Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Meritia ("Meritia", "we", "us") collects, uses, and protects your personal information when you use our web application, mobile applications, and related services (collectively, the "Service"). By using the Service, you agree to the practices described here.
Information we collect
We collect the following categories of information:
- Account information: your name, email address, and a securely hashed password.
- Tax profile: tax residency country and nationality, used to compute applicable tax rules.
- Property and financial data: property details, valuations, mortgages, income, and expenses that you enter to use the Service.
- Tenancy data: where applicable, tenant names, contact details, contracts, and identity-document references that you or your tenants provide.
- Documents and images: files and photos you upload, such as contracts, receipts, and maintenance-request images.
- Device and usage data: log data, device identifiers, and push-notification tokens needed to operate the Service.
How we use your information
- To provide, maintain, and improve the Service.
- To compute portfolio metrics, tax estimates, and investment analysis.
- To authenticate you and keep your account secure.
- To send service-related communications (e.g. verification codes, notifications you enable).
- To comply with legal obligations.
We do not sell your personal information.
Third-party services
We share data with trusted service providers only as needed to run the Service, including: payment processing (Stripe), cloud hosting and databases, email delivery, exchange-rate and market-data providers, and — where you use AI-assisted features — AI processing providers. These providers process data on our behalf under appropriate safeguards.
Data retention
We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see "Your rights" below).
Your rights
Depending on your jurisdiction (including under the EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at hello@meritia.io.
Data security
We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information at all times.
International transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate legal mechanisms to safeguard international data transfers.
Children
The Service is not directed to individuals under 18, and we do not knowingly collect data from children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact
For any questions about this Privacy Policy or your data, contact us at hello@meritia.io.