Privacy Policy
Last updated: 29 March 2026
1. Who We Are
Merit is operated by Guillaume Meliot. Contact: hello@getmerit.pro.
2. Data We Collect
| Data | Purpose | Stored Where |
|---|---|---|
| Email, name | Account & authentication | Clerk (US) |
| Entries, jobs, STAR fields | Core product functionality | Supabase (EU) |
| Subscription status | Billing & feature access | Stripe (US) + Supabase (EU) |
| Entry text (AI features) | AI processing | Sent to Anthropic API – not stored for training |
3. What We Send to AI Providers
When you use AI-assisted features, we send only the minimum data required:
- STAR parsing: Entry title + body text
- CV import: Extracted CV text (file deleted immediately after parsing)
- Performance review: Selected entry titles + STAR fields
- CV bullets: Entry title + STAR fields
We never send your email, account information, tags, job details, or metadata to AI providers. Anthropic does not use paid API inputs to train models by default. See Anthropic's Privacy Policy.
4. Analytics
We use Plausible Analytics, which is privacy-friendly and GDPR-compliant by design:
- No cookies – no consent banner needed
- No personal data collected – all metrics are aggregate
- No cross-site tracking
- Data hosted in the EU
We collect: page views, referral sources, device type, and country (from anonymised IP). We do not collect individual user behaviour or personally identifiable analytics data.
5. Data We Do NOT Collect
- No advertising data or ad trackers
- No employer or manager access to your data
- No cross-user data sharing
6. Data Security
- All data transmitted over HTTPS
- Row-Level Security (RLS) enforced at database level
- All API endpoints require authentication
- Rate limiting on all endpoints
- Input validation via strict schemas
- No payment card data stored – handled by Stripe (PCI DSS compliant)
7. Your Rights
- Export: Download all data at any time (JSON format)
- Delete: Delete your account – we export your data before deletion
- Correct: Edit any entry, job, or profile information
- Portability: Standard JSON export – take it anywhere
8. Data Retention
- Account data: retained while active
- On deletion: permanently deleted after export
- CV files: deleted immediately after AI parsing
- AI inputs: not retained by Anthropic
- Billing records: retained as required by tax law
9. Cookies
Merit uses only essential cookies for authentication (Clerk session). Plausible Analytics does not use cookies. No marketing or tracking cookies.
10. Children
Merit is not intended for users under 16.
11. Changes
Material changes communicated via email at least 14 days before taking effect.
12. Contact
Privacy inquiries: hello@getmerit.pro
← Back to Merit · Terms of Service