Privacy, in plain language.

Updated 19 September 2026. This notice covers the Metisdo website, browser preview, desktop app, trial and licence services, purchases, contact form, and former waitlist.

Who handles your information

Antomic Studio EOOD, Bulgaria, is the controller for the personal information described here. EIK: 206438790. VAT: BG206438790. Use the contact form or email [email protected] for privacy questions and requests. Company information.

Your Workspace

Your Actions, Projects, Notes, and revision history are stored in the Workspace folder you choose. Opening a local Workspace does not upload that folder to Antomic Studio or Cloudflare. The app needs your permission to read and write the selected folder.

Workspace content remains until you remove it. Archiving an item keeps a recoverable copy. Deleting an item does not necessarily remove it from earlier revisions, exports, snapshots, operating-system backups, or copies managed by another service. You control those local copies; we cannot remotely retrieve or erase a Workspace we do not hold.

Information stored on your device

The browser app stores preferences and a randomly generated device identifier in local storage. If you choose to remember a Workspace, it stores a folder handle in IndexedDB. These support your settings and folder access; they are not advertising identifiers. Forgetting the saved folder removes the shortcut without deleting Workspace files. Browser storage remains until you clear it or the app removes the relevant preference.

The desktop app stores Application Preferences, device information, the current signed machine authorization, and installed Plugins separately on your device. An update check contacts the configured release-manifest host when you request it. That host receives ordinary connection information such as your IP address and requested URL.

Website requests and security

Cloudflare serves the website and browser app and processes connection information, including IP addresses, browser information, requested URLs, and security signals. Our services also produce technical request and error records used to operate the service, diagnose failures, and prevent abuse.

Our basis for this processing is our legitimate interest in delivering a working, secure service (GDPR Article 6(1)(f)). We limit it to the information needed for that purpose. Technical records are kept for operational troubleshooting, security incidents, and any applicable legal obligations; a specific incident can require keeping relevant records longer than routine diagnostics.

Trial requests and email verification

When trial requests are enabled, the form sends your email address, a Cloudflare Turnstile token, the empty anti-spam field, and ordinary request and security information to Antomic Studio’s licensing service. Requesting an email does not start the trial. The service sends a verification link through Amazon Simple Email Service (SES); the trial starts only after you use the confirmation form provided by that service.

The licensing service processes the request, verification time, fixed trial start and end, machine authorization, and expiry information needed to issue and administer the trial, prevent repeated or abusive requests, recover access, and support you. The public response to a request is neutral and does not reveal whether an email address already has a trial or licence record. We use this information to take steps you request toward a licence agreement and to perform that agreement (GDPR Article 6(1)(b)), and use proportionate security records for our legitimate interest in preventing abuse (Article 6(1)(f)).

Purchases, licence verification, and recovery

Paddle is the authorised reseller and merchant of record for paid Metisdo purchases. Paddle collects and processes the contact, billing, payment, tax, transaction, and security information needed to present and complete checkout under Paddle’s privacy notice. Antomic Studio does not receive your full card details. Paddle supplies us with the transaction, product, status, and customer information needed to fulfil the purchase, send licence details, provide support, handle refunds, and keep accounting and legal records.

Licence activation and periodic validation contact the configured licensing service. The service processes the activation key or entitlement identifier, a machine identifier, the signed authorization and its validation time, and ordinary request information needed to enforce the three-machine allowance and issue authorizations valid for up to 30 days. It does not receive your Workspace contents. Metisdo automatically renews the machine authorization while it is online.

You can request an email-verified link to review activated machines and remove one you no longer use. The licensing service processes the email-verification request and the machine records needed for that choice. Removal takes effect when the old machine’s current authorization expires, or earlier if that machine checks online. Licence recovery uses your email address to locate and resend eligible activation information, and its public response does not reveal whether an entitlement exists.

Purchase and licence processing is necessary to perform the licence agreement (GDPR Article 6(1)(b)) and to meet tax, accounting, consumer, and other legal duties (Article 6(1)(c)). Paddle keeps transaction information under its published policies and legal obligations. Antomic Studio keeps fulfilment, licence, support, refund, and accounting records for the periods needed to provide the licence, meet legal duties, and establish or defend legal claims.

Contact messages

The contact form sends your reply email address, message, and a verification token to our Waitlister service. Cloudflare Turnstile checks for automated abuse. The service forwards the message through Amazon Simple Email Service (SES) to our inbox. It does not add contact enquiries to the subscriber database or sign you up for marketing.

