Privacy Policy
This policy explains what personal data MeritFlo collects through this website, how we use it, and the choices you have. It is written to be read, not skimmed past.
Last updated: 12 July 2026
Who we are
MeritFlo provides a continuous performance and talent development platform for organizations. This policy covers meritflo.com, the marketing website you are reading now. Data processed inside the MeritFlo product on behalf of customer organizations is governed by our customer agreements and data processing terms, under which the customer is the data controller (or data fiduciary, in DPDP terms) and MeritFlo acts on their instructions.
What we collect on this website
Information you give us directly: when you submit a form on this site — booking a demo or contacting us — we collect what the form asks for, typically your name, work email address, company name, company size and your message. Providing it is voluntary; the forms tell you which fields are required.
Information collected automatically: like most websites, our servers record basic technical logs (IP address, browser type, pages requested, timestamps) for security and reliability. We keep analytics deliberately minimal and do not build advertising profiles of visitors.
How we use it
We use form submissions to respond to you: to schedule the demo you asked for, answer your question, or follow up on your enquiry. We use technical logs to keep the site secure and working. If you ask us to stop contacting you, we stop.
We do not sell personal data. We do not share it with third parties for their own marketing.
Legal bases
Where the GDPR applies, we process form submissions on the basis of our legitimate interest in responding to enquiries you initiate, or to take steps prior to entering a contract at your request; technical logs are processed on the basis of our legitimate interest in site security. Where India’s Digital Personal Data Protection Act (DPDP) applies, we process personal data you provide for the specified purpose for which you provided it, with your consent expressed through the act of submitting the form.
Cookies
This website uses only cookies and browser storage that are necessary for it to function (for example, remembering your light/dark theme preference). We do not use third-party advertising or tracking cookies. Because we limit ourselves to strictly necessary storage, there is no cookie-consent banner to click through.
Where data lives
Website form submissions are stored on infrastructure in the region stated at the point of collection. For the MeritFlo product itself, we offer regional hosting options for India and the GCC so employee performance data can remain in-region — see our Data Residency page for details.
Retention
We keep form submissions for as long as needed to handle your enquiry and for a reasonable follow-up period, after which they are deleted. Technical logs are retained on a short rolling window. We do not keep personal data "just in case".
Your rights
Depending on where you are, you have rights to access, correct and delete personal data we hold about you, and to withdraw consent where processing is based on consent. To exercise any of these, use the contact form on this site and tell us what you need; we respond to verified requests within the timelines the applicable law sets.
Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, note it prominently on this page. We will not quietly weaken it.
Contact
Questions about this policy or about how we handle personal data can be sent through the contact form on this website — they route directly to the team responsible for privacy.