Privacy notice

Who handles your information

Exeleus Technologies Corp operates Exeleus Meridian. Contact admin@exeleus.com about privacy, support or a data request.

Business address: Unit 3F-V64, Symphony Tower 2, Quezon City, 1103.

What we collect

We handle account email and identifiers; declared age group and education category for eligibility; workspace associations, roles and usage; models, simulation settings, archived inputs and generated results; and support messages.

For invitations and free access, we handle the intended recipient email for delivery and verified-account matching, provider and request identifiers, grant status and administrative actions. Meridian stores a recipient-email hash in its invitation record; a hash is still personal information and is not treated as anonymous.

Service and security records may include request times, IP addresses, browser details, errors and account actions. Eligibility declarations do not independently verify age or authority.

Do not submit passwords, authentication codes, secret keys or unnecessary personal information in models or messages.

Clerk handles sign-in, authentication factors and sessions. If you choose Google sign-in, basic account/profile information is used for authentication. We do not receive your Google password.

Accepting service terms creates a minimal account-level receipt and audit record identifying the terms, acceptance time and privacy-notice version presented. Reading this notice is not agreement to service terms.

Why we use it

We use information to provide the requested service, check eligibility, control access, store models, run simulations, deliver results, administer usage, answer requests and protect the service.

Required account/service processing supports the service and agreement you request. Any separate consent needed for a particular use must be requested for that purpose; accepting terms or reading this notice is not blanket consent.

We do not sell your account/workspace information or use your models and identifiable results for unrelated advertising, research, publication or general-purpose model training. Such additional use requires a separate appropriate arrangement and basis.

Providers and access

Clerk provides authentication, Vercel hosts the website, and Google Cloud provides the API, database, job processing and result storage.

Authorized Exeleus personnel may access information to operate, secure and support the service. Processing may take place outside the Philippines. Information may also be disclosed where required by applicable law.

Workspace information is available only within the applicable permissions. Requesting records does not give an account authority over another person’s information.

Cookies and browser storage

The application and authentication provider use cookies and browser storage for sign-in, session/security state and pending-submission metadata. Blocking them can interrupt the service.

Some browser state may remain after sign-out. Signing out does not itself delete provider-held data or downloaded files.

Retention

Workspace data: while active; following a verified closure/deletion request, affected active-system data is removed within 30 days, subject to legal obligations and other members’ rights.

Minimal agreement evidence: account lifetime plus one year after confirmed account closure. This does not extend retention of full profiles, models, results or unrelated audit records.

Routine support correspondence: 12 months after resolution.

Minimal privacy-case records: three years after both the final response and completed action. Keep handling evidence, not deleted customer content.

Temporary verification material and unnecessary attachments: remove as soon as no longer needed, no later than 90 days after resolution, subject to documented legal holds.

Specific applicable legal requirements or documented preservation holds may justify different treatment of particular records. Exceptions need a recorded scope, reason and review point. Releasing a hold does not restart the original clock.

Backups, restored copies, provider operational records and downloaded files require separate handling. The 30-day active-system rule does not promise that every copy disappears within 30 days.

Your requests and changes

Contact admin@exeleus.com to request access, correction, deletion, objection or other applicable rights, or discuss account closure. We verify identity and authority, consider shared rights and explain applicable exceptions. Deleting a sign-in account does not automatically delete workspace records.

The signed-in account export covers Meridian account/admission records, stored workspace associations, your agreement receipts and normalized individual-access records linked to your authenticated account. Unclaimed email-only invitations and ambiguous historical links require separate review. It excludes provider-held records, other people’s records, shared models/results, audit/case evidence and correspondence. Simulation exports are separate.

You may raise privacy concerns with the Philippine National Privacy Commission. NPC rights guidance (https://privacy.gov.ph/implementing-rules-regulations-data-privacy-act-%202012/)

Material changes will be communicated with an updated version and effective date. A changed service-terms version requires separate agreement.