Privacy Policy

1. Scope of this Policy

This Privacy Policy applies to Meritwright.com, the corporate website of Meritwright LLC, a Texas limited liability company doing business under the Meritwright brand. The website primarily provides information about the company, its capabilities, and its current or planned products.

This Policy does not automatically apply to every Meritwright product or service. A software product, educational offering, interactive product, marketplace listing, or enterprise service may have a separate privacy notice or agreement describing its own data practices. If a product-specific notice conflicts with this Policy for that product, the product-specific notice controls.

Product privacy notices

• Norivault desktop editions
• Norivault Mobile
• Meritwright Vault Desktop Editions
• Meritwright Vault Mobile
• Vumeli

Norivault Mobile is available for Android on Google Play. Its edition for iPhone and iPad is in Apple App Store certification and pending release, not yet publicly available. Its dedicated notice describes the current Android data-handling design and will be reviewed with the Apple store disclosures before the Apple edition launches.

2. Information we handle

Information you provide voluntarily

Meritwright.com does not operate a public contact form. If you choose to email us, we may receive your email address, name, organization, message, attachments, and any other information you include. Please do not send passwords, government identification numbers, payment-card information, medical records, claim files, or other highly sensitive information through ordinary email unless Meritwright has expressly provided an appropriate secure method.

Meritwright currently uses Microsoft 365 to deliver, protect, and store company email. Microsoft may process message content, attachments, sender and recipient addresses, delivery information, and security signals as part of providing that service.

Information processed automatically

The website is hosted and delivered through Cloudflare. When a browser requests the website, Cloudflare may process technical and security information such as an Internet Protocol (IP) address, request date and time, requested page or file, response status, browser and device details, referring page, approximate region derived from an IP address, connection details, and signs of malicious or automated traffic. Meritwright may not receive or keep every item that Cloudflare processes while operating its network.

Cloudflare may also create operational, performance, diagnostic, and security records associated with website requests. The exact data available to Meritwright and the applicable retention period depend on Cloudflare’s services and account settings.

Cloudflare Web Analytics and page-load performance measurement are enabled through Cloudflare’s automatic setup for eligible visitors outside the European Union. A small measurement request may collect the page visited, referring site, country, device type, browser, operating system, type of navigation, and measurements such as load speed and visual stability. Cloudflare states that this service does not use cookies or browser storage for analytics, does not log the extra information sometimes added after a question mark in a web address, and does not track individual visitors across unrelated websites.

Information the current website does not request

The current corporate website has no user accounts, customer login, newsletter signup, payment flow, e-commerce checkout, file-upload interface, product telemetry, crash-reporting integration, or active product-download mechanism. It does not request precise location or access to a visitor’s camera, microphone, contacts, or local files.

3. Cookies, similar technologies, and analytics

Meritwright.com’s application code does not set first-party cookies or use local storage or session storage. The website does not currently include Google Analytics, Microsoft Clarity, Meta Pixel, advertising pixels, or other client-side marketing trackers.

Cloudflare may use strictly necessary cookies or similar technologies to manage traffic, identify automated requests, remember that a visitor completed a security challenge, apply rate limits, or protect the website. Depending on Cloudflare’s settings and whether a security challenge occurs, these technologies may include Cloudflare cookies such as __cf_bm or cf_clearance. Meritwright does not use those technologies for targeted advertising.

Cloudflare website-security protections are enabled. These controls may review request and browser information to identify automated, abusive, or suspicious traffic. Cloudflare may block a request or ask a visitor to complete a security check. It may remember a passed check for a limited period based on the security settings.

Cloudflare Web Analytics is used for aggregate usage and website performance measurement, not advertising. Cloudflare describes the analytics measurement as cookie-free and designed not to track individual visitors across unrelated websites. Cloudflare’s services for adding marketing tags and managing consent are not active for Meritwright.com. Because the site does not intentionally use nonessential cookies or advertising trackers, it does not currently display a cookie-consent banner.

4. How information may be used

Information described in this Policy may be used to:

• deliver, maintain, and improve Meritwright.com;
• protect the website, company, and visitors from abuse;
• diagnose availability, performance, or security problems;
• respond to questions, support requests, or other emails;
• maintain appropriate business and communication records;
• enforce applicable terms and protect legal rights; and
• comply with applicable law and valid legal process.

