METERPROOF / POLICY
Privacy
Your usage and invoice CSVs and every calculated result stay in browser memory and are never uploaded. An account and the AI pricebook builder are optional; this page says exactly what each one sends.
The audit: nothing leaves the browser
Parsing, rating and export generation run in this tab. No upload endpoint exists for usage events, invoice lines or results; input hashes are computed locally and appear only in your downloaded ledger.
Analytics
The page loads a cookieless analytics script from analytics.pagefabrica.com. A page view can contain the hostname, page path and title, referrer, browser language and screen size. Both addresses are shortened in this browser before they are sent: the part after # is removed, and of the part after ? only the five campaign tags (utm_source, utm_medium, utm_campaign, utm_content and utm_term) are kept; every other parameter is dropped. The analytics service also receives the network address and user agent needed to deliver the request and derives coarse country, browser and operating-system statistics plus a short-lived session hash. The script also records how long pages take to load and respond (such as LCP, INP and CLS) with the page address and device type, to help find slow pages; these timings contain nothing you enter. Product events are property-free names: ai_job_failed, ai_job_started, ai_job_succeeded, ai_rows_used, audit_failed, checkout_clicked, checkout_failed, checkout_returned_cancelled, checkout_returned_paid, checkout_started, credits_exhausted, demo_completed, demo_ledger_downloaded, demo_started, door_seen, email_link_requested, file_loaded, file_rejected, ledger_downloaded, mapping_opened, pack_checkout_clicked_15, pack_checkout_clicked_9, pass_seen_active, pro_checkout_clicked_19, pro_checkout_clicked_29, pro_checkout_clicked_49, pro_offer_click_19, pro_offer_click_29, pro_offer_click_49, pro_offer_seen_19, pro_offer_seen_29, pro_offer_seen_49, sign_in_clicked, sign_in_completed, starter_kit_downloaded, work_completed, work_started. A number at the end of a name is the price shown on that visit. No filename, row value, customer identifier, amount, document text, error text or result detail is sent. Do Not Track turns analytics off.
If you sign in
Sign-in uses Google or a one-time link we email to you from signin@getmeterproof.com (Amazon SES). A link works for 15 minutes and is stored with your address and a hash of the link until it is used, or deleted within two days if it never is; a cookie ties it to the browser that asked; send limits count hashed forms of the address and network. Once signed in we keep your email address, your name as Google gives it (none for a link), a hashed account identifier, your plan, your AI credit counters, any answer you give the planned-plan buttons, and for each AI job its meter keys, date and outcome. Up to four cookies make sign-in work: the HttpOnly session cookie, a ten-minute Google sign-in state cookie and a fifteen-minute emailed-link state cookie that tie a sign-in to this browser, and a readable hint cookie that only says a session exists; during a sign-in the page also keeps the page to return to in sessionStorage. They are strictly necessary for the account you asked for. You can delete the account and those records at any time on your account page; job records expire on their own within three days. So that the free trial is one per person, we keep a one-way, keyed hash of your mailbox (the address with any +tag removed, so aliases count as one person) — never the address itself — with the month you last used a credit, for 13 months, even after deletion.
If you use the AI pricebook builder
The pricing document you paste — and only that text, with the meter keys you list — is sent to MeterProof's server and to Anthropic, whose Claude model proposes pricebook rows. Our worker deletes its copy of the text when the job finishes; if a job is interrupted, job storage deletes it within two days. The proposed rows, which quote sentences from the text, stay in job storage for at most two days so you can open them. Anthropic processes and retains API inputs and outputs under its commercial terms and privacy policy. Paste pricing terms, not personal data about your customers.
Payments
The 30-day Pro pass is paid through Stripe Checkout on Stripe's own pages; MeterProof never sees card details. While payments run in test mode only listed test accounts can open a checkout. We keep the order and the pass's status and dates with your account. These payment records, which name your account identifier but not your address, stay in our payment ledger after you delete the account.
Your choices
You can use the whole audit without an account or analytics. For access or deletion questions email support@getmeterproof.com.
Effective 17 October 2026. Questions: support@getmeterproof.com.