud, abuse, and security incidents
Enforce our Terms of Service and Community Guidelines
Comply with legal obligations and respond to legal requests
Protect the rights and safety of our users and third parties
Detect and prevent illegal activity through automated monitoring systems. Flagged content may be subject to human review.

2.4 We do not:

Sell your data to third parties
Store full payment card numbers or CVV/CVC on our servers. We may store tokenized payment identifiers, the last four digits of a card, card brand, expiration month/year, billing address, and transaction metadata provided by our payment processors for receipts, tax, dispute handling, fraud prevention, and compliance. We do not store authentication passwords; authentication is handled by Clerk.
Use any of your privately created content such as characters, worlds, user identities, messages, or images for any marketing, communication, or other purposes without your consent (i.e. by publicly sharing approved content to the public catalogue)

3. AI and Your Content

3.1 How AI Processes Your Content

Meridian Realms uses artificial intelligence to power interactive storytelling. When you use our AI features:

Your prompts, user identity, world, and character data are processed to generate responses
We do not use your personal content or data to train our own AI models. For third‑party LLM vendors, we contractually or configuration‑wise disable training and long‑term retention where those controls are available.

3.2 AI-Generated Content

AI responses are generated based on your inputs and content
You can delete your conversation history and other content at any time
Some deleted content, app logs, and security logs may be retained for the periods described in the Data Retention section (e.g., up to 12 months for security logs) to meet legal and security obligations
Transaction records may be kept for 5-7 years for legal and tax purposes

3.3 Automated Safety and Personalization

We use automated systems to classify, filter, and recommend content (e.g., to enforce our Community Guidelines and tailor your experience). These systems do not produce legal or similarly significant effects. You may contact us to request human review of moderation decisions that affect your account.

We do not sell your personal information. We may share your information in the following circumstances:

4.1 With Service Providers

We work with trusted third parties who help us operate our Service:

Cloud & AI Hosting: Infrastructure (e.g., Vercel) and Large Language Model (LLM) providers. We minimize the personal data we disclose to these providers and, where possible, pseudonymize requests (e.g., using random IDs instead of names). These providers may receive network identifiers (such as IP addresses) and technical telemetry needed to deliver the Service.
Authentication: Clerk for login credentials
Payment Processing: Stripe, PayPal, or similar trusted payment processors
Analytics: Privacy-focused analytics tools
Email Services: For transactional and marketing communications
Discord Community and Support: Discord independently collects data under its policy, and content in public channels is public

4.2 For Legal Reasons

We may disclose your information if required to:

Comply with applicable laws, regulations, or legal processes
Respond to valid government requests
Protect the rights, property, or safety of Meridian Realms and our users
Enforce our Terms of Service

We may share your information with third parties when you explicitly consent to such sharing.

4.4 Business Transfers

If Meridian Realms is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

5.1 Access and Portability

Request a copy of the personal information we hold about you
Receive your data in a structured, machine-readable format

5.2 Correction and Deletion

Update or correct inaccurate personal information
Request deletion of your personal information
Delete your account and associated data

5.3 Control and Opt-Out

Opt out of marketing communications
Disable certain data collection through browser settings
Withdraw consent where processing is based on consent

5.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@meridianrealmsai.com or through your account settings.

6. Data Security

We implement appropriate technical and organizational measures to protect your information:

Access Controls: Strict, least‑privilege access controls; secrets are stored securely.
Admin Security: Multi‑factor authentication is required for administrative access.
Security Monitoring: Continuous automated monitoring for potential threats.
Assessments: Periodic security reviews and updates.

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to:

Provide the Service and fulfill the purposes described in this policy
Comply with legal obligations and resolve disputes
Enforce our agreements and protect our legitimate interests

When you delete your account, we retain:

Account and subscription records: for the duration of your account and up to 7 years thereafter to meet tax, accounting, and legal obligations.
Application logs: 30–90 days (security logs up to 12 months).
Backups: encrypted, with rolling retention of 30–90 days.
Content you delete: removed from active systems promptly; residual copies may persist in backups until they expire. Where law requires, we may retain limited records.

If you request deletion, we will delete or anonymize your personal information within 30 days (subject to the exceptions above).

8. Children's Privacy

Meridian Realms is not intended for minors under 18 years of age. We do not knowingly collect information from minors under 18. If you believe we have collected information from a minor under 18, please contact us immediately at privacy@meridianrealmsai.com.

9. International Data

International Data Transfers: Where we transfer personal data outside your region (e.g., to the United States), we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK IDTA. For Australian users, we take reasonable steps to ensure overseas recipients do not breach the Australian Privacy Principles (APP 8).
Do Not Track / Global Privacy Control: We honor Global Privacy Control (GPC) signals where required. We do not sell or share personal information for cross‑context behavioral advertising as defined by the CPRA.

10. Cookies and Tracking Technologies

10.1 Types of Cookies We Use

Essential Cookies: Required for the Service to function properly
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how you use the Service

10.2 Managing Cookies

In the EEA/UK, we use a consent banner to obtain your permission for non‑essential cookies/analytics. You can withdraw consent at any time via Cookie Settings. Our analytics are configured to minimize personal data and avoid cross‑site tracking. Note that disabling certain cookies may affect the functionality of the Service.

11. Third-Party Links and Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the updated policy on this page
Updating the "Last Updated" date
Sending you an email notification (for material changes)

Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@meridianrealmsai.com
Support: meridianrealmsai.com/contact or on our discord server

14. Additional Information for Specific Regions

14.1 European Economic Area (EEA) and UK

Legal bases by purpose include: Contract (providing the Service), Legitimate Interests (fraud prevention, security, service improvement), Consent (marketing emails; enabling Restricted Content settings), and Legal Obligation (tax/records). Where content you choose to submit may reveal special category data (e.g., sexual content when you enable Restricted Content settings), we process it only with your explicit consent, which you can withdraw in Settings (withdrawal does not affect prior processing).

You have the right to object to processing based on legitimate interests and to lodge a complaint with your local authority. Contact details are available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

14.2 California Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of the sale of personal information
Right to non-discrimination for exercising your rights

We do not sell personal information as defined by the CCPA.

15. Data Breach Notification

We will notify affected users and, where applicable, regulators of a data breach as required by law, and will provide information on steps you can take to protect yourself.

16. Exercising Your Rights—Process and Timelines

To protect your privacy, we may ask you to verify your identity before acting on a request. We respond to GDPR requests within one month and CCPA/CPRA requests within 45 days (extendable where permitted). You can submit requests via privacy@meridianrealmsai.com or through account settings.

Thank you for trusting Meridian Realms with your information. We are committed to protecting your privacy and providing a safe, enjoyable experience.