We use contact messages to answer enquiries and handle feedback, complaints, or privacy requests. Our legal basis is our legitimate interest in responding to correspondence; where you ask us to take steps toward a contract, Article 6(1)(b) applies instead. We process information needed to fulfil a legal duty, including applicable data-rights requests, under Article 6(1)(c).

We delete resolved contact correspondence 12 months after resolution, except for records still needed to establish, exercise, or defend legal claims. Those records are kept only while needed for that purpose. This is a mailbox-handling policy, not an automatic deletion timer in the contact form. Please do not include passwords or sensitive documents.

Providing an email address and message is necessary for the form to work and for us to reply. You can email us directly instead of using Turnstile.

The former waitlist

New waitlist signups are closed. Earlier records can contain an email address, any other signup fields you supplied, form identifier, signup and confirmation timestamps, status, and a confirmation token and expiry time where retained. Signup was based on consent to receive availability information. You can withdraw that consent at any time without affecting the lawfulness of earlier processing.

We are reviewing the closed waitlist records for deletion. Closing the form did not itself erase them. Records connected to a separate access invitation or agreement require a separate retention review. Existing records will not be repurposed for unrelated marketing. Contact us to request access or deletion.

Service providers and other recipients

Cloudflare provides hosting and security, including Turnstile on the contact and enabled trial pages. Amazon Web Services delivers contact, verification, fulfilment, recovery, and service email through SES. Microsoft processes incoming email for antomic.net. Antomic Studio operates the Waitlister contact and licensing services. Paddle processes checkout, payments, refunds, and buyer support as the authorised reseller and merchant of record. These services receive the information needed to perform their respective roles.

Cloudflare also processes Turnstile signals to improve its bot detection as described in its Turnstile Privacy Addendum. Its role for that processing is separate from processing security signals on our behalf. We may also disclose information when required by law or where necessary to establish, exercise, or defend a legal claim.

International processing

Our providers operate internationally, including in the United States. This notice does not promise that all website, security, or email information stays in the European Economic Area. We are still verifying the regions, account-specific contractual terms, and transfer safeguards that apply to our provider accounts. The following links are the providers’ published terms, not confirmation of the safeguards applicable to a particular transfer: Cloudflare, AWS, and Microsoft. Contact us for the current status of that review and information about transfers of your information.

External services you choose

Opening links or loading remote images can contact another service. MCP clients can receive Workspace information through the Catalog. Plugins run trusted code on your device. Sync and backup services you choose can hold their own copies. Their processing follows their own settings and notices; keeping a Workspace local does not control those services.

Advertising, analytics, and browser signals

We do not use third-party advertising or analytics scripts in Metisdo or on this website. Checkout loads Paddle.js only when checkout is configured and available. Turnstile loads on the trial page only when trial requests are configured and available. We do not sell contact, trial, or waitlist information or use it for targeted advertising. Browser Do Not Track signals do not change the service because we do not use it to track you across websites for advertising or analytics.

Security providers can receive browser and connection signals when you visit different sites using their services. For example, Cloudflare explains its security and service-improvement processing in the notices linked above. A browser privacy signal does not disable the information needed to serve and protect this website.

Your rights and choices

Depending on applicable law, you can request access, correction, deletion, restriction of processing, or portability of your personal information. You can object to processing based on legitimate interests, and withdraw consent where consent is the basis. These rights have legal conditions and exceptions; we will explain any refusal.

Send a request through the contact form or to [email protected]. Tell us which information or interaction it concerns. We may ask for proportionate information to verify your identity; do not send identity documents unless we explain why they are needed. For GDPR requests, we normally respond within one month. If a lawful extension is necessary, we will explain it within that month.

You may complain to your local data-protection authority or Bulgaria’s Commission for Personal Data Protection. You do not have to contact us first. We do not make automated decisions about you that produce legal or similarly significant effects.

Children and changes to this notice

Metisdo is a general-purpose productivity tool, not a service directed at children. We do not knowingly collect contact information from children under 13. If you believe a child has sent us personal information, contact us so we can investigate and remove it where appropriate.

We will update the date on this page when the notice changes and identify material changes on the website or in the app. A new notice does not by itself authorise a new use of information already collected. Where a new use requires consent, we will ask for it separately.

Privacy · Terms · Refunds · Company and notices · Contact