Privacy policy
Draft — private preview. Not yet reviewed by counsel.
1. Who processes your data
GLOBAL HUMAN INTELLIGENCE CONSULTING, a French société à responsabilité limitée registered under SIREN 939 603 593, with its registered office at 60 rue François 1er, 75008 Paris, France. VAT number FR06939603593.
Contact for privacy questions: contact@quietmeta.app.
2. What happens to a file you inspect
When you drop a file into the web version, its bytes are sent to our processing service, held in memory for the duration of that single request, analysed, and released. They are never written to a database, an object store, a queue, a cache or a backup. When you clean a file, the result is streamed straight back to your browser and is never stored on our side either.
We say "not retained" rather than "nothing is stored", because that is the accurate claim. A managed hosting platform, an operating system or a memory allocator can hold transient copies outside our control. What we can state precisely is that our application persists nothing.
3. What we never record
The following never enter our logs, metrics or any other store:
- the content of your files, or any extract of it;
- file names and file paths;
- thumbnails or previews;
- any fingerprint or hash of your content;
- the metadata values we read out for you — GPS coordinates, device names, author names, provenance details;
- your IP address inside our application logs.
This is enforced in code rather than by policy: the logger carries an explicit allowlist, and any field outside it is dropped before it can be written.
4. What we do record
For each operation we keep a small technical event containing only: a random identifier, whether it was an analysis or a cleaning, a broad format family (for example "jpeg"), a size band rather than an exact size, a latency band, the outcome code, and the engine and policy versions.
Nothing in that event can be traced back to you or reconstructed into your file. Its purpose is to know whether the service works, not who used it.
5. Hosting
The web version runs on Google Cloud Run in the europe-west1 (Belgium) region. Google acts as a processor on our behalf under its data processing addendum. Standard infrastructure request logs, which may include IP address and user agent, are managed by that platform; they are separate from our application logs and are retained for 30 days, the default retention of Google Cloud Logging, after which Google deletes them. We do not extend that period and we do not copy those logs anywhere.
6. Advertising
When advertising is enabled, the web version displays a banner served by Google AdSense. Google may then set cookies or read device identifiers to select and measure advertising, under its own privacy policy and independently of us. We do not send Google anything about your files. The desktop application contains no advertising and no tracking of any kind.
Nothing loads before you say so. If advertising is switched on, a banner asks first. Until you accept, the Google script is not sent to your browser at all — it is not merely hidden — and this page's content security policy stays locked to our own origin, so nothing third-party can load even by accident. Refusing takes one click, exactly like accepting, and we do not ask again for six months.
The cookie recording your answer is strictly necessary: it exists so that a refusal
is respected. It holds one word, accepted or refused, and
nothing else.
7. The desktop application
The desktop application performs every operation on your own machine. It contains no HTTP client, no telemetry, no analytics and no update checker; outbound network requests are blocked at the process level. It sends us nothing, ever — including when it crashes.
8. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. In practice we hold almost nothing about you: no account, no email address, no content. Requests can be sent to the address in section 1, and you may lodge a complaint with the CNIL.
9. Changes
This is a working draft published during a private preview. It will be reviewed by a qualified lawyer and completed before the service opens to the public.