Meranti Privacy Policy

Effective Date: October 2, 2026
Last Updated: October 2, 2026

This Privacy Policy (the “Privacy Policy”) explains how Light Year Software, LLC, an Ohio limited liability company doing business as Meranti (“Meranti,” “we,” “us,” or “our”), collects, uses, and shares personal information. Capitalized terms used in this Privacy Policy but not otherwise defined herein have the meanings set forth in the Terms, including “Services,” “Customer Site,” “Customer Content,” “Visitor Content,” and “Your Content,” have the meanings given in Section 1 of the Terms of Service.

1. Who this policy covers

This Privacy Policy covers two categories of individuals:

(a) Customers and visitors to the Meranti Site. For information collected in connection with the Meranti Site and our direct relationship with Customers, Meranti determines the purposes and means of processing that information, and this Privacy Policy applies in full.

(b) Visitors to Customer Sites. Customer Sites are operated and controlled by our Customers, not by Meranti. When a Customer Site collects information from its Visitors (for example, through contact forms, account registrations, newsletter sign-ups, or other interactions), Meranti processes that information solely on the Customer’s behalf and only as necessary to provide the Services. The applicable Customer controls how that information is collected, used, disclosed, and retained, and the Customer’s own privacy notice governs those activities. If you are a Visitor and have questions about your information or wish to exercise any privacy rights relating to information collected through a Customer Site, you should contact the owner of the Customer Site directly. Section 3 explains the information we process on behalf of Customers.

2. Information we collect about our customers

2.1. Account and Billing Information. Your name, email address, billing address, and business name if you provide it. Payment card details are collected and stored by our payment processor, Stripe. We receive only limited billing information, such as the card type, last four digits, expiration date, and transaction history, not full card numbers.

2.2. Sign-In Information. The passkey credential or email sign-in link associated with your account. We do not use passwords. For account recovery, we store only a hashed version of your recovery phrase, which we cannot read back.

2.3. Domain Registration Information. If you register a domain through us, the registrant contact information the registry and ICANN require, which we share with our registrar partner.

2.4. Your Content. The website content, files, and settings you create or upload using the Services.

2.5. Support Communications. Messages you send us and our responses.

2.6. Technical Information. When you use the Services, we and our service providers may collect limited technical and diagnostic information necessary to operate, secure, and troubleshoot the Services. This may include IP address, browser and device type, timestamps, error reports, and information about the request associated with an error or security event. We use third-party monitoring and error-tracking tools to help diagnose and resolve technical issues.

2.7. Meranti Site Visitors. If you visit the Meranti Site or contact us before becoming a Customer, we collect the information you give us (such as your name, email, and message) and the limited technical information described in Section 2.6.

3. Information we handle for customers about their visitors

3.1. Contact Forms. If a Customer Site includes a contact form, the form collects the Visitor’s name, email address, and message. We use this information only to deliver the message by email to the Customer who runs the site. Messages are transmitted through our email service provider, Postmark, which retains message content and associated metadata for up to 45 days for message delivery, troubleshooting, and operational purposes. We do not otherwise retain contact form messages after they have been delivered.

3.2. Newsletter Sign-Ups. If a Customer Site includes a newsletter sign-up form, the form collects the Visitor’s email address. We send a verification email to that address, and the address is added to the Customer’s list only after the Visitor confirms. We store the list, including the confirmation date, so the Customer can export it and use it with an email provider of the Customer’s choice. We do not send newsletters, and we do not use subscriber lists for any other purpose. A list stays with us until the Customer deletes the address or the list, or the Customer’s account ends and the data is deleted under Section 7.

3.3. Technical Information About Visitors. When someone visits a Customer Site, we and our service providers necessarily process certain technical information, including the Visitor’s IP address, browser information, and network request data, in order to deliver, secure, and operate the Customer Site. Please see Section 7 for information regarding retention of technical information.

3.4. Third-Party Tools on Customer Sites. Customers can embed third-party tools, such as maps or booking widgets, and on Managed WordPress Hosting may use plugins and accept blog comments. Those tools, and any cookies they set, are controlled by the Customer and the third-party provider, not by us.

3.5. Our Role. We do not sell Visitor information, use it for our own marketing, or combine it with other data. We use and disclose it only to provide the Services to the Customer, to secure the Services, and as required by law.

4. How we use customer information

We use the information described in Section 2 to:

provide, operate, maintain, and improve the Services;
create and administer accounts;
process payments and prevent fraud;
provide customer support and respond to inquiries;
send service-related, security, administrative, and billing communications;
send occasional product updates and marketing communications, from which you may unsubscribe at any time;
monitor, troubleshoot, diagnose, and fix technical issues;
protect the security, integrity, and availability of the Services;
enforce our Terms, AUP, and other policies;
comply with legal, regulatory, accounting, tax, domain-registration, and law enforcement obligations; and
exercise and protect our legal rights.

