Privacy Policy
Last updated 24 October 2026
This policy explains what we collect, why, and what we do with it. It is short because we collect very little.
The workbook holds nothing
MERIDIAN™ Business runs entirely on your own computer. Your budget, your figures and your organization's information never leave your machine and are never transmitted to us. There is no telemetry, no analytics and no check-in of any kind inside the file.
What the website collects
The calculators on the public pages run in your browser, and the figures you type there are not sent to us unless you ask the chat about them (below). The MERIDIAN page shows sample organizations only; nothing you do there is sent to us.
The “Ask Nia” chat. When you send the chat a message, the conversation, the page you are on and, so that it can explain them, the box you are in and the figures you typed into the calculators on that page are sent to our server. Many questions are answered there from answers PLC has written in advance; otherwise they also go to our AI model provider (Anthropic, or OpenAI as a fallback) to write the reply. Email addresses, names and sign-in codes are never sent with it. We do not keep the conversation; past chats are kept in your own browser, where you can clear them. When a question cannot be answered from the prepared answers, we keep the text of that one question (cut to 300 characters, with email addresses and long numbers removed, and nothing else about you) so that we can write an answer for it. If you ask PLC to follow up, we keep what you submit in that form (your name, email, organization, question and the conversation) so that we can reply.
AI features in a workspace. When a member uses an AI feature in a hosted workspace (writing the narrative of a reading, reading a receipt or a Sunday tally sheet, suggesting budget lines for accounts, recognizing a file’s layout, or asking the workspace assistant), what that feature needs (the figures and line names on screen, the image or file being read, or the question) is sent to our server and to our AI model provider (Anthropic, or OpenAI as a fallback). Under those providers’ commercial API terms, these inputs are not used to train their models. An organization can turn AI features off in its settings. Bank and card statements are not an AI feature: a statement added as a PDF, a scan or a photo is read in your browser, on your device, and its contents are never sent to an AI model provider; only the original file and the transactions read from it are stored, in your organization’s records.
Bank and card statements. A statement you import or reconcile in a hosted workspace is stored as the original file in your organization’s private storage, and its transactions are kept as records of the organization, so the reconciliation can be checked later.
Connections (optional). An organization’s treasurer or finance committee member can connect QuickBooks Online, a bank or card account (through Plaid), Paychex Flex or Pushpay, and can switch any of them off at any time. Each connection is read-only: MERIDIAN reads, and never writes, pays or approves anything there. What it reads is saved in the organization’s workspace the same way an uploaded file is: from QuickBooks, the Account List and the General Ledger for the fiscal year; from the bank, posted transactions (date, description, amount, check number) and the current balance; from Paychex, payroll run totals and check dates only, never an employee’s name, Social Security number, address or bank account; from Pushpay, completed gifts (date, amount, fund, method, the giver’s name and Pushpay giver ID) and the fund list, with campus names used only in the refresh summary. Bank sign-in happens in Plaid’s own window, so we never see the bank password. The access tokens the providers issue are kept on our server, encrypted (AES-256-GCM), are never sent to the browser, and are deleted when the connection is switched off. Every connect, refresh and disconnect is recorded in the organization’s history, and its treasurers and trustees are emailed when a connection is switched on or off.
We run our own first-party analytics on this site. We record page views, clicks, scroll depth and calculator use, together with the referring site, your country and region, your browser type, and a one-way cryptographic hash of your network address. We never store your raw IP address, we set no advertising cookies, no third party receives this data, and we do not sell or share it with anyone. It exists solely so we can see how the site is used and improve it.
The site also remembers, in your own browser only, the sector you selected and figures you entered into the calculator, so they are still there when you return. It is sent to us only if you ask the chat about it, as described above.
When you contact us
If you write to us or complete a form, we keep your name, email and what you wrote, so that we can reply and maintain a record of the conversation. That is all.
When you buy something
Payments are processed by Stripe. They collect your payment details; we never see or store your card information.
We receive your name, email address, country and order details, which we use to deliver the product, provide support and meet our tax obligations.
Hosted products
Where you use a hosted product with an account, we store what is necessary to operate it: your sign-in email address and second-factor enrollment (there are no passwords), the data you enter and the files you upload (including the original bank and card statement files imported into the workspace), and a record of your usage for billing.
The workspace assistant does not read answers aloud and does not record your voice. If you speak a question, your browser’s own voice typing turns it into text before anything reaches us. That is the browser maker’s service, under your browser’s terms (Chrome, for example, sends the audio to Google to transcribe it); we receive only the text, and you can always type instead. An organization can turn AI features off in its settings.
Your data is isolated at the database level so that it is not readable by other customers, or by us, in the ordinary course of operating the service. We access it only when your organization grants access in its workspace, by name and for a set period (and, for consulting, under a written engagement). Every such access is logged in a record the organization can see, and its treasurers and trustees are emailed each time access is granted or used.
How we protect it
Every page and request travels over HTTPS. Card payments are handled by Stripe; we never see or store card numbers. Statement files imported into a hosted workspace are kept in that organization’s private storage. We never ask for or see online banking credentials: if an organization connects its bank, the sign-in happens in Plaid’s own window, and MERIDIAN only reads.
For hosted accounts: each organization’s data is isolated at the database level; sign-in for the treasurer, trustee, finance committee and external auditor roles requires a second factor; we have no access to an organization’s workspace unless the organization grants it, by name, for a set period; and every access is logged in a record the organization can see, with an email to its treasurers and trustees each time access is granted or used.
Who helps us run it
We use a small number of service providers, each only for its purpose: Vercel (hosting the site), Supabase (the hosted database, sign-in and file storage), Stripe (payments), Resend (email), Anthropic, with OpenAI as a fallback (the website chat’s replies, the narrative of a reading, reading receipts and tally sheets, and the assistant’s answers). They process information on our behalf under their own terms and security programs. When an organization switches on a connection, Intuit (QuickBooks Online), Plaid, Paychex or Pushpay sends that organization’s records to us under the organization’s own agreement with that provider. We do not sell personal information and do not share it for advertising.
How long we keep things
- Correspondence: three years.
- Order records: seven years, as required for tax.
- Hosted account records: kept while the account is active. Workspace records are append-only and are not deleted automatically when an account ends; they remain available to the organization to download for 30 days, and are then retained under the organization’s records schedule until the organization asks us in writing to delete them. Records under a legal hold are kept until the hold is released.
Your rights
You may ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to info@princetonledgerconsulting.com and we will respond within 30 days.
If you are in the European Economic Area or the United Kingdom, you have these rights under the GDPR. If you are in California, you have comparable rights under the CCPA. We apply the same standard to everyone regardless of location.
Children
This is a service for businesses and organizations. It is not directed at children and we do not knowingly collect information from anyone under 18.
Contact
Princeton Ledger & Consulting LLC · info@princetonledgerconsulting.com · (215) 805-1364