Privacy notice

Who is the controller

The controller of your personal data is Athene Holdings OÜ, registry code 14493325, Tartu 50706, Estonia. Privacy questions go to support@meridiarc.com. No data protection officer is appointed, so requests are handled by the operator directly.

What is collected, and why

Account email and username, to identify you and to contact you about the service (performance of the contract). Authentication and session records, including failed login counts, to keep accounts secure (legitimate interest). Saved charts, watchlists and interface preferences, so the product works as you left it (performance of the contract). Payment records, held by Stripe, to take payment and meet accounting law (contract and legal obligation).

Processors

Stripe Payments Europe processes payments and holds card data. MeridiArc receives only the status of a payment and the last four digits. Resend delivers transactional email and processes the address it is sent to. The application itself runs on a virtual private server rented by Athene Holdings OÜ.

Processors act on documented instructions under Article 28 agreements.

How long it is kept

Account data is deleted when you delete the account. Payment and invoice records are kept for seven years, as Estonian accounting law requires. Session and security logs are kept only as long as they are needed to investigate abuse.

Your rights

You may request access to your data, correction of it, erasure, a portable copy, restriction of processing, and you may object to processing based on legitimate interest. Write to support@meridiarc.com and the request is answered within one month.

Cookies and session storage

MeridiArc sets a session cookie so that you stay signed in, and stores your theme and layout preferences in the browser. These are strictly necessary or purely local, so no consent banner is shown. No advertising or cross-site tracking cookies are set. If analytics are added later, consent is asked first and refusing is as easy as accepting.

International transfers

Data is processed inside the European Economic Area wherever possible. Where a processor transfers data outside it, the transfer relies on the European Commission's standard contractual clauses.

Complaints

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, Tallinn, or to the supervisory authority of your own country.

Changes to this notice

Changes are published on this page with a new date at the top, and material changes are emailed to the address on your account.