Privacy notice
How Horizon AI handles personal data
This notice is given under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). It covers this website and the forms through which Horizon AI collects personal data: the notification of opening, the trader questionnaire, the feedback on an analysis, and the investor enquiry; it also covers our contacts with investors and partners and our press relations. Horizon AI does not sell personal data and does not use it for advertising.
Controller
- Who decides how data is used
-
Fabio Salvan, data controller, for the Horizon AI project (company in formation), Italy. He can see the data described here and answers requests about it.
Contact for any privacy matter: contact@usemeridianai.com
This website
- Hosting
This website is hosted by Vercel Inc. (United States), which records technical connection data (IP address, time, requested page) in server logs, for security and delivery. Typefaces are served from the same host; no data is sent to third-party font services.
- Cookies and tracking
This website sets no cookies and uses no advertising tools. To count visits it uses Vercel Web Analytics, provided by the same host: it collects aggregated data (pages viewed, referring site, country, device and browser type) and a few on-page actions, such as clicks on the sign-up buttons, scrolling to the end and switching language, with no personal data, sets no cookies and stores nothing in the browser; to tell one visit from another it uses a hash derived from the request, which Vercel discards within 24 hours. The legal basis is Horizon AI's legitimate interest in knowing which pages are read. No profiling and no automated decision-making take place.
- Market prices
Some pages show, only when you ask for them with the dedicated button, live prices of crypto-assets, the euro and metals, requested directly by your browser from the market data providers listed among the recipients. At that moment your browser sends those providers your IP address and the technical data of the request, which they process as independent controllers under their own notices. No request is sent until you press the button. We neither receive nor store this data. Prices are indicative, not official exchange prices, and show their source and the time of the last quote.
- Forms in general
-
All forms are operated by Tally BV (Belgium, EU) on behalf of Horizon AI. Each form includes a bot-protection check provided by the form service. Some links to the forms carry a source tag (for example utm_source), recorded with your submission to record which channel brought you; it is not used for profiling.
The form service sets no cookies. While you fill in a form, it keeps two technical records in your browser's local storage (the progress of the form and a random respondent identifier), so that the form works and an answer is not lost if the page reloads. They are strictly necessary for the form you chose to fill in, are not used for tracking, and can be cleared from your browser settings.
1. Waitlist: analyses, personal code and notification of opening
- Data collected
-
- Email address (required).
- The channel tag in the link that brought you to the form (for example x or linkedin), if present.
- Consent given and the date and time of submission, recorded by the form service.
No name, telephone number, payment data or information about your trading account is requested.
- Purpose and legal basis
-
The email address is used to send you: straight away, a confirmation of your registration with a single-use personal code, which applies the founding terms published on the site when access opens; one or two Meridian Engine analyses a week (direction, levels and invalidation conditions) and then their outcome; once a month, the request to vote for 2 instruments among those the engine covers; one message on the day access opens, which repeats the code; and, at most once, a personal message from the founder to welcome you or ask for your opinion. The analyses are general and the same for everyone: they do not take the recipient's situation into account and are not investment advice. When you use the code, the address is used to check that the code was issued to you. The code is calculated from your address and is not stored separately. The channel tag in the link is used only for aggregate statistics on sign-up channels, on the basis of the legitimate interest of Horizon AI (Article 6(1)(f) GDPR); you can object at any time.
Legal basis: your consent (Article 6(1)(a) GDPR), given by ticking the consent box. Providing the data is voluntary; without an email address neither the code, nor the analyses, nor the notification can be sent. The address is not used for any other purpose. You can unsubscribe at any time with the link in every email or by writing to the address above.
If you invite someone with your invite link, we count the sign-ups that come from it to apply the founding terms. We do not share your data with the people you invite, or theirs with you.
- Retention
Until you unsubscribe or withdraw consent; your address is then deleted. The code expires 30 days after access opens, and withdrawing consent cancels it.
