Terms of Service

Investigation reports and evidence

You must have permission to submit every file in a report. You give Meridian a narrow, non-exclusive license to store, inspect, and reproduce the evidence only as needed to investigate the report and reply to you. That license ends when the evidence is deleted.

Do not submit unlawful, non-consensual, or unnecessary sensitive material. Remove unrelated faces, names, addresses, account details, location information, and other personal information before uploading. Meridian may reject or immediately delete unsafe files.

Forma cannot control or reverse how an unaffiliated service describes an export and does not guarantee that a report will produce a particular outside result.

Mistaken evidence can be deleted immediately through the report status link. Otherwise, evidence is deleted seven days after the report is marked Addressed.

What Gesso is

Gesso is a design app and hosted web experience from Meridian Studios. It helps you make, edit, organize, and export visual work. Core editing is designed to work locally, so using Gesso does not require an account or a network connection for every task.

These Terms apply when you use the Gesso app, website, account features, or other services that link to these Terms. Our Privacy notice explains how the different product surfaces handle information.

Using Gesso means you accept these Terms

By using Gesso, you agree to these Terms and to use the service lawfully. If you are using Gesso for an organization, you confirm that you are allowed to accept these Terms for that organization. If you do not agree, do not use the account or hosted features.

If a law gives you rights that these Terms cannot limit, those rights remain. We may update these Terms when the service or the law changes. We will show the new date and provide notice for material changes where practical.

Your local work and optional account

Your local projects, documents, imported assets, drafts, and exports remain your responsibility. Local-first does not mean Meridian has a backup of your browser or device. Export important work and keep copies you need.

An account is optional for the current web editor. An account helps Gesso recognize you across sessions, but signing in does not automatically migrate the local work already stored in your browser or promise hosted document sync.

• Keep account credentials and recovery links private.
• Tell us through support if you think an account was used without permission.

Your content and rights

You keep the rights you already have in the content you import, create, edit, or export with Gesso. You are responsible for having the permissions needed to use that content, including fonts, images, marks, names, and other protected material.

For fonts you upload or share, you are responsible for the licenses needed for your use, including any embedding, redistribution, collaboration, or commercial use. Organization and project font libraries and typography presets organize your selections; they do not grant font rights or guarantee that another device can use a font it does not have.

If you choose a Pexels photo, the Pexels License and any rights belonging to people, brands, artwork, or property shown in the photo still apply. Gesso shows “Photos provided by Pexels” and photographer attribution while you browse, inspect the asset, and review selected PNG exports. Optional export manifests retain the same credit as separate metadata. Gesso does not add a Pexels watermark or attribution layer to your exported design; the Pexels License says attribution is not required, although credit is appreciated when practical.

You may not sell or distribute a Pexels photo on a standalone basis. A filter, resize, color change, or crop alone remains standalone use; combine the photo with text, illustrations, other media, background features, and editing techniques to make a genuinely new creative work. Do not imply that a depicted person or brand endorses your work, and do not use Pexels content as a trade-mark, design mark, trade name, business name, or service mark.

When you deliberately use an optional hosted feature, you give Meridian and the configured provider only the limited permission needed to operate that feature for you. We do not claim ownership of your creative work through these Terms.

Meridian does not operate AI models

Meridian does not provide, operate, or train AI models. Gesso does not send your creative work, documents, imported files, exports, prompts, or account information to a Meridian model-training pipeline.

Supported native releases may offer narrow, optional Apple Intelligence suggestions, such as proposed names. These features depend on Apple’s availability rules and policies. Suggestions may be incomplete or wrong, and you are responsible for reviewing them before use.

AI and connected agent tools

AI and connected agent tools are Off by default. You must turn them on from your Account before Gesso can start or continue AI or MCP work for you. When they are Off, their controls are hidden and Gesso rejects direct or stale requests before it creates context or saves a change.

Gesso has five reviewed connections. Two are MCP connections, one for OpenAI Codex and one for Anthropic Claude Code, where a client you run on your own computer reads approved Gesso context and proposes changes. Two are visual-agent connections, again one for OpenAI Codex and one for Anthropic Claude Code, which send the image you selected to that provider for a cutout or vector refinement. The fifth is Ollama Local, which suggests text on your own device.

A connected agent may address a social campaign or a fixed canvas, may propose changes to your Brand Book, and may read your Work board without being able to change it: no website document, and no surface the published capability does not name. The minimum approved inbound context is limited to selected text, brand rules, document metadata, stock photo search results, the shared campaign headline, and — on a canvas only — the position, size and shape geometry of the blocks on it. Gesso does not expose raster or image data, image file identifiers, whole documents, credentials, local paths, or unrelated attachments through the MCP connections, and the visual-agent connections carry nothing but the bounded image projection for the refinement action they name.