5. How information may be shared

Meritwright may disclose limited information to service providers that help operate the website or business, including Cloudflare for hosting, content delivery, network security, and related services, and Microsoft 365 for company email and related security. These providers process information under their own contracts and service terms.

Information may also be disclosed to professional advisers, auditors, insurers, or vendors when reasonably necessary; to comply with law, a court order, or valid government request; to investigate fraud, abuse, or security incidents; to protect rights, safety, and property; or in connection with a merger, financing, acquisition, reorganization, or sale of relevant business assets.

No sale or targeted advertising

Meritwright.com contains no mechanism for selling personal information or using personal information for targeted advertising. It does not load advertising networks or marketing pixels. Meritwright does not knowingly sell sensitive personal information collected through this corporate website.

6. Data retention and security

Meritwright retains support communications and related business records only for as long as reasonably necessary for the purpose for which they were received, to maintain appropriate records, resolve disputes, protect the company, or satisfy legal obligations. Microsoft 365 retains company email according to Meritwright's settings and Microsoft's service terms. Cloudflare and other service providers retain technical records according to their services, settings, and contractual terms.

Cloudflare’s published Web Analytics information states that detailed measurement data is retained for seven days and that analytics may be available in the Cloudflare dashboard for up to six months, with older information stored in aggregated or sampled form. These periods are controlled by Cloudflare and may change with its services or policies.

Meritwright uses safeguards appropriate to the current website, including HTTPS, limited browser permissions, controls that restrict what the site can load, and Cloudflare security services. No method of transmission, storage, or security is completely risk-free, and Meritwright cannot guarantee absolute security. Ordinary email should not be treated as a secure channel for highly sensitive information.

7. External links and separate products

Meritwright.com links to external websites, including certification issuers and credential-verification services. An external website may collect information when you choose to visit it and is governed by its own privacy notice and terms. A link does not mean Meritwright controls that website or its data practices.

Meritwright Vault Desktop for Windows links to its Microsoft Store listing. Other editions will link to Google Play or Apple's App Store, including the Mac App Store, where applicable, as they launch. These stores process purchases and account information under their own privacy notices. Downloading, purchasing, licensing, or using a Meritwright product may be subject to a separate product privacy notice, end-user license agreement, store policy, or enterprise agreement.

8. U.S. state privacy rights

Depending on your state of residence, the nature of the information, and whether an applicable law covers Meritwright, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information. Applicable law may also provide a right to opt out of targeted advertising, sale, or certain profiling, and a right not to receive discriminatory treatment for exercising privacy rights.

To submit a request, email privacy@meritwright.com with “Privacy Request” in the subject line and describe your request. Meritwright may take reasonable steps to verify your identity and authority before responding. If an applicable law provides an appeal right, email the same address with “Privacy Appeal” in the subject line and explain your concern. Meritwright will respond as required by applicable law.

9. Children’s privacy

Meritwright.com is a general corporate website and is not directed to children under 13. The website does not knowingly collect personal information from children under 13. If you believe a child has sent personal information to Meritwright, contact us so the matter can be reviewed and the information deleted when appropriate.

A Meritwright product intended for children or families may have a separate product-specific privacy notice and age-appropriate safeguards. This corporate Policy does not describe the practices of a product that has not yet been released.

10. International visitors

Meritwright LLC is based in the United States, and information may be processed in the United States and other locations where Cloudflare or another service provider operates. Those locations may have privacy laws different from those in your country. This Policy does not claim that Meritwright or this website is certified under, or compliant with, every international privacy framework.

Cloudflare page-load performance measurement is currently configured so that its measurement tool is not loaded for visitors in the European Union. Cloudflare may still process ordinary network and security information needed to deliver and protect the website.

11. Changes to this Policy

Meritwright may update this Privacy Policy as the website, company, products, service providers, or legal requirements change. The “Last Updated” date will be revised when a new version is published. Material changes may also be highlighted on the website when appropriate.

12. Contact Meritwright

Questions, concerns, and privacy requests may be sent to: