This policy explains how Untethered Inc (“Untethered”, “we”, “us”) collects, uses and protects information when you use Meridian, our platform where people and AI agents work on a company's data, and when you visit untethered.team.
What we collect
Account details you give us: your name, work email and, if you choose one, a password. Details about your company and team. The content your workspace holds: documents, tables, chats, agents, skills, routines and the records synced from the tools you connect. Technical data collected automatically: IP address, browser, device and the cookies described below.
How we use it
To run Meridian: to answer, act and automate as you and your team direct, to keep your workspace secure, to support you, to bill you and to improve the product. We do not sell personal data, and we do not use your workspace content to train models.
AI models
Agents send the parts of your content a task needs to the model providers your workspace allows, through Vercel AI Gateway and over the providers' APIs. Anthropic, OpenAI and Google do not train on data sent through their APIs. Your workspace admin chooses which models are available and can limit the list.
Connected accounts
Integrations use OAuth with the scopes you approve. Google and Slack are connected with those providers directly; other tools in the connector catalog are connected through Pipedream, which holds their tokens. Tokens and API keys stored in Meridian are encrypted and used by name, so an agent never sees the secret itself. You can disconnect any tool at any time.
Meeting recordings
If you turn on the meeting assistant, a recording bot from Recall.ai joins the calendar meetings you choose. The recording and transcript are stored in your workspace under the same access rules as everything else.
Who can see your workspace
Workspace content is isolated per workspace and shared only by explicit grant. Our engineers reach production only to operate the platform, support you and handle incidents.
Cookies and analytics
Meridian sets the cookies it needs to keep you signed in. On untethered.team we measure visits with PostHog, Google Analytics and the Meta pixel, and the cookie notice stores your choice for about a year. Inside the app we record which features are used, not the content of your work. Session replay runs only on untethered.team and the onboarding screens, with form inputs masked.
How long we keep it
We keep your information while your workspace is active and for as long as we need it to provide the service and meet our legal obligations. When a workspace is closed, we delete its data at your request, and provider backups expire on their own schedule.
Security
Every connection is encrypted in transit, and databases, files and stored credentials are encrypted at rest. Code an agent runs executes in an isolated, short-lived sandbox. Deleting, changing who can see something and sending email outside the workspace wait for a person's approval. No method of transmission or storage is completely secure; if a breach affects your personal data, we will tell you promptly. Our trust center describes these measures in full.
International transfers
Our multi-tenant cloud runs in the United States. If you use it from the EEA, the UK or Türkiye, your data is transferred there under the standard contractual clauses and the safeguards in your data processing agreement. Dedicated, private-cloud and on-premise deployments keep data in the region you choose.
Your rights
Depending on where you are, you may access, correct, delete or export your personal data, and object to or restrict some processing. Residents of the EEA and the UK may complain to their supervisory authority; California residents have the rights the CCPA gives them; residents of Türkiye have the rights set out in Article 11 of KVKK. Where your employer's workspace holds your data, your employer is the controller and we help it answer your request.
Children
Meridian is for business use by adults. It is not directed at children, and we do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy from time to time. For material changes we give notice before they take effect.
Contact
Untethered Inc is the controller for the data we hold about you as our customer. For privacy requests or questions, email hello@untethered.team or write to Untethered Inc, San Francisco, California, USA.