Your documents stay with you.

Who is responsible?

Ludovic Marie, Chemin des Bucherons 10A, 1234 Vessy, Suisse, is responsible for website, account and support processing. Contact: ludo47j@gmail.com.

This policy covers the app, website, account and purchase services. It does not cover an external AI service that you choose to use.

Inside the app: local processing

File reading, OCR, detection, masking, conversation titles and restoration run on your computer. The model is bundled. The native Mac document process has no network entitlement. There is no advertising tracking, document telemetry or continuous clipboard monitoring.

History can include documents, filenames, text, previews, masking choices, mappings and responses. In the native Mac app it is encrypted using AES-GCM and a local Keychain key that is not synchronized. It remains on that Mac until deleted inside the app. Quitting or signing out does not delete it. The Windows preview uses encryption protected by the operating system’s local credential storage.

We keep no server backup of your documents. Losing the local key may make history unrecoverable. Deleting a session does not delete originals, exports or copies held by other software, and does not guarantee physical secure erasure.

Accounts, payments and licenses

Supabase handles email addresses, user identifiers, authentication and connection metadata. The commercial service stores your plan, currency, license status and expiry, and customer and purchase references needed for billing.

Stripe and Link handle payments, billing details, receipts, indirect tax and fraud checks under Managed Payments. Link also provides purchase, subscription and refund support under its own terms and privacy policy. PreMask AI does not receive your full card number. See Stripe’s privacy policy. Processing supports your order, account, support requests, service security and accounting obligations. Where GDPR applies, the legal bases are contract performance or requested pre-contractual steps, legal obligations and our legitimate interest in protecting the service and answering requests. Necessary account and payment data is required to provide those features.

The native Mac app uses a separate connection service. Its tokens and signed license are held in the Mac Keychain. It receives no documents, mappings or titles. A signed license supports local offline checks. Signing out removes stored app credentials, without deleting documents.

What you share with AI

Sharing is your choice. The relevant action copies reviewed text and opens your chosen service; some integrations may prepare a message. That service receives what you submit and applies its own terms. PreMask AI includes no third-party subscription.

Review is necessary: context or an overlooked passage may still identify someone. Masking guarantees neither anonymity nor automatic compliance and does not replace your employer’s confidentiality rules. Your clipboard and exports can contain original information. Other apps or synchronization tools may access them according to your settings.

Account and recovery emails

Supabase passes confirmation and password-reset emails to Resend for delivery. Resend processes your email address, the message content including its personal authentication link, and delivery information. Your documents and local history are not sent to Resend. Authentication mail uses auth.premaskai.com. License confirmations and customer-request acknowledgements use hello@premaskai.com and may include your order reference and accepted terms. Open and click tracking are disabled.

The configured sending region is Ireland. Resend stores message content, delivery information and account data in the United States; the sending region is not exclusive data residency. See Resend’s privacy policy. These messages support account access and security.

Website and updates

Vercel hosts this site. Essential cookies support authentication and remember your chosen interface language. The host receives ordinary connection data such as IP address, request time, page address and browser information to serve and protect the site. Our site code contains no advertising, audience tracking or marketing cookies. The demonstration uses a fictional example inside your browser.

The update service downloads software and its signed feed, never your documents. Its server may receive ordinary technical connection information, including IP address and app version. Sparkle system profiling is disabled. Update preferences are available in the app. The signed feed is hosted by Vercel; release archives are hosted on GitHub, whose privacy policy also applies to download connection data.

See the Vercel and Supabase policies. Providers and their infrastructure may operate outside Switzerland, including the EU and the US. The account database is in Supabase’s Zurich region; this does not mean that all provider processing is exclusively Swiss. Our processors use data-processing agreements, including contractual safeguards for covered international transfers. These do not make every online operation exclusively Swiss.

Retention and assistance

Account data is kept during service use, then deleted or anonymized after closure, except information needed for legal obligations or disputes. Accounting records subject to Swiss retention rules are kept for ten years from the end of the relevant financial year. Support keeps exchanges necessary to handle your request; do not send confidential documents.

Resend retains email content and delivery logs for 30 days under the current plan. Hosting and authentication logs have provider-specific retention, separate from the account database; copies needed for security, legal claims or provider obligations may last longer. Necessary accounting references are retained after account closure; the sign-in identity is removed and future subscriptions are stopped.

Your rights

Depending on applicable law, you may request access, correction, export or deletion of account data, restrict processing or object, by contacting ludo47j@gmail.com. Proportionate identity verification may be required. Do not send identity documents unsolicited. Any legal retention exceptions will be explained.

Manage documents stored only on your computer inside the app. Use Account data for a private JSON export or a verified closure request. Support coordinates renewals and necessary record retention. You can cancel through My account or support if you cannot sign in. You may also contact the Swiss Federal Data Protection and Information Commissioner or the competent authority for your residence.