Privacy Policy

Last updated: October 2026

What stays on your device

Your files and their metadata stay on your device. When you open a folder, the browser reads and writes the files in place. When you pick files, they're held in your browser tab. Our servers never receive, store, or process the files you edit. If you use AI generation, your browser sends the file being processed straight to the AI provider you chose — see below.

What we collect

What we collect depends on how you use the app.

  • As a guest

    Nothing about you beyond standard web server logs (IP address, browser type, timestamps) that any server keeps briefly for security and debugging.

  • With an account

    Your name and email; your password, stored only in a form that can't be read back; your account status and subscription details (plan and dates).

  • Sign-ins and activity

    A record of your sign-ins and sign-outs, and of some actions in the app, such as starting an AI generation, with the time, IP address, browser type, and whether it succeeded.

  • Security

    Temporary counters of failed sign-in attempts, to protect accounts from password guessing.

AI generation, only if you use it

When you generate metadata, data goes to two places:

  • Your AI provider

    Your browser sends it the file being processed, using your own API key. Its own privacy policy governs how it handles the file — we don't see or store it.

  • Our server

    Your browser sends it what's needed to prepare the request: your API key in encrypted form (decrypted for that request only, never stored), the model, the topic, required keywords, any custom prompt, and the number of files. Afterwards it sends the AI's text response — the generated titles and keywords — so the write to your files can be prepared. Never your files.

  • What we keep

    Usage records: the settings, the instructions sent to the AI, the AI's response, and basic figures such as timing and size. They're linked to your account, used to run and improve the service and to investigate problems, and kept while your account exists.

What's stored in your browser

Canella Meta Editor keeps your settings in your browser's local storage, including your AI settings and your API key in encrypted form. The app also saves its own files so it can open offline. Clearing your browser data removes all of it.

Cookies

When you sign in, we use a cookie to keep you signed in. Guest use sets no cookies. This website stores only your theme and language in local storage. Canella Meta Editor doesn't use advertising cookies or third-party trackers on this website or in the app.

Who can see your data

We don't sell your data or share it with advertisers. Your AI provider receives the files you choose to generate metadata for. Our team can see account and usage records to support you, keep the service secure, and understand how it's used.

Security

We take reasonable measures to protect your data: passwords are stored hashed, and your API key is stored encrypted.

Your rights

You can request access to, correction of, or deletion of your account data by emailing us — much of that data is also visible in the app itself. Once you delete your account, all related data — including your sign-in history and AI usage records — is removed from our primary systems right away. Backups (if any exist) may still hold your data for up to 30 days for disaster-recovery purposes, after which it's automatically purged as backups rotate — we don't use backup data for anything else.

Children

Canella Meta Editor is not meant for anyone under 16, and we don't knowingly collect data from them.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted here.

Contact

Questions about your data? Email us at [email protected].