A connected agent may propose document and Brand Book changes and may ask Gesso to search stock photography on your behalf. A Brand Book change is refused when your own access to that book does not permit changes, and undoing one restores the exact book it replaced. Gesso supplies no model and generates no artwork or text: the agent submits changes in Gesso’s own document format, Gesso validates them, and nothing reaches your document until you approve that exact proposal. Stock searches run through Meridian’s provider key and quota under the same license terms as the Library’s own search, and an imported photo keeps its photographer and license record.

Turning on this account control does not authorize every provider, connector, tool, document, or change. Each action remains subject to its own review, permission, and scope checks.

Turning the control Off stops running authenticated work and disconnects pending agent sessions. Accepted edits, local work, workspace sync, and document history remain. After approved context reaches OpenAI through Codex or Anthropic through Claude Code, Gesso cannot recall it; the person’s provider product, account, plan, settings, terms, privacy, retention, and training controls govern that side.

• You are responsible for reviewing the provider and connector permissions that apply to each action you choose.
• No hosted model or remote MCP connector is available in the current web V1. A future route must identify its provider and publish its applicable privacy information before release.

AI connection disclosures

This notice describes reviewed connections; it does not activate or connect a provider. AI and connected agent tools are Off by default and hidden. Turning on the master control reveals the individual connections but does not enable any provider; each connection requires its own opt-in and acknowledgement. Gesso sends only the approved data classes for a declared action.

Meridian is responsible for its own collection, authorization, minimization, security, and transfer boundary. Each provider's terms and privacy policy apply in addition to Gesso's, and handling may depend on the provider, product, account, plan, and settings. Model-improvement consent is separate from connection approval.

The reviewed inbound MCP connections authorize the shape geometry of a canvas — the position, size and path of the blocks on it — only where the connection names shape geometry above, and only while a canvas is the open document. The separately reviewed outbound visual-agent connections authorize only a bounded selected raster projection for their named refinement actions. No connection authorizes whole documents, credentials, local file paths, or unrelated attachments.

Inbound MCP connections do not authorize raster or image data, image file identifiers, whole documents, credentials, local file paths, or unrelated attachments.

Turning a connection off stops future processing. Gesso cannot control or recall data a third-party provider has already received.

• The Codex and Claude Code MCP connections connect a locally started client process to Gesso’s MCP bridge over standard input and output; that client may then send approved context to its provider under the client’s applicable controls.
• The Codex and Claude Code visual-agent connections reach Gesso’s signed gateway over an authenticated loopback connection, and the agent it starts sends only the authorized image projection for the named refinement action under the person’s provider account and settings; they are not local-model or no-upload routes.
• Ollama Local processes approved selected text on this device. Model downloads, software updates, account activity, and cloud-model use are separate network paths.

Use Gesso responsibly

You may not use Gesso to break the law, infringe another person’s rights, distribute malware, attack or disrupt the service, bypass security or access controls, interfere with another person’s account, or submit content that creates a serious safety or legal risk.

Do not probe, scrape, reverse engineer, or automate a hosted endpoint in a way that defeats its safeguards or creates unreasonable load. These rules do not prevent uses that applicable law does not allow us to restrict.

Gesso and third-party services

Gesso’s software, name, visual identity, documentation, and service design belong to Meridian Studios or its licensors. These Terms give you permission to use the service; they do not transfer Meridian’s intellectual property to you.

Google, Pexels, Supabase, the configured email-delivery provider, Apple, CloudKit, and other providers may have their own terms and privacy notices. Their services are optional or platform-specific where described in the Privacy notice, and their rules can apply when you choose or encounter those services.

Availability and changes

We work to keep Gesso useful, but we do not promise that every feature will be available, uninterrupted, error-free, or compatible with every device, browser, file, provider, or network. Local operations can still be affected by storage limits, device failure, browser settings, or unsupported input.

We may add, change, suspend, or retire features, including optional hosted features. We will try to give reasonable notice when a material change can be planned. A change to local storage or document formats should include an appropriate migration or export path where practical.

Ending use

You can stop using Gesso, log out, or remove local files at any time. If you need help with account information, contact support. Local files remain on your device or in your browser until you remove them; ending an account does not by itself erase those local copies.

We may suspend or end access to an account or hosted feature when needed for security, legal compliance, maintenance, or serious misuse. We will use reasonable judgment and notice where practical. Ending access does not transfer ownership of your content to Meridian.

Disclaimers and limits

To the extent permitted by law, Gesso is provided as-is and as-available. You are responsible for reviewing your work, checking exports, keeping backups, and deciding whether Gesso is suitable for your use. Nothing in these Terms excludes a warranty or remedy that applicable law does not allow us to exclude.

To the extent permitted by law, Meridian will not be responsible for indirect, incidental, special, consequential, or lost-profit damages arising from use of Gesso. The limits in this section do not apply where the law does not allow them to apply, including for rights or liabilities that cannot legally be waived.

Questions

For support, contact support@meridianproject.studio. For legal questions about these Terms, contact legal@meridianproject.studio. We will use the information available to us to understand the request and respond appropriately.