Proof of your waiting-list sign-up (date and time, version of the notice accepted, email address) is kept in the forms service and in the email service for 24 months after your sign-up is deleted.
Technical copies in the automation service: 29 to 69 days, backups up to four months.
- Processors involved
Tally (the form), Zapier (passes the data from the form to Loops and generates the personal code and the invite link), Loops (sends the confirmation, the analyses, the vote request and the notification of opening), Attio (contact record).
Form data passes from the forms service to the email service through an automation service, which keeps a technical copy in its run records for a period of 29 to 69 days and in backups for no longer than four months; these periods are set by the provider and cannot be shortened.
2. Trader questionnaire
- Data collected
Name, email address, your answers about your trading activity (instruments, experience, frequency, context, sources of information, monthly spend on research), two free-text answers and your preferred language.
- Purpose and legal basis
-
To understand how people who trade read the market and what they need, in order to decide what to build; and, if an answer needs clarifying, to write to you once by email. It is not a sale: no product is on offer. No calls are planned.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to the address above; withdrawal does not affect processing carried out before it.
- Use of the answers
Answers are read one by one and analysed in aggregate. The summaries used to decide what to build contain no name or email.
- Retention
Up to 24 months from submission, then deletion. Anonymous aggregated summaries are kept beyond that period.
- Processors involved
Tally (the form), Attio (contact record), Google (email).
2-bis. Short questionnaire "Why Meridian Engine, and what you would change"
- Data collected
Your answers to five questions (how you heard about Meridian Engine, why it interests you, what you would change, what made you hesitate) and, only if you enter it, your email address. The link you used may carry a source label (for example "home" or "email"), recorded together with your answers. No personal data is required.
- Purpose and legal basis
-
To understand why Meridian Engine is of interest and what to change, in order to decide what to build and what to fix; if you left your email and an answer needs clarifying, to write to you once. It is not a sale.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to the address above; withdrawal does not affect processing carried out before it.
- Use of the answers
Answers are read one by one and analysed in aggregate. If the email matches a waitlist subscriber or someone who filled in the trader questionnaire, the answers are noted on that contact record; otherwise they stay only in the answers log.
- Retention
Up to 24 months from submission, then deletion. Anonymous aggregated summaries are kept beyond that period.
- Processors involved
Tally (the form), Attio (contact record, only when the email matches an existing contact), Google (email).
3. Feedback on an analysis
- Data collected
The email address with which you received the analysis, which analysis you read, and your answers about its clarity, usefulness, missing or superfluous parts, price perception, intention to buy again, expected usage, and how likely you are to recommend it to another trader. No question concerns your trading operations.
- Purpose and legal basis
-
To measure whether the analyses are readable and useful and to set their price; and, if an answer needs clarifying, to write to you by email. No calls are planned. Answers enter Meridian's decision log together with those of the other readers.
Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by writing to the address above.
- Retention
Answers are kept in aggregated and anonymised form. Your email address is deleted within 12 months.
- Processors involved
Tally (the form), Attio (contact record), Google (email).
4. Investor enquiry and relations with investors and partners
- Data collected
Name, email address, firm, role, investor type, typical first cheque, stage and geography focus, sector thesis, what you want to receive, prior experience in the sector, how you heard about Horizon AI, optional questions and LinkedIn profile.
- Purpose and legal basis
-
To reply to your enquiry, send the material you asked for, and manage the fundraising conversation, including notes of calls and meetings.
Legal basis: steps taken at your request before entering into an agreement (Article 6(1)(b) GDPR) and, for the record of the conversation, the legitimate interest of Horizon AI in running the fundraising process (Article 6(1)(f)). You can object to the latter at any time.
- Source of the data
Contact details of investors, partners and intermediaries may come from public sources: fund and company websites, public professional profiles, registers and introduction platforms. In these cases this notice is provided with our first message, which states the source and how not to be contacted again. We process only name, role, organisation and professional contact details, to present the project and manage the relationship. Legal basis: our legitimate interest in seeking investors and partners (Art. 6(1)(f) GDPR); you may object at any time and your data is deleted.
