Home » Privacy and cookies

Privacy and cookies

This page is a translation of the French legal page. In case of difference, the French version prevails.

In short: without your consent, no measurement cookie is set. With your consent, RFQdecoder counts visits and useful actions (opening the tool, using a calculator) to learn which pages are useful. No advertising, no resale.

Data controller

Publisher: MT-Transition
Legal form: SASU (simplified joint-stock company) with share capital of €1,000
Address: 1 rue du Capitaine Durand, 28200 Châteaudun, France
Registration: RCS Chartres 837 690 262
Publication director: The president of MT-Transition
Contact: contact@rfqdecoder.com

Audience measurement

The site uses Google Tag Manager and Google Analytics 4 (Google Ireland Limited). Until you accept, Google consent mode only sends cookieless signals with no identifier. If you accept, the _ga and _ga_* cookies are set for 13 months at most.

Data measured: pages viewed, clicks on the tool buttons, questions opened, use of the calculators, device type, approximate country and city. IP addresses are not stored by Google Analytics 4. The data is kept for 14 months, then deleted.

Google may process data in the United States; these transfers are governed by the EU-US Data Privacy Framework and standard contractual clauses.

The site fonts (Geist, IBM Plex Mono) are loaded from the Google Fonts service: your browser then sends its IP address to Google, without a cookie.

What is stored without consent

Your choice on the banner, kept in the browser local storage (rfqd_consent), so that you are not asked again on every page.
In the costing tool, a session cookie (rfq_session, 8 hours at most), needed to keep your current estimate.
In the costing tool, your language choice (rfq_lang), kept until the browser is closed.

Changing your mind

You can withdraw or give your consent at any time: . The “Manage cookies” link is also at the bottom of every page.

Drawings uploaded to the tool

An uploaded drawing (PDF, DXF or STEP), whether in the web tool, through the API, through the RFQdecoder app in ChatGPT or through another connected AI assistant, is used only to produce the requested estimate. It is read on our server: it is not published, not resold, not passed to a third party, and not sent to any outside artificial intelligence service.

Box “Delete my drawing at the end of my session” ticked (web tool): the drawing and the files derived from it are deleted as soon as you leave the tool, and at the latest 9 hours after your session was opened.
In every other case (box not ticked, API, AI assistants): the drawing and its files are deleted automatically 30 days after upload.

The file name, the measurements read from the drawing and the estimate result are kept in the technical logs described below.

Data processed, purposes and retention periods

Web tool: A session cookie and your language choice (see above). For a named account: the user name, the access code we gave you and its hash, kept as long as the account exists.
Technical logs: Date and time, session, account or key identifier, file name, measurements read from the drawing, parameters entered, estimate result, comments and actual prices you enter in the tool. Purposes: providing the service, protecting it (quotas, abuse detection), improving the calculations. Retention: 12 months, then automatic deletion.
Access requests: Name, company, email, phone and message entered in the form. Purpose: replying and opening access. For requests made on the site, we also keep the IP address of the request, the country and network name derived from it, and the validated email address. The account is created when the email is validated: username = email address, password stored only as a hash. Retention: 3 years after the request.
API keys: Name and contact of the holder, plan, credits, creation and revocation dates. The key itself is stored only as a hash. Purposes: authenticating calls, counting credits, protecting the service. Retention: as long as the key exists, deletion on request.
Payments: Payment is made on a Stripe page: we neither receive nor store any card number. We keep the payment reference, plan, amount, currency and date for 10 years, as required by accounting law.
Audience measurement: Only with your consent, 14 months (see above).
Legal bases: Performance of the service you request; legitimate interest for the security and improvement of the tool; your consent for audience measurement; legal obligation for accounting.

RFQdecoder app in ChatGPT

When you use the app in ChatGPT, ChatGPT sends the tool the drawing uploaded in the conversation, the material, the quantity, the batch size and an anonymous identifier provided by OpenAI. We do not receive your name, your email address or the rest of the conversation.

We keep only a non-reversible hash of this anonymous identifier, to keep track of the free estimates offered each month and of the credits purchased. It is kept as long as the app is offered in ChatGPT; you can ask for its deletion at contact@rfqdecoder.com, giving the date and time of one of your estimates. The drawing follows the 30-day rule above. The estimate result is returned to ChatGPT, then processed by OpenAI under its own privacy policy.

Other AI assistants (Claude, Mistral Le Chat, Perplexity)

You can also connect RFQdecoder to Claude, Mistral Le Chat, Perplexity or another MCP-compatible assistant. On first connection, an RFQdecoder page creates your free access (a key, with no name or e-mail address) or links an existing access. The assistant then sends the tool the drawing dropped in the conversation and the estimate parameters, and the result is sent back to it. The drawing follows the same rules as above (automatic deletion 30 days after upload). The conversation itself is processed by the assistant’s provider (Anthropic, Mistral AI, Perplexity…) under its own privacy policy.

Recipients

Hetzner Online GmbH, a German company: hosting of the calculation server, uploaded drawings and logs.
OVH SAS (France): hosting of the rfqdecoder.com site, through which exchanges with the tool and the API pass, and sending of access requests by email to MT-Transition.
Stripe: payment for packs and subscriptions.
api.country.is and rdap.org: country and network name derived from the IP address of an access request.
OpenAI, Anthropic, Mistral AI, Perplexity: only if you use RFQdecoder in their assistant (ChatGPT, Claude, Le Chat, Perplexity).
Google: audience measurement with your consent, and fonts.

This data is neither sold nor rented. Stripe, AI assistant providers and Google may process data outside the European Union, notably in the United States, with the safeguards set out in their own policies.

Your rights and choices

At any time you can:

tick “Delete my drawing at the end of my session” before uploading a drawing;
refuse or withdraw your consent to audience measurement (“Manage cookies” link at the bottom of every page);
request access to, correction, deletion or portability of your data, or object to its processing, by writing to contact@rfqdecoder.com. A drawing, an API key, an account or an access request can be deleted on request before the periods stated.

We reply within one month. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

By the RFQdecoder team · updated 10 October 2026