Privacy Policy

1. Data controller

The data controller is 404Factory (micro-entreprise), 20 Avenue de la Gare, 34770 Gigean, France. For any privacy request, contact factory404@outlook.fr.

2. Data we collect

• Waitlist email, if you join the waitlist, the email address (and optional role) you provide is collected and stored through our form provider (Formspree) so we can notify you at launch.
• Prompt and file content, scanning runs entirely client-side. The content you analyze with GuardInput is never sent to or stored on our servers.
• Technical logs, standard server logs (IP, browser, timestamps) kept briefly for security and to keep the site running.

3. Purposes and legal bases

The waitlist email is processed on the basis of your consent, to inform you about the launch. Technical logs are processed under our legitimate interest in securing and operating the website.

4. Subprocessors and recipients

We do not sell your data. We rely on a small number of providers:

• Railway Corporation, website hosting (United States).
• Formspree, waitlist form processing and storage (United States).
• Google Workspace, transactional and notification email.

5. Data retention

Waitlist emails are kept until the product launches or until you ask to be removed, whichever comes first. Technical logs are kept for a short period only.

6. Your rights

Under the GDPR you may access, rectify, erase, restrict, or port your data, and object to its processing. Email factory404@outlook.fr to exercise these rights. You may also lodge a complaint with the CNIL (www.cnil.fr).

7. Cookies

The website uses only the cookies strictly necessary to function. No advertising or third-party tracking cookies are used.

8. Security

Data is transmitted over HTTPS and we keep the data we hold to a minimum. Because scanning is client-side, the most sensitive content never leaves your device.