Privacy Policy

Last updated October 13, 2026

This policy explains what personal information Merci Academy LLC ("we", "us") collects through Merci Apps and merciapps.com, how we use it, who we share it with, and the choices you have.

1. Information we collect

2. How we use information

• Provide, maintain and secure the service, including authentication and customer support.
• Process subscriptions, payments and invoices.
• Send service emails such as sign-up verification, password resets, billing and security notices, and file retention notices.
• Send product tips, trial reminders and offers, only as described in section 5.
• Detect and prevent fraud, abuse and security incidents, and enforce our Terms of Service.
• Understand how features are used so we can improve them, using counts of in-product events.
• Comply with legal obligations.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your workspace content to advertise to you or others.

3. Who we share information with

We share information only with service providers that help us run Merci Apps, and only as needed for those services:

• Infrastructure providers that host the application, store its data, and relay real-time audio/video call media.
• Email delivery providers that send our messages.
• A payment processor that handles checkout and subscriptions.
• Google reCAPTCHA, which helps protect forms from automated abuse and is subject to Google's Privacy Policy and Terms.
• Google Translate, only if you choose to translate pages and allow it in cookie settings.
• A video meeting or media relay service, if you start or join a call or video room.

We may also disclose information to comply with law or valid legal process, to protect rights, safety and security, or in connection with a merger, acquisition or sale of assets, in which case we will tell you if your information becomes subject to a different privacy policy.

4. Workspace data and your customers

If you use Merci Apps to manage your own clients, you decide what information about them to enter. For that content we act as a service provider (processor) on your behalf and process it only to provide the service. You are responsible for having a lawful basis, and any required notices or consents, for the information you put in your workspace.

Google user data (optional sign-in)

Signing in or registering with Google is optional, and Merci Apps works fully with an email address and password. If you choose "Continue with Google", we ask Google only for your basic profile: your name, your email address and Google's stable account identifier (OpenID Connect scopes openid, email and profile). We do not request access to your Google Calendar, Drive, Gmail or contacts.

We use this only to create your account, recognise you when you sign in, and let you link or unlink Google from your profile settings. A Google account is never attached to an existing account automatically because the email address matches: you must first sign in with your password and choose to link it. We do not use this data for advertising, we do not sell it, and we do not allow humans to read it except with your consent, for security or abuse investigation, or to comply with law. Merci Apps's use of information received from Google APIs adheres to the Google API Services User Data Policy.

5. Marketing emails and offers

We send promotional emails only if you ask for them, for example by entering your email and checking the consent box on an offer form, or as part of the trial you started. Each marketing email includes an unsubscribe link, and we honor opt-outs promptly. We send each offer code once per email address. Essential account messages, such as password resets and invoices, are not marketing and may still be sent.

6. Cookies and the Global Privacy Control

We ask for your permission before using optional cookies and similar storage. You can change your choice at any time with "Cookie settings" in the footer. If your browser sends a Global Privacy Control signal, we treat it as a request to decline optional cookies.

7. Your choices and rights

Depending on where you live, including California and other U.S. states with privacy laws, you may have the right to know what personal information we hold about you, to access, correct or delete it, to receive a copy, to opt out of the sale or sharing of personal information (we do neither), and not to be treated differently for exercising these rights. To make a request, use the contact form and choose a subject such as "Privacy request". We may need to verify your identity, and we aim to respond within 45 days. Workspace members should first contact their workspace owner, because the owner controls that workspace's content. Workspace owners can also download a copy of their workspace data and submit a deletion request themselves from Profile settings; deletion requests are confirmed with the owner by email before anything is removed.

8. Retention and 30-day automatic deletion of uploaded files

We keep account and workspace business records (including messages, invoices, projects, tasks, milestones, notes and agreements) while your account is active and as long as needed to provide the service. All uploaded files across the service (including chat attachments, meeting notes, uploaded contract PDFs, and support ticket screenshots) are stored in private workspace-isolated paths. Files are automatically deleted after 30 days. Download anything you need to keep. Expired files cannot be downloaded, while your messages, invoices, projects and other business records remain intact. Built-in audio and video calls are streamed in real time via Cloudflare Realtime SFU / TURN and are never recorded or stored. When you ask us to delete your account or workspace, we delete or de-identify the information, except where we must keep it, for example billing records required for tax and accounting, or information needed to resolve disputes and enforce our agreements. Copies in backups are removed as backups are replaced in the ordinary course. Contact form messages are kept as long as needed to handle your request.

9. Security

We use administrative, technical and organizational safeguards described on our Security page. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach that affects your personal information, we will notify you as required by law.

10. Children

Merci Apps is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, please contact us and we will delete it.

11. Where information is processed

Merci Apps is operated from the United States, and information is processed and stored in the United States and other countries where our providers operate. By using the service you understand your information will be transferred there.

12. Changes to this policy

We may update this policy. If we make material changes, we will update the date above and, where appropriate, notify you by email or in the product.

13. Contact us

Merci Academy LLC, operator of Merci Apps. Use our contact form for privacy questions and requests.