Legal

Privacy Policy

Effective June 24, 2026

This Privacy Policy describes how Merlean ("we", "us", or "our") collects, uses, and shares information when you use our website at merlean.ai, our application at app.merlean.ai, and any related services (collectively, the "Services").

1. Information we collect

1.1 Information you provide

Account information. When you create an account, we collect your name, email address, and authentication credentials. If you sign in with a third-party provider (Google, GitHub, GitLab), we receive your name, email address, profile identifier, and a profile picture if available.
Integrations. If you connect external services to Merlean (for example, a code repository or an MCP server), we store the access tokens and configuration you provide so the integration can function.
Communications. When you contact us via the website contact form or email, we collect the contents of your message and your contact details.

1.2 Information collected automatically

Usage data. We log requests to our Services, including timestamps, pages or endpoints accessed, and the actions taken within the dashboard.
Device and connection data. IP address, browser type, operating system, and referrer.
Cookies and similar technologies. We use first-party cookies to keep you signed in and to remember preferences. We do not use third-party advertising cookies.

2. How we use information

To provide, maintain, and improve the Services.
To authenticate you and secure your account.
To operate integrations you have explicitly connected.
To communicate with you about your account, security, billing, and product updates.
To detect, investigate, and prevent fraud, abuse, and security incidents.
To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share information only as described below:

Service providers. Infrastructure, email, analytics, and error monitoring providers that process data on our behalf under contractual confidentiality obligations.
Integrations you authorize. When you connect a third-party service, data flows between Merlean and that service as you direct.
Legal requirements. Where required by law, regulation, legal process, or governmental request.
Business transfers. In connection with a merger, acquisition, or sale of assets, in which case we will notify users of any change in ownership or use of data.

4. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services. We may retain certain information after account deletion when required by law, for tax and accounting purposes, or to resolve disputes and enforce our agreements.

5. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and audit logging. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. To exercise these rights, contact us at hello@merlean.ai. You may also disconnect third-party integrations at any time from your dashboard.

7. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses.

8. Children

Our Services are not directed to children under 16, and we do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.

9. Third-party services

The Services may link to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for their content or practices.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the "Effective" date above. Material changes will be communicated by email or through the Services.

11. Contact

If you have any questions about this Privacy Policy or our data practices, contact us at hello@merlean.ai.