Privacy policy

Rature is a tool for anonymizing PDF documents by masking sensitive information before sharing.

Privacy protection is a fundamental principle of the project. The tool was designed to operate without collecting personal data and without transferring documents to a server.

All documents are processed locally in your browser.

This means that:

• - PDF files are never sent to a server.
• - No document is stored.
• - No document content is analyzed or retained by a server.

Processing is performed directly on your device.

Rature collects no personal data when you use the tool.

No element contained in the documents you use with the tool is transmitted, recorded, or analyzed by a server. The service may only measure anonymous technical information related to the application's operation, such as:

• - Page views (e.g.: the pages consulted by visitors).
• - Visitors (e.g.: device, browser and OS).
• - Location (e.g.: city, region and country).
• - Traffic source (e.g.: from where you've reached Rature).
• - Technical errors (e.g.: model loading or analysis failure, for debugging).
• - Usage events (e.g.: PDF selected, extension of a rejected file, analysis duration and number of detected items, export and download). File names and contents are never collected.

This information cannot in any way identify a user or a document.

If you choose to join the Rature Pro waitlist, we collect your email address and, if you provide it, your profession. No document or document content is sent.

• - Purpose: notifying you when Rature Pro launches and, where relevant, asking you about your needs. This data is never sold or used for anything else.
• - Legal basis: your consent, which you can withdraw at any time.
• - Processor: Brevo (Sendinblue SAS, Paris), which hosts the list in the European Union.
• - Retention: until you unsubscribe, and at the latest 12 months after Rature Pro launches or the project is dropped.
• - Unsubscribe: through the link in every email, or by writing to contact@rature.fr.

Rature uses no cookies and installs no trackers on your device.

Even though using Rature requires no personal data, we are committed to respecting the principles of the General Data Protection Regulation (GDPR) and informing you of your rights. The following sections detail these rights, as well as the technical and organizational measures put in place to protect your data.

In accordance with the GDPR and other applicable laws, you have the following rights regarding your personal data:

• - Right of access: You can ask us whether data relating to you is being processed and obtain a copy of such data.
• - Right to rectification: You can request the correction of inaccurate or incomplete data.
• - Right to erasure ("right to be forgotten"): You can request the deletion of your data in certain cases (e.g.: unlawfully processed data).
• - Right to restriction of processing: You can request the suspension of processing of your data in specific cases.
• - Right to data portability: You can receive your data in a structured format and transfer it to another service.
• - Right to object: You can object to the processing of your data for legitimate reasons.

To exercise your rights, you can contact us via:

• - The project's GitHub repository: github.com/alphabeat/rature
• - The dedicated email address: contact@rature.fr

We are committed to responding to your request within one month (which may be extended by two months in complex cases).

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés):

• 📍 www.cnil.fr
• 📧 www.cnil.fr/fr/plaintes

Rature is an open source project. The source code is publicly accessible to allow:

• - Verification of document processing.
• - Auditing of the application's operation.
• - Contribution to the project.

🔗 GitHub repository link: github.com/alphabeat/rature

Rature is a 100% client-side service: document processing takes place exclusively in your browser, without sending or storing data on a server. However, to make the tool accessible online, the website is hosted by a third-party technical provider.

The site is currently hosted by:

🏢 OVH Cloud
📍 2 rue Kellermann, 59100 Roubaix, France
🔗 Website: www.ovhcloud.com

This provider acts as a data processor within the meaning of the GDPR (article 28) and only has access to the minimum technical data necessary for the operation of the service.

In the event of a change of hosting provider:

• - We will inform you via an update to this privacy policy.
• - Previously collected technical data will be deleted from the former provider before migration.

Rature's architecture was designed to limit risks related to sensitive documents:

• - 100% local processing in the browser.
• - No file transfer to a server.
• - No document storage.

Recommendations for optimal security:

• - Use an up-to-date browser (e.g.: Firefox, Chrome).
• - Avoid unverified extensions that could access your data.
• - Verify the anonymization result before sharing the document.

Rature provides an anonymization tool without absolute guarantee. The user remains responsible for:

• - Verifying the result (e.g.: absence of residual data in the anonymized PDF).
• - Complying with applicable laws governing their documents (e.g.: copyright, professional secrecy).
• - Using the tool in a secure environment (e.g.: up-to-date browser, uncompromised network).

For any questions regarding this policy or the operation of Rature:

• 📧 Email: contact@rature.fr
• 🔗 GitHub repository: github.com/alphabeat/rature

This privacy policy may be updated to reflect:

• - Changes to the service.
• - Legislative or regulatory changes.
• - Feedback from users or data protection authorities.

How will you be informed of changes?

• - The current version is always available on this page, with the date of the last update.
• - In the event of a substantial change (e.g.: change of hosting provider, addition of data collection), we will inform you via:
• • A banner on the site on your next visit.
• • An email if you have provided a contact address (e.g.: to contribute to the project).