We do not use Customer Information for targeted advertising, and we do not sell Customer Information.

We do not sell personal information, and we do not share personal information for targeted advertising. We disclose personal information only as described below:

5.1. Service Providers. We share information with third-party service providers that help us operate, secure, and support the Services. These providers may access, process, or store information only as necessary to provide services to us and for other purposes permitted by their agreements with us and applicable law.

5.2. Customers. We provide contact form submissions and make newsletter subscriber lists available to the Customer that operates the Customer Site through which the information was collected.

5.3. Legal and Safety. We may disclose information if we believe disclosure is required by law, regulation, legal process, or governmental request, or if we reasonably believe disclosure is necessary to protect the rights, property, safety, or security of Meranti, our customers, the Services, or others, or to investigate, prevent, or address fraud, abuse, security incidents, or violations of our Terms or AUP.

5.4. Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or other corporate transaction, information may be transferred as part of that transaction. We will provide notice where required by law.

6. Cookies

On the Meranti Site and in your account dashboard, we use only cookies and similar technologies that are reasonably necessary to provide, secure, and operate the Services, such as keeping you signed in, maintaining account preferences, and protecting your account. We do not use advertising cookies or technologies for cross-site behavioral advertising. Since we do not track users across third-party websites for advertising purposes, our Services are not designed to respond differently to browser-based "Do Not Track" signals.

Any cookies or similar technologies placed on a Customer Site by embedded content, plugins, integrations, analytics tools, or other third-party services selected by the Customer are controlled by the Customer and the applicable third party, not by Meranti.

7. How long we keep information

7.1. Active Accounts. We retain account information and Your Content for as long as your account remains active and as necessary to provide the Services.

7.2. After Your Account Ends. Following cancellation or termination of your account, we retain your data for thirty (30) days and then permanently delete it, as described in Section 13.5 of the Terms. Newsletter subscriber lists associated with your Customer Sites are retained and deleted on the same schedule. Copies contained in routine backup systems are deleted or overwritten in the ordinary course of business.

7.3. Exceptions. We may retain information for longer where required or permitted by law, including to comply with tax, accounting, audit, legal, regulatory, fraud-prevention, or security obligations, to respond to lawful requests from governmental authorities, or to establish, exercise, or defend legal claims. We may also retain information subject to a litigation hold, preservation obligation, or law enforcement request as described in the AUP.

8. Your choices and rights

8.1. Your Account. You can access, update, export, and delete much of your account information and content through your account dashboard.

8.2. Requests. Subject to applicable law, you may request access to, correction of, deletion of, or a copy of the personal information we maintain about you by emailing legal@meranti.host. We may need to verify your identity before processing a request. We may deny a request or retain certain information where permitted or required by law, including for tax, accounting, fraud-prevention, security, or legal compliance purposes. We will not discriminate against you for exercising your privacy rights.

8.3. California Residents. If you are a California resident, you may have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, to the extent applicable to us. We have not sold personal information or shared personal information for cross-context behavioral advertising during the preceding twelve (12) months, and we do not knowingly sell or share the personal information of individuals under sixteen (16) years of age. During the preceding twelve (12) months, we have collected the categories of personal information described in Section 2, including identifiers, commercial information (such as billing history), internet or network activity information (such as error and diagnostic information), and account authentication information. We collected and used those categories for the purposes described in Section 4. You may designate an authorized agent to submit a request on your behalf, subject to verification requirements.

8.4. Visitors to Customer Sites. If you submitted information to a Customer Site, please direct your request to the operator of that Customer Site. We process such information on the Customer’s behalf. If you contact us regarding information collected through a Customer Site, we may assist by directing the request to the applicable Customer where we are able to identify them.

9. Children

The Services are for adults 18 and older, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information from a child in our own capacity, we will delete it. Customers are responsible for complying with children’s privacy laws on their own Customer Sites.

Customer Sites are operated by our Customers, not by Meranti. Customers are responsible for determining whether their Customer Sites are directed to children and for complying with applicable children’s privacy laws, including the Children’s Online Privacy Protection Act (COPPA) and any similar laws.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and password-less authentication. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident involving your personal information, we will provide any required notices in accordance with applicable law.

11. U.S. operations

The Services are operated from the United States and are intended primarily for Customers located in the United States. If you access or use the Services from outside the United States, you understand that your information may be transferred to, processed in, and stored in the United States, where privacy and data protection laws may differ from those of your jurisdiction.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make a material change, we will provide notice using the process described in Section 17 of the Terms and will update the "Last Updated" date at the top of this Privacy Policy. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes your acknowledgment of the updated Privacy Policy.

13. Contact us

Questions or requests about this policy can be sent to legal@meranti.host or to:

Light Year Software, LLC, d/b/a Meranti
3680 West Dublin-Granville Rd #1007
Columbus, OH 43235