- Video meetings
Video meetings with investors, partners and applicants may be transcribed by an AI note-taking service based in the United States to write meeting notes. We say so at the start of each meeting and transcription is switched off on request, without consequence. Transcripts are kept for 90 days; afterwards only the notes remain. Legal basis: our legitimate interest in documenting business meetings (Art. 6(1)(f) GDPR); you may object at any time.
- Retention
For the duration of the fundraising process and up to 24 months after its close, then deletion.
- Processors involved
Tally (the form), Attio (investor pipeline and meeting notes), Loops (sending the material by email), Google (email, calendar and video calls), the note-taking service described above (meeting transcription).
5. Press relations
- Data, purpose and legal basis
If you are a journalist or reply to one of our requests through media platforms, we process your name, outlet, contact details and the content of the exchange to answer the request and for any interview or quotation. Legal basis: our legitimate interest in communicating with the press (Art. 6(1)(f) GDPR).
- Retention
Press relations: 60 days after the request is closed; published quotations remain in the content that carries them.
- Processors involved
Google (email), Attio (contact record).
Processors and transfers outside the EU
To run the site, forms, email, contacts, meetings and our internal work we use IT service providers that process data on our behalf as processors under Art. 28 GDPR: site hosting and analytics, forms, email sending, contact management, automations between services, meeting booking and transcription, workspaces and internal notes, and AI assistants used to draft texts and internal analyses. Some are based in the United States: transfers rely on the EU-US Data Privacy Framework adequacy decision for certified providers and otherwise on the European Commission's Standard Contractual Clauses included in each contract; transfers to the United Kingdom rely on the EU adequacy decision. The current list of providers, with location and safeguard, is available on request at contact@usemeridianai.com.
The main ones are in the table below; they process data under a data processing agreement and for no other purpose. No one else receives your data, except the market data providers listed further down when you request a live price: it is not sold, shared or used for advertising.
| Service | Company and country | Role |
|---|---|---|
| Tally | Tally BV, Belgium (EU) | Operates the forms; data stored in Europe |
| Attio | Attio Ltd, United Kingdom | Contact records, investor pipeline, meeting notes |
| Loops | Loops, Inc., United States | Sends the emails described above |
| Zapier | Zapier, Inc., United States | Passes the waiting-list data from the form to Loops; copies in run records for 29 to 69 days, backups up to four months |
| Meeting note-taking | Provider based in the United States (name on request) | Transcription of video meetings with investors, partners and applicants, only after the notice at the start of the meeting; transcript deleted after 90 days |
| Google Workspace | Google Ireland Ltd, Ireland (EU) | Email, calendar and video calls |
| Vercel | Vercel Inc., United States | Hosting of this website and aggregated visit statistics (Web Analytics) |
| Market data provider | Location | Role |
|---|---|---|
| Binance | Based outside the EU | Prices of the BTC/USDT, ETH/USDT and EUR/USDT pairs, only when you press the button; no contract: independent controller |
| gold-api.com | Operator governed by the laws of the State of Utah, United States; registered office not disclosed | Gold and silver quotes, only when you press the button; no contract: independent controller |
- Transfers
The United Kingdom is covered by an adequacy decision of the European Commission. Transfers to the United States rely on the EU–US Data Privacy Framework, where the provider is certified, and otherwise on the European Commission's standard contractual clauses.
Your rights
- What you can ask
-
Access to your data, correction, deletion, restriction of processing, a portable copy, and objection to processing (Articles 15–21 GDPR). Where processing is based on consent, you can withdraw it at any time; withdrawal does not affect processing carried out before it. Write to contact@usemeridianai.com.
You can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the EU country where you live or work.
- Changes
Last updated 2026-11-09, version 3.1. Changes are published on this page with a new date.