Privacy Policy

Meridian by AstroDu

Last updated: September 2026

Meridian involves two categories of data subject: the employer who holds the account, and the candidate or employee an assessment is generated about. This policy addresses both, because their rights and our obligations to each differ.

1. Who is responsible for your data

Meridian is operated by Iyanda, trading as AstroDu, based in Ibadan, Oyo State, Nigeria. [Registered business name and CAC RC number to be inserted once incorporation is complete.]

For employer account data, AstroDu is the data controller. For candidate/employee data submitted by an employer to generate a report, AstroDu acts as a data processor — the employer is the controller and is responsible for having a lawful basis to submit that person's data to us.

2. What we collect

From the employer: account details (name, email, organisation), payment information (processed by Flutterwave; we don't store card details), and usage history (reports generated, dates).

About the assessed individual: whatever the employer submits to generate a report — typically birth date, and role/position information. We only use this to generate the report requested; we do not independently seek out or supplement this data.

3. How report data is used and shared

An assessment report is generated and made visible only to the employer account that requested it. We do not share, sell, or repurpose an individual's assessment data for any other employer's use, for AstroDu's own consumer products, or for AI model training.

4. Retention

Employer account data is kept while the account is active. Individual assessment data (the birth/role data submitted to generate a report, and the report itself) is retained as long as the employer's account remains active, since reports are meant to be re-accessible from the employer dashboard. If an employer deletes their account, associated assessment data is deleted with it.

5. Rights of the assessed individual

If you are a candidate or employee who was the subject of a Meridian report and want to know what data was submitted about you, we can confirm this to you, but any correction or deletion request should generally go through the employer who submitted it, since they are the data controller for that submission. If you're unable to resolve this with the employer directly, contact us at hello@astrodu.com and we'll assist within the limits of our role as processor.

6. Rights under the NDPA (employer account holders)

Access, correction, deletion, restriction, portability, objection, and the right to complain to the NDPC — same framework as AstroDu's main Privacy Policy. Contact hello@astrodu.com or WhatsApp +2348125008097.

7. Security

Encrypted connections, hashed passwords, tokenized payment data. No system is perfectly secure, and we don't guarantee otherwise.

8. Changes & Contact

Contact: hello@astrodu.com / WhatsApp +2348125008097.