Skip to content

Privacy Policy

Last updated: March 13, 2026

1. Who We Are

Merakey Technologies Corp. ("Merakey", "we", "us") is a Canadian company that provides compliance scanning and AI agent software for healthcare organizations. We are headquartered in Ontario, Canada, and all our infrastructure operates within Canada.

2. Information We Collect

We collect information in the following ways:

  • Contact information: When you email us or request a report, we collect your name, email address, and organization name.
  • Meridian compliance data: When your agency opts in to Meridian, we access your Home Portal data in read-only mode to generate compliance reports. This may include staff training records, medication administration records, and incident reports.
  • Sentinel usage data: When you use Sentinel, conversation logs and training data are stored on infrastructure you control or on our Canadian servers, depending on your tier.
  • Website analytics: We do not currently use third-party analytics or tracking cookies on merakey.io.

3. How We Use Your Information

  • To provide and improve our products (Meridian compliance reports, Sentinel AI agents)
  • To communicate with you about your account or inquiries
  • To comply with legal obligations under Canadian law

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Data Residency and Security

All personal and health information processed by Merakey products is stored on Canadian infrastructure (AWS Canada, ca-central-1). We do not transfer data outside of Canada.

We use encryption in transit (TLS) and at rest (AES-256) for all sensitive data. Database access is restricted by role and logged for audit purposes.

5. PIPEDA and PHIPA Compliance

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Ontario's Personal Health Information Protection Act (PHIPA). You have the right to access, correct, or request deletion of your personal information. We will respond to access requests within 30 days.

6. Data Retention

We retain compliance scan data for the duration of your subscription plus 90 days. Contact information is retained as long as you have an active relationship with us. You may request deletion at any time by emailing us.

7. Third-Party Services

Our Sentinel Healthcare tier runs entirely on self-hosted infrastructure with no third-party AI API calls. Our General tier may use cloud infrastructure, but all processing remains within Canadian data centers. We use AWS (ca-central-1) for hosting and do not use any US-based data processors for health information.

8. Contact Us

For privacy inquiries, data access requests, or complaints, contact us at:

Email: ahmed@merakey.io

Company: Merakey Technologies Corp., Ontario, Canada