Privacy Policy

Meridian — operated by Lamplight Technology Consulting LLC (d/b/a Lamplight Software)

Effective date: January 1, 2026 Last updated: June 8, 2026

Introduction

Meridian is a platform for heavy-duty parts distributors, service shops, and the partner networks they belong to, operated by Lamplight Technology Consulting LLC, a Montana limited liability company doing business as Lamplight Software ("Lamplight," "Meridian," "we," "our," or "us"). This Privacy Policy explains how we collect, use, share, and protect information when you visit meridianhdx.com, use the Meridian application, and participate in partner networks (the "Services").

Lamplight Technology Consulting LLC is part of the Lamplight Technology Holdings LLC corporate group. When we refer to our "corporate group" or "affiliates," we mean Lamplight Technology Holdings LLC and the companies it owns or controls.

The two roles we play

As a service provider to our business customers. When a parts distributor, shop, or dealer uses Meridian to run its operations, the business decides what information to put into Meridian and why. For that information — including the business's own customer, vehicle, and accounting records — the business is the controller and we act as its service provider/processor, handling the information on the business's behalf and under our agreement with it. If you are a customer, vehicle owner, or employee of a Meridian business, please direct privacy requests to that business first; we will support it in responding.
As the business that controls the information. When you visit our website, create or administer an account, or communicate with us directly, we decide how and why your information is handled, and this Policy governs.

Information we collect

Account and organization information. Business and entity names, branch and location details, administrator name, email, phone, address, and login credentials.

Operational and business data (handled on behalf of our business customers). Parts catalog and pricing (including multi-tier pricing and core deposits), inventory and bin locations, vendor and part numbers, counter sales and service/repair orders, scheduling and dispatch, inventory transfers, and reporting.

The business's customer and vehicle data. Information our business customers maintain about their own customers and vehicles, which may include contact details, vehicle and equipment information, service history, digital vehicle inspection records and photos, documents, AR balances, and self-service portal and CRM activity.

Accounting, payment, and ACH data. General-ledger, accounts-receivable and accounts-payable records, invoices, recurring billing, intercompany entries for multi-entity groups, and payment and bank-account information used to process payments and originate ACH (NACHA) batches, handled with our payment and banking partners.

Workforce time data. Technician time-clock entries and labor records used for service orders and payroll-preparation reports.

Usage, device, and log information. Pages and features used, actions taken in the Services, IP address, browser and device information, and approximate location derived from IP address.

Information from migrations and integrations. Information imported from systems you connect or migrate from, and business contact details from our affiliates, partners, and publicly or commercially available sources.

Because Meridian handles confidential business information and payment and bank-account details, we apply appropriate protections to it and limit access to those who need it to provide the Services.

How we use information

We use information to:

provide, maintain, secure, and support the Services, including counter sales, service orders, inventory and transfers, scheduling, customer management, accounting and AR, digital vehicle inspections, time clock, reporting, and partner-network features;
process payments and originate ACH (NACHA) batches through our payment and banking partners, as you direct;
operate Foreman and other AI-assisted features that surface insights and propose actions for your review (see below);
authenticate users, maintain audit and activity logs, and detect and prevent fraud, errors, and security incidents;
communicate with you about your account, transactions, and support requests;
understand how the Services are used and measure, troubleshoot, and improve their performance and reliability;
develop, test, and improve our products and services and create new features;
create and use de-identified and aggregated data as described below; and
comply with legal and recordkeeping obligations and enforce our agreements.

Foreman and artificial intelligence

Foreman is Meridian's owner copilot — it reads your business and surfaces insights and suggested actions. Foreman and other AI features present information and proposals for your review; you remain in control of decisions and postings. To operate these features we may use trusted third-party AI providers that process the data needed to generate a response, and we contractually restrict these providers from using your data to train their own general-purpose models, sharing only what is needed. Separately, we may use information from the Services — primarily in de-identified or aggregated form — to develop, evaluate, and improve our own models and features. AI output can be inaccurate or incomplete and is not legal, tax, accounting, or financial advice; you remain responsible for reviewing it.

