Privacy Policy

Scope

This Privacy Policy explains how Meridian Zero LLC (d/b/a Pegasus Three Sixty)(“we”, “us”) handles personal information in connection with the Spearhead website, API, and evidence packets (the “Service”). It does not apply to third-party sites or services we link to. The company-valuation data published through the Service is derived solely from publicly reported events and is not personal information about you.

Information we collect

• Account information — name, work email, organization, and the credentials you create when you register or request an API key.
• Billing information — handled by our payment processor, Stripe. We receive limited billing metadata (such as subscription status and the last four digits of a card); we do not store full card numbers.
• Usage and API logs — requests, timestamps, IP address, tier, rate-limit counters, and error events, used to operate, secure, and meter the Service.
• Communications — messages you send us, including pilot and support requests.

We do not knowingly collect special-category personal data and ask that you not submit it through the Service.

How we use information

• Provide, maintain, secure, and improve the Service.
• Authenticate users, issue keys, and enforce rate limits and tiers.
• Process payments and manage subscriptions through Stripe.
• Respond to inquiries and provide support.
• Detect, prevent, and investigate abuse, fraud, and security incidents.
• Comply with legal obligations and enforce our terms.

Legal bases

Where required by law, we rely on the following legal bases: performance of our contract with you (providing the Service and billing), our legitimate interests (securing and improving the Service), compliance with legal obligations, and your consent where applicable. The bases that apply depend on the law of Delaware and of your location.

Processors and sharing

We share information with service providers who process it on our behalf under contract, including payment processing (Stripe), hosting, and infrastructure providers. We do not sell personal information. We may disclose information to comply with law, enforce our terms, or protect rights, safety, and security, and in connection with a corporate transaction subject to this Policy.

Retention and security

We retain personal information for as long as needed to provide the Service and to meet legal, accounting, and security obligations, then delete or anonymize it. We use administrative, technical, and organizational safeguards appropriate to the risk; however, no method of transmission or storage is completely secure.

Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing or withdraw consent. To exercise these rights, contact legal@pegasusthreesixty.com. We will respond as required by applicable law. You may also have the right to lodge a complaint with a supervisory authority.

Cookies

The website uses only cookies and similar technologies that are necessary to operate the Service and keep it secure, such as session and authentication cookies. If we introduce optional analytics, we will update this Policy and provide any required controls.

International transfers and children

Information may be processed in countries other than your own, including where our processors operate; where required we use appropriate safeguards for such transfers. The Service is not directed to children and is intended for business and professional users.

Changes and contact

We may update this Policy from time to time and will post changes here with a revised effective date. For privacy questions, contact legal@pegasusthreesixty.com or Meridian Zero LLC (d/b/a Pegasus Three Sixty) at Delaware, United States (mailing address available on request at legal@pegasusthreesixty.com).