In-Memory Processing
Files are processed in memory or temporary directories and automatically deleted after each session.
Security & Privacy at the Core
MechaDataCleaner keeps your data protected with strict policies, encrypted infrastructure, and transparent handling.
No Data Retention
Your data never touches permanent storage. Temporary files are wiped when your session ends.
No AI Training
We never use your data to train AI models. OpenAI API has data retention disabled for our account.
Technical Security Controls
Each control is engineered to protect data in flight, at rest, and during processing.
Isolated Sessions
Each user session uses separate memory space. Your data is never visible to other users.
Render Hosting
Hosted on Render with ephemeral filesystem. Server restarts clear all temporary data.
Supabase Auth
User authentication handled by Supabase with encrypted passwords and optional 2FA.
HTTPS Everywhere
All data in transit is encrypted. API calls to OpenAI use TLS 1.3.
Data We Process
- Column names and sample values sent to GPT-4o for schema inference (optional)
- Usage counts (tables processed, rows cleaned) for billing
- Account email and subscription tier stored in Supabase
Data We Never Store
- Full datasets or cleaned outputs (processed in memory only)
- Raw file contents after session ends
- Personal data from your CSV/Excel files
- Processing history or audit logs on our servers
Cookie Handling
We keep cookies minimal and purpose-built for security, not tracking.
Only essential cookies
We use short-lived session cookies for authentication and CSRF protection. No marketing or cross-site tracking cookies.
Supabase auth session
Your login state is maintained via Supabase-issued httpOnly cookies; tokens are rotated regularly and scoped to the app.
Analytics optional
Anonymous, aggregate analytics run without storing identifiers; disable them in your browser to opt out.
Incident Response & Disclosure
Report suspicious activity and our security team will respond with clarity and speed.
Security reports handled via security@mechadatacleaner.com with a 24-hour triage window
Critical issues resolved within 48-72 hours with transparent updates
Responsible disclosure partnered with researchers for safe mitigation