How Made on Merit Systems Inc. collects, uses, shares and protects information, including information we receive from Google.
Made on Merit Systems Inc. ("Made on Merit", "we", "us") is a Canadian corporation. This policy covers madeonmerit.com, our website enquiry and session registration forms, Live Sessions and member sign-in, email sent to our published addresses, and the Made on Merit administration application used by our authorized staff, including its Google integrations. Services provided under a client agreement are also governed by that agreement.
Enquiries and email. When you send an enquiry, we collect the details you provide: your name, company, email address and message. When you email us, we receive your email address and the contents of your message.
Security information. To protect our website and forms from automated abuse, our security provider processes limited technical information such as your IP address and browser signals.
Administration application. Authorized staff sign in with Google. We keep their account details, role and an audit record of actions taken in the application.
Interactive examples on this website run in your browser and do not send what you enter in them to us.
When you register, we collect your name, email address, selected session and date, timezone where provided, registration status, and your choices about session administration and optional marketing. A configured registration form may request additional relevant information, which is explained on that form. We keep registration, cancellation, attendance and communication records to operate the session and maintain an accurate relationship history. Registering, attending and becoming a member are separate actions.
We use these details for confirmations, calendar information, reminders, changes, cancellations and attendance instructions. Permission for unrelated marketing is optional and separate. Declining marketing does not prevent session registration.
Members-only access uses an existing account and a verified active commercial membership term. We retain relevant access dates and supporting commercial references. Signing in, having a contact record or receiving a private registration link does not itself grant membership. Member email sign-in uses a browser-bound, single-use link that expires after 15 minutes. Staff continue to use their authorized staff sign-in.
RingCentral provides the live video room. It processes the identity and technical information you provide when joining. Where reliable attendance information is available, or an authorized operator records attendance, we associate that information with the relevant occurrence. Registration alone is not recorded as attendance. Any recording or transcript use will be explained for that session; this release does not automatically start session recording or transcription.
Private registration and joining information is limited to authorized registrants and operators. Members-only attendance also requires current member sign-in and access. Please keep private links and meeting details secure. The host manages admission to protected video rooms.
Our administration application uses Google sign-in and, when a staff member chooses to connect them, Gmail and Google Calendar. We request only the access each feature needs:
How we use it. We use Google user data only to provide these features to the staff member who connected them. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models.
Sharing. We do not share or transfer Google user data to third parties except our infrastructure provider (Cloudflare), which stores and processes it on our behalf to run the application, or where required by law. People at Made on Merit do not read Google user data unless the connected user asks us to, it is needed for security or to comply with the law, or it has been aggregated and anonymized for internal operations.
Storage and protection. Google access and refresh tokens are encrypted before they are stored, and staff integration settings are available only to authorized staff over encrypted connections.
Retention, revocation and deletion. We keep Google access tokens only while an integration is connected. Disconnecting Gmail or Google Calendar in the application deletes the access and refresh tokens we store and asks Google to revoke our access, unless another of your connections to Made on Merit still uses the same Google account, in which case access is revoked when you disconnect that last connection. After you disconnect, we keep only the sending address and display settings you chose and records of messages and meetings the application sent or scheduled, as long as needed for our records, and we delete them on request. You can also remove our access at any time at myaccount.google.com/permissions. To ask us to delete Google user data we hold, email privacy@madeonmerit.com.
Limited Use. Made on Merit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use enquiry and contact details to respond to you, manage our conversation and keep a record of it. We use session and membership information as described above. We use account and audit information to run and secure the administration application, and technical information to keep the website and forms secure. We do not sell personal information, and we do not add you to marketing lists from an enquiry. Any other use would require appropriate notice and, where needed, your consent.
Website enquiries are reviewed by people. AI-enabled functions in client services operate within explicit customer-configured permissions and data-access limits, and consequential actions retain human authority as described in the relevant service agreement. Google user data is never used to train AI models.
We use Cloudflare to host this website, our enquiry service and the administration application and to protect forms from automated abuse, Google Workspace for email and calendars, and RingCentral for live video sessions. These providers process information on our behalf and may store or process it outside Canada, including in the United States, where it may be subject to the laws of those countries. We do not sell personal information or share it with other third parties except where required by law.
Access to enquiries and the administration application is limited to authorized Made on Merit personnel who need it. We use access controls, encrypted connections, encryption of stored credentials and audit logging to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
We keep personal information only as long as needed for the purpose it was collected for and any legitimate legal or business requirement. We review closed and inactive enquiries at least quarterly, review unresolved enquiries no later than 12 months after the last meaningful activity, and delete or anonymize personal information once it is no longer needed. Session access links and member sign-in links have limited lifetimes; expiration does not automatically delete registration or commercial history. Privacy requests are reviewed across the relevant systems. Removing identifying details from a session registration does not by itself erase separate contact or membership records, provider records or copies of messages already sent. Google user data is kept as described in the Google user data section. Records may be kept longer where the law or a genuine business requirement applies.
Under applicable Canadian privacy law, you can ask to access or correct the personal information we hold about you, ask questions about how it is handled, ask us to delete it, or withdraw consent where applicable. Send requests to Made on Merit Systems Inc. at privacy@madeonmerit.com. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.
This website does not use advertising trackers or analytics cookies. Some interactive examples store their state in your browser for convenience; this stays on your device. The administration application uses strictly necessary session cookies to keep staff signed in. Member sign-in also uses a necessary session cookie on the administration service, and a short-lived browser challenge cookie to protect email sign-in. Session forms may keep a random recovery receipt or private management capability in that browser tab's session storage so an interrupted request or a refreshed registration can be checked. These recovery records do not intentionally contain your registration answers. Our security provider may use strictly necessary technical signals to distinguish people from automated traffic.
This policy is effective October 18, 2026. We will post any changes on this page with a new effective date. For privacy questions or requests, contact Made on Merit Systems Inc. at privacy@madeonmerit.com.