Privacy policy
Last updated 5 November 2026
Merqado is a workspace for consulting firms, operated by Guava Ventures (“we”). This policy explains what we collect when your firm uses Merqado, why, and the choices you have. Your firm is the customer and decides what client data goes into Merqado; for that data we act on your firm’s instructions.
What we collect
- Account details from your work sign-in (Google, Microsoft or your firm’s identity provider): your name, work email address and, for Microsoft, your organization’s tenant ID. We do not receive or store your password.
- Work content your team adds: engagements, file names and metadata, findings, messages and questions. The files themselves stay in your firm’s own cloud storage when your firm connects it.
- Usage records: sign-in sessions and, for each AI request, the model used and the number of tokens, so usage can be shown and billed.
How we use it
Only to provide Merqado to your firm: to sign you in, show you the engagements you belong to, answer questions about your engagement data, generate documents you ask for, secure the service and bill your firm. We do not sell personal data, use it for advertising, or use your firm’s content to train AI models.
Google user data
When you continue with Google we request only your basic profile and email address (the openid, email and profile scopes) to identify you and confirm which firm you belong to. Merqado’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share it with
- People at your firm who are members of the same engagement.
- Service providers that run Merqado for us: hosting (Render), database (Turso) and, when your firm uses Merqado’s managed AI, the AI model provider (Anthropic). If your firm connects its own AI model or storage, data goes to those providers under your firm’s own agreements.
- Authorities, where the law requires it.
Security and retention
Data is encrypted in transit, and stored credentials (such as AI or storage keys) are encrypted at rest. We keep account and work data for as long as your firm uses Merqado, and delete it when your firm asks or closes its account, apart from records we must keep by law.
Your choices
You can ask to see, correct or delete your personal data. Because your firm controls its workspace, we may pass your request to your firm’s Merqado admin. Contact us at maxam@guava.ventures.
Changes
If we change this policy we will update the date above, and tell firm admins about significant changes.