The short version. Your media stays on your computer. We never store your footage, your photographs, your file names, or the metadata MetaMule writes for you. To generate metadata we send a few small extracted frames to our AI provider, which passes through our servers without being kept. What we hold is your email address, your subscription status, and counts of how many assets you have processed.
MetaMule is made by Pursuit Labs, LLC, a Florida limited liability company based in Merritt Island, Florida, USA. We are the controller of the personal information described here. Contact: hello@metamule.ai.
Your email address, and the dates your account was created and last used. Signing in is passwordless: we email you a short numeric code and store only a keyed cryptographic hash of it, briefly. The key is held separately from the database, so the stored value cannot be turned back into a working code even by someone holding a copy of the database. Device sessions are stored as hashes too, never as usable tokens.
Your subscription plan, its status, and its billing period. Payments are handled by Stripe, which collects your payment details directly — we never receive or store your card number. We keep the customer and subscription identifiers Stripe gives us so we know what you are entitled to.
The number of assets you have generated in the current billing period, and the number of AI tokens that consumed. This is what powers the quota meter in the app and lets us understand our own costs. We also store an opaque hash per processed file so that regenerating the same file is not charged twice — that hash is computed on your computer and cannot be reversed into a file name or path.
If you use the Royalties feature to import an earnings export from a marketplace, the statement file is read on your computer and stays there. What MetaMule sends us is an aggregate summary of it: per marketplace, your total earnings, the month-by-month figures, the video-versus-photo split, the number of sales, and simple concentration ratios (how much your top earner and top five represent). This is tied to your account or install so the picture is not double-counted, and it helps us understand how contributors do across the marketplaces. We never receive the raw statement, buyer or customer names, invoice numbers, or any per-asset line. Importing earnings is entirely optional.
If enabled, the app may send anonymous counts — how many files were processed, the app version, the operating system. These carry no identifier that links them to your account, and contain no file names or metadata. You can turn this off in Settings.
Our website runs no analytics at all. It sets no cookies, uses no trackers, and builds no profile of you. If that ever changes we will say so here first, and it will remain cookie-free and free of cross-site tracking.
When you generate metadata, MetaMule extracts a small number of low-resolution frames from the clip or photo on your computer and sends only those frames, through our servers, to a third-party AI provider, which returns suggested metadata.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
Only with service providers who help us run MetaMule, under contract, for these purposes:
We may also disclose information if legally required, or in connection with a merger or sale of the business — in which case this Policy continues to apply until you are told otherwise.
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in California, you have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them — and we note again that we do not sell or share your personal information. If you are in the EEA or UK, you have rights under the GDPR, including the right to lodge a complaint with your supervisory authority.
To exercise any of these, email hello@metamule.ai. We will respond within the time the applicable law requires. You can also turn off diagnostics in Settings, and cancel your subscription at any time.
Everything travels over encrypted connections. Sign-in codes and session tokens are stored only as hashes, and your device token is kept in your operating system's keychain. Our AI provider credentials live in server-side secret storage and are never included in the application. No system is perfectly secure, but the strongest protection here is structural: we don't hold your media, so there is no media of yours to lose.
MetaMule is a professional tool intended for adults. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we will delete it.
We operate from the United States, and our providers may process data there and in other countries. Where personal information is transferred from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
We will post any changes here with a new version and date, and give notice in the app or by email before material changes take effect.
Pursuit Labs, LLC · Merritt Island, Florida, USA · hello@metamule.ai