Data Upload Terms

MQS (“the Service”) processes uploaded CSV and Excel files for the sole purpose of computing metadata quality scores. When you upload a file:

• The file is parsed in server memory to extract structural metrics (row count, column count, vocabulary patterns, format consistency, and governance signals).
• An overall quality score and governance band are computed from these metrics.
• Once processing completes, the raw file contents are discarded from memory. The Service does not write uploaded file contents to disk or persist them in any database.

What the Service stores: After processing, the Service retains only report metadata: your filename, row and column counts, the computed quality score, governance band, and the labels you provided (company name, platform, dataset label). This report metadata is associated with your user account.

What the Service does not do: The Service does not store, index, search, or retain the contents of your uploaded files. It does not use uploaded data to train models or derive insights that identify you or your organization.

AI-generated narrative: To produce written analysis in your report, the Service sends computed scores and field-level metrics (not your raw file contents) to a third-party AI provider (Anthropic) via secure API calls. This data is not stored by the provider and is not used for model training, per Anthropic's API data usage policy. If AI narrative generation fails, a deterministic fallback report is provided instead.

Anonymized aggregate statistics: The Service may compute and publish anonymized, aggregate statistics derived from the pool of all assessments. These statistics include: average and median scores, health band distributions, platform distributions, and record count averages. Aggregate statistics never include company names, filenames, dataset labels, user identifiers, or raw field values from your upload. No individual assessment can be identified from published aggregates.

The Service is designed exclusively for analyzing metadata exports from Digital Asset Management (DAM), Product Information Management (PIM), Content Management System (CMS), and Media Asset Management (MAM) platforms. You agree not to upload files containing any of the following data types:

• Protected Health Information (PHI) as defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), including individually identifiable health information in any form.
• Payment card data subject to the Payment Card Industry Data Security Standard (PCI-DSS), including cardholder names, card numbers, expiration dates, and security codes.
• Social Security numbers or government-issued identification numbers.
• Financial account numbers, including bank account numbers, routing numbers, and investment account identifiers.
• Authentication credentials, including passwords, API keys, tokens, and secret keys.
• Data subject to specific regulatory frameworks, including FERPA (education records), GLBA (financial information), and COPPA (children's data), unless you have independently ensured compliance with those frameworks.

If your metadata exports could contain any of the above categories (for example, filenames that include patient names, description fields that reference diagnoses, or tag fields that contain identification numbers), you are responsible for removing or redacting that information before uploading.

You are expressly prohibited from uploading, submitting, transmitting, or otherwise processing any files or data containing Protected Health Information (PHI) or individually identifiable health information through this Service. This prohibition applies regardless of whether the PHI has been de-identified, encrypted, or otherwise transformed.

Any use of this Service to process PHI constitutes a material breach of these Terms and may result in immediate termination of your account without notice. If you require HIPAA-compliant data processing services, you should seek a provider that offers BAA execution and HIPAA-compliant infrastructure.

By uploading files to the Service, you represent and warrