Your studio information stays private.

Who is responsible

Merivo, Inc is the data controller for Merivo Studio Growth. Contact us by email at hello@merivo.ai.

You can also write to:
Merivo, Inc
2093 Philadelphia Pike, Suite #3016
Claymont, DE 19703
United States

The service is for adults who own or operate boutique fitness studios. It is not intended for children, and we do not knowingly collect their information.

What we collect

If you apply, we ask for:

• your name, email address, studio name and location;
• your website or Instagram account, when you choose to share it;
• the part of the studio you want to improve and any notes you add;
• extra information about your studio stage or launch when it is relevant to the offer; and
• your required privacy choice and separate optional marketing choice.

Please do not put health information, payment-card details or other sensitive personal information in the free-text box.

The site also records a random page-view ID, the page you visited, the referring page, and campaign or click identifiers such as UTMs, gclid or fbclid. First-party funnel events record whether a page was viewed, a button was clicked, an application was started or an application was sent. Those funnel records do not contain your application answers, IP address or browser user agent. Hosting and security systems may process basic request information to deliver and protect the site.

If you are accepted and choose to continue, we also keep scheduling details, email history, the outcome of the human suitability review and the information needed to deliver the diagnostic or sprint.

Why we use it

• To review your application and reply to you.
• To decide, by human review, whether the paid work is likely to help.
• To arrange a session and deliver work you choose to buy.
• To keep the site secure, prevent duplicate or automated submissions and understand whether the application journey works.
• To send occasional marketing only when you separately ask for it.
• To meet legal, tax, accounting or dispute-handling duties when they apply.

For UK and European data-protection law, the usual legal bases are steps you ask us to take before a contract, legitimate interests in running and protecting the service, your consent for optional marketing and analytics, and legal obligations where required. You can object to processing based on legitimate interests by using the contact details below.

We do not use solely automated decisions that have legal or similarly significant effects. A person reviews every application.

Who receives it

We limit access to people and suppliers who need the information for the purposes above. Suppliers include Fly.io for hosting and database storage, Resend for email delivery, and a video meeting provider such as Google Meet or Zoom when a session is booked. Lawyers, accountants, insurers, regulators or courts may receive information when needed for advice, compliance or a legal claim.

These suppliers may process information outside your country, including in the United Kingdom, European Economic Area and United States. You can ask for more information about the safeguards that apply to your record.

We do not sell personal information. Some US laws may call the transfer of browser and server events to an advertising platform “sharing”. Those tools will not run unless you choose to allow them.

Cookies and analytics

The site may use an essential session cookie for security and form submission. It stores your analytics choice in your browser so it can remember whether you allowed or declined optional tools. You can clear that choice in your browser or reopen “Analytics choices” in the page footer when optional analytics are available.

First-party funnel events help us understand the path from a visit to an application. They use the random page-view ID and campaign details described above, not your application answers.

We use PostHog US Cloud and Meta Business Tools for campaign measurement only after you select “Allow analytics”. Declining is as easy as accepting, and the application works without optional analytics. PostHog is configured not to create a person profile. Meta receives matching browser and server events so it can measure campaigns without counting the same action twice. The server event includes your IP address and browser user agent, which Meta requires for website events, but Merivo does not add them to its first-party funnel records. Meta may set or read its own browser identifiers after consent.

How long we keep it

• Unsuccessful applications and identifiable funnel records are kept for no more than 12 months.
• Marketing choices are kept until you withdraw them or the contact is no longer useful.
• If you buy a service, delivery, contract, tax and payment records are kept for the period required by law or needed to handle a claim.
• Security records are kept only as long as needed to protect and investigate the service.

When information is no longer needed, we delete it or remove the link to you. Backups and provider logs may take a short further period to expire through their normal rotation.

Your rights

Depending on where you live and the law that applies, you may ask to access, correct, delete or receive a copy of your personal information; restrict or object to its use; withdraw consent; or complain about how it is handled. Withdrawing consent does not make earlier lawful use unlawful. We will not treat you unfairly for using a privacy right.

We may need enough information to verify that the request is yours. Some rights have legal exceptions, for example where a record must be kept for tax, fraud-prevention or legal-claim purposes. We will explain any exception that applies.

Contact and complaints

Email hello@merivo.ai with “Privacy” in the subject to ask a question, change a marketing choice or use a privacy right.

You can also complain to the regulator where you live. These include the UK Information Commissioner’s Office, Ireland’s Data Protection Commission, the Office of the Privacy Commissioner of Canada, the Office of the Australian Information Commissioner, the New Zealand Office of the Privacy Commissioner, and the relevant US state privacy regulator or attorney general.

We will update this notice when the controller, suppliers or data uses change. The date at the top shows the current version.