Privacy policy
Version 1.0 · In force from 12 October 2026
Ouste works on your Mac. This policy explains what data is processed, what for, how long it is kept and who receives it. In case of difference, the French version prevails.
In short
- Scans, logs, quarantine, receipts and the Memory index stay on your Mac. Nothing leaves your Mac.
- The free features send no data and need no account.
- For Ouste Plus, only your billing email, your subscription status and an anonymous identifier for the Mac are processed, to check the licence.
- The ouste.space website sets no cookies and uses no ad trackers. Its audience measurement works without cookies or stored identifiers, so there is no cookie banner.
- No data is sold or used for advertising.
1. Controller
Adeo Consulting, SAS with a share capital of €100, RCS Paris 130 880 347, 14 rue Bausset, 75015 Paris, France, publisher of Ouste.
Contact for any question about your data: contact@ouste.space
2. Data processed
| Category | Examples | Where |
|---|---|---|
| Scans and cleanups | Paths, sizes, dates and levels of scanned items; receipts; operations log; quarantined items; settings | Your Mac only |
| Memory | Index and archive of your agents’ conversations (titles, projects, edited files, messages) | Your Mac only |
| Ouste Plus licence | Stripe customer ID, email address, plan and subscription dates, Mac identifier (non-reversible hash of the hardware identifier, three Macs at most) | Stripe, licence server |
| Payment | Name, payment method (processed by Stripe only), billing country and address for VAT, invoices | Stripe |
| Restoring a subscription | Email address the restore link is sent to | Resend, for the time of sending |
| Support | Messages exchanged with contact@ouste.space | Publisher’s mailbox |
| Technical and security | IP address and request logs of the website and licence server | Vercel |
Ouste reads your files and conversations only on your Mac, to measure, classify, clean and index them. Their content is never sent anywhere.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Check the Ouste Plus licence and activate it on your Macs | Performance of the contract |
| Collect the subscription, issue invoices, handle cancellations and refunds | Performance of the contract |
| Send the link to restore a subscription on a new Mac | Performance of the contract |
| Keep invoices | Legal obligation (accounting) |
| Secure the website and licence server, prevent abuse | Legitimate interest |
| Answer support requests | Performance of the contract / legitimate interest |
4. What stays on your Mac
Ouste’s local data lives in ~/Library/Application Support/Ouste/ (settings, quarantine, Guardian log, Memory index) and ~/Library/Logs/ouste/ (operations log, receipts). Deleting these folders erases everything Ouste recorded. The publisher has no access to them.
5. Retention
| Data | Retention |
|---|---|
| Local data | On your Mac until you delete it; the quarantine is emptied after 7 days |
| Licence data | During the subscription, then 3 years after it ends to handle claims |
| Invoices | 10 years (accounting obligation), limited to transaction data |
| Restore address | For the time of sending; the link expires after 15 minutes |
| Technical logs | 12 months at most |
| Support messages | 3 years after the last message |
6. Recipients and providers
Your data is accessible only to the publisher and to the providers strictly needed, bound by contract and acting on instruction. No data is sold.
| Provider | Role | Location |
|---|---|---|
| Stripe | Payments, subscription, storage of licence data | Ireland / United States |
| Vercel | Hosting of the website and licence server | United States |
| Resend | Sending the subscription restore email | United States |
Transfers outside the European Union: when a provider processes data outside the EU, the transfer relies on the EU–US Data Privacy Framework if the provider is certified, or otherwise on the European Commission’s standard contractual clauses.
The publisher may also disclose data where the law requires it, at the request of a competent authority.
7. The ouste.space website and cookies
The website sets no cookies and writes nothing in the browser. Its fonts are hosted on the website itself.
Traffic is measured with PostHog (PostHog Inc., data hosted in the European Union, in Frankfurt) in cookieless mode: each page view and each click on "Download" is counted with the page, the language, the origin (referring site and campaign parameters of the address) and the screen size. No identifier is kept in the browser; the measurement server does not keep the IP address and cannot recognise the same visitor from one day to the next. This measurement serves only to know the website’s audience and the effectiveness of campaigns, and is exempt from consent under the CNIL guidelines. Aggregated data is kept for 12 months.
For security, the host keeps technical request logs (IP address, requested page, date).
8. Security
Exchanges with the licence server and the website are encrypted (HTTPS/TLS). The licence is a signed token, checked on the Mac without sending any other data. Card data never goes through the publisher. In case of a data breach that presents a risk, the CNIL is notified and, if the risk is high, you are informed.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. You can also set instructions for what happens to your data after your death.
For licence and payment data: write to contact@ouste.space, from your billing address if possible. Reply within one month. Local data is under your sole control (section 4).
Complaints: you can contact the CNIL (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or the authority of your country of residence.
10. Changes
Any substantial change to this policy is announced in the Software or by email before it takes effect. The version date is shown at the top of the page.