Privacy Policy

Mereti provides a configurable AI receptionist service (Nora) that captures customer messages and helps businesses manage their communications. This policy explains what information we collect, how we use it, and how it is protected.

Information We Collect

We collect information to operate your workspace and handle incoming calls on your behalf. This includes:

• Account and Business Data: Business name, website, timezone, and configuration settings provided during setup.
• Notification Details: Email addresses and verified mobile numbers used to alert you of new messages, along with your notification preferences.
• Customer Messages and Call Details: Vapi processes call audio to operate Nora and returns configured structured fields after a call. The Mereti application stores the caller name, callback number, caller message, callback timing and timezone, and whether the message needs review. The Mereti application and database do not ingest or store call recordings, full transcripts, or Vapi-generated summaries. Provider-side call artifacts and retention depend on Vapi’s applicable settings and practices.
• Internal Notes: Notes, statuses, and tags you apply to messages in your workspace.
• Connected Calendar Data: Calendar availability and booking tokens (only when you explicitly connect Google or Microsoft calendar accounts).
• Service and Security Logs: Basic connection data necessary to maintain session security and system reliability.

How We Use Information

We use your information strictly to provide the Mereti service:

• To operate Nora and capture incoming customer calls on your behalf.
• To structure and organize messages in your workspace.
• To send you optional email or SMS alerts when a new message is captured.
• To verify your identity and secure your account.

Service Providers and Data Sharing

We use established operational providers to run Mereti. We only share the minimum data necessary with these providers to deliver the service:

• Replit: Application hosting and database infrastructure.
• Clerk: Secure user authentication and identity management.
• Vapi: Voice infrastructure and AI call handling.
• Resend: Delivery of email alerts and notifications.
• Twilio: Delivery of SMS notifications and phone number verification.
• Google and Microsoft: Calendar access and appointment booking only when an owner explicitly connects the corresponding calendar account.

SMS Consent Privacy: Mobile information and SMS consent records are not sold, rented, or shared with third parties for their marketing or promotional purposes. Any sharing of this information is strictly limited to the providers (such as Twilio) necessary to deliver the requested SMS service.

Data Retention and Your Rights

We retain data while your account is active or as reasonably needed for service provision, security, disputes, and legal obligations. After account closure or a verified request, we will delete or de-identify data no longer needed, subject to legal, security, fraud prevention, dispute resolution, and temporary backup or provider limitations.

You may submit requests for access, correction, export, or deletion by emailing info@meretiapp.com. Requests are subject to applicable law and identity or account verification. Where applicable, we will take or request appropriate action for data held by service providers. Some information may remain temporarily in provider systems or backups under their retention practices or where continued retention is required for security, fraud prevention, disputes, or legal obligations. We will describe known limitations when responding to a verified request, and we do not promise a specific completion deadline.

Your Choices

You can manage your notification preferences, update your business details, or disconnect calendar integrations at any time within your workspace settings. SMS notifications are strictly opt-in, and you may reply STOP to any message to opt out immediately.