Privacy policy

Who is responsible

Procurato Legal UG (haftungsbeschränkt), Kolonnenstraße 8, 10827 Berlin, Germany. Registered with Amtsgericht Charlottenburg under HRB 270181.

For privacy questions or requests, email richard@procurato.de. This policy covers Privacy Redactor and the public Procurato website, including enquiries and early-access requests.

Text you put into Privacy Redactor

Your original text, detected details, and redacted preview are processed in the panel’s memory and a local inference worker. The plugin does not send your original text to Procurato, an AI inference service, or its MCP server. It does not store that text in persistent app storage or include it in telemetry.

Clear the panel when finished. Closing the panel ends its in-memory session. Model files may remain in the host’s browser cache; they are separate from your text and can be removed using the host’s storage controls. The plugin has no account or cloud text history.

What you choose to share

Only clicking Send to chat sends the current reviewed output to your conversation. Copy places it on your clipboard, where your device’s clipboard settings and other apps may affect its storage. Privacy Redactor does not intercept ChatGPT’s main prompt box.

Detection can miss information, and context can still identify someone. Review the complete result before sharing it. Once sent, ChatGPT handles the message under your account settings and the OpenAI privacy policy.

Model and runtime downloads

Setup downloads model files from Hugging Face and runtime files from jsDelivr. Downloads may repeat if cached files are unavailable. These providers receive network information such as your IP address and the requested file, but the plugin does not include your pasted text in these requests. Inference runs locally after setup.

See the Hugging Face privacy policy and jsDelivr privacy policy.

Opening the plugin

ChatGPT contacts our public MCP server, hosted by Vercel, to retrieve the redaction panel. Its only tool takes no arguments. The panel does not send your source text, detected details, or redacted output to this server. We do not log request bodies or maintain MCP session histories.

Vercel receives technical request metadata to deliver and secure the service, such as the connecting IP address, request time, URL, and response status. When ChatGPT connects on your behalf, that connection can originate from OpenAI’s infrastructure. The MCP endpoint does not embed website analytics.

Website hosting and analytics

Vercel hosts this website and receives technical request data, including IP addresses, requested URLs, and browser information, to deliver and secure it. The website uses Vercel Web Analytics for aggregate usage statistics such as page views, referrers, approximate location, and browser and device types.

Vercel describes its analytics as cookie-free, with a visitor session identifier that is discarded after 24 hours. This does not mean all hosting logs or aggregate statistics are deleted after 24 hours. Website analytics are separate from the plugin, which does not include this analytics integration.

See Vercel’s privacy notice and Web Analytics privacy documentation. The demo video is served from this website and loads when you open the demo.

Contact and early-access requests

When you contact us, we receive your email address, message, and any name or phone number you provide. We use these details to respond, arrange early access, or discuss the services you request. Email and a message are needed to respond through the form; names and a phone number are optional. Please do not include confidential client information in enquiries.

Form submissions are delivered through Resend to our Google email inbox. Email links open your own email app. These communications are not processed by the local redaction panel. See the Resend privacy policy and Google privacy policy.

Purposes, legal bases, and retention

Where the GDPR applies, handling enquiries about a possible contract is based on Article 6(1)(b). Other correspondence and operating, securing, and understanding use of the website rely on our legitimate interests under Article 6(1)(f). Legal retention obligations, where applicable, are based on Article 6(1)(c).

Enquiries are retained for as long as needed to handle the request and follow-up, meet applicable retention duties, or address legal claims. Provider-held technical records follow the relevant service’s retention rules. Providers may process data outside the European Economic Area, including in the United States; their linked notices explain locations and transfer safeguards.

Your rights and choices

Subject to applicable law, you can request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it for the future. Contact richard@procurato.de to make a request. We cannot retrieve text that only exists in your local redaction panel.

You may also complain to a data protection authority, including one in your place of residence or work. The European Data Protection Board provides a list of authorities. The redaction tool does not make decisions with legal or similarly significant effects about you.