De-identified and aggregated data

We may convert information into de-identified or aggregated data that does not identify, and cannot reasonably be used to identify, any individual or business. We may create, use, retain, and share de-identified and aggregated data for any lawful purpose — including to operate, analyze, benchmark, secure, and improve the Services, to develop new products and services, and to support the AI activities above. We do not attempt to re-identify de-identified data except as permitted by law to validate de-identification, and we require recipients not to re-identify it. Our rights to use de-identified and aggregated data continue after your account is closed.

Partner networks and cross-dealer sharing

Meridian lets businesses join partner networks and buying groups. Each dealer keeps its own books and its own customers. When you participate in a network, you control what is shared through per-partner permission settings ("trust rings") — for example, making certain inventory availability searchable by partner dealers, or placing and fulfilling cross-dealer orders. When you take part in a cross-dealer transaction or share data through a trust ring, the information you choose to share is disclosed to the relevant partner dealer or network operator to complete and record that activity, and the receiving party handles it under its own agreements. We facilitate these exchanges as part of the Services and at your direction; we do not make your data available to other dealers except as you configure or as needed to complete a transaction you initiate.

How we share information

We do not sell your personal information for money. We share information as follows:

To deliver the Services — with payment and banking partners to process payments and ACH (NACHA) batches, and with hosting, communications, e-signature, and similar providers.
With partner dealers and network operators — as described in "Partner networks and cross-dealer sharing," at your direction and according to your trust-ring settings.
With your authorized users and at your direction — including with integrations you connect.
With service providers and sub-processors — vendors who perform services for us under contracts that limit their use of the information to providing services to us.
Within our corporate group — with our affiliates, to operate, support, secure, and improve our shared products and services.
For legal and safety reasons — to comply with law or legal process, enforce our agreements, or protect the rights, property, or safety of Lamplight, our customers, or others.
In a business transaction — in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to the commitments in this Policy.
In de-identified or aggregated form — as described above, without restriction.
With your direction or consent — for any other sharing you ask us to do or agree to.

SMS/text data. If you opt in to text messaging from us, the mobile information you provide for that purpose, and your consent, will not be shared with or sold to third parties or affiliates for their own marketing purposes.

Data security

We maintain a written information security program with administrative, technical, and physical safeguards designed to protect information appropriate to its sensitivity, including encryption in transit and at rest, US-based data hosting, access controls, and tamper-evident audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; please keep your credentials confidential and configure user access appropriately.

Data retention

We keep information for as long as needed to provide the Services and to meet legal, tax, and financial-recordkeeping obligations, which may require retaining accounting and transaction records for several years. When information is no longer needed, we delete it or de-identify it, after which we may retain and use the de-identified data as described above. You can export your data at any time.

Your privacy choices and rights

You can opt out of marketing emails using the unsubscribe link, opt out of marketing texts by replying STOP, and manage cookies through your browser. Depending on where you live, US state privacy laws may give you the right to request access to, correction of, or deletion of your personal information, and to opt out of certain uses such as targeted advertising. To exercise these rights, contact us at privacy@llt.llc. We will verify your request before acting on it and will not discriminate against you for exercising your rights. If you are a customer, vehicle owner, or employee of a Meridian business, that business controls your information; we will refer your request to it and support it in responding.

Where we operate

We are based in the United States and operate the Services in the United States. If you access the Services from outside the United States, your information will be processed in the United States.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Services or by other reasonable means and update the "Last updated" date above. Your continued use of the Services after the changes take effect means you accept the updated Policy.

Contact us

Lamplight Technology Consulting LLC (d/b/a Lamplight Software) — Meridian Email: privacy@llt.llc (privacy requests) · support@llt.llc (general) Mail: PO Box 3135, Columbia Falls, MT 59912 Phone: 877-642-6627