Privacy Policy

Most privacy policies are long lists of excuses for why a company collects your data. Ours is short because we don't.

RedMatiq was built on a "Privacy by Design" architecture. We distinguish clearly between the Local App (where your data lives) and our Optional Services.

1. Data Controller

The Data Controller for this website and corporate communications is Matiq GmbH, a Swiss company subject to the Federal Act on Data Protection (FADP) and the EU GDPR.

For full company details, see our Imprint. For privacy inquiries contact [Email Protected].

2. The Application (Your Device)

When you use the RedMatiq macOS application, you are the Data Controller. The software acts as a local tool (Data Processor) that runs entirely on your hardware.

  • Local Processing: All document analysis, PII detection, and redaction logic happens 100% on your device. We use locally bundled Transformer models. No internet connection is required to process files.
  • Minimal Analytics: The app does not send usage statistics or in-app telemetry. Crash reports are only sent with your explicit consent. When automatic update checks are enabled (the default), we collect a lightweight "heartbeat" alongside each check: a random installation ID, app version, macOS version, CPU architecture, processor count, locale, and license tier. This helps us understand the active install base and plan platform support. No document content, file names, or IP addresses are stored. You control this entirely — disable "Automatically check for updates" in Settings to stop all heartbeat traffic.
  • Data Storage: Everything is stored in standard formats (JSON, Markdown) on your local disk. You can delete individual dossiers or perform a complete application reset at any time to purge all local data.

3. The Website (No Tracking)

We treat our website visitors with the same respect as our app users. Our website is hosted on Cloudflare.

  • No Cookies / No Third-Party Trackers: We do not use invasive trackers like Google Analytics or Facebook Pixel. We do not use advertising cookies.
  • Privacy-First Analytics: We use Counterscale (self-hosted) and Cloudflare Web Analytics to understand site performance. Both operate in a privacy-preserving mode preventing individual tracking or fingerprinting. Neither stores personal data.
  • Server Logs: As part of the Cloudflare infrastructure, temporary connection logs may be processed for security (DDoS protection) and strictly necessary operational purposes.

4. Voluntary Data (Forms & Signups)

We only collect personal data when you explicitly provide it to us.

  • Registration: To download RedMatiq, you register with your email address and name. You may also provide your industry and intended usage to help us improve the product.
  • Contact Forms: If you use the contact form, we collect your email address and name to respond to your inquiry.
  • Purpose: Registration data is used to deliver the download link, send onboarding information, and communicate with you about the product. We track your account status (registered, verified, downloaded) to operate our online services. We do not track the content of data you submit or process.
  • Newsletter: You may opt in to receive product updates. This is entirely optional and you can unsubscribe at any time.
  • Legal Consent: We record when you accepted our Terms of Service and Privacy Policy as required for legal compliance.
  • Storage: This data is securely stored by our email and hosting providers. We do not sell this data under any circumstances.
  • Retention: We retain your contact information until you request deletion, or for 2 years after your last interaction with us — whichever comes first.

5. Cloud AI (Optional & Transparent)

If you choose to use the optional AI Chat features, we process data only on your explicit command. This is based on Article 6(1)(a) GDPR (Consent).

  • Sanitization First: The app strips PII (names, dates, locations) from your text before it leaves your computer.
  • Transparency Mode: You can enable "Transparency Mode" in the app to inspect the exact JSON payload sent to the LLM provider.
  • No Training: We configure our API usage to ensure your data is never used to train the provider's AI models.
  • Processors: Sanitized data is routed through Cloudflare (relay infrastructure) to the LLM provider. Neither Cloudflare nor the LLM provider receives unsanitized content.
  • Retention: The relay is stateless — your data passes through and is not stored.

6. Your Rights

Under the GDPR, you have the following rights regarding personal data held by Matiq GmbH (e.g., if you contact support or register for the product):

  • Right to Access: Ask us what data we hold about you (e.g., your registration record).
  • Right to Erasure: Ask us to delete your data from our contact and mailing lists.
  • Right to Rectification: Specify corrections to your data.
  • Right to Lodge a Complaint: You have the right to complain to a supervisory authority.

7. Updates

We will notify users of any substantial changes. Check this page for updates.

Last Updated: March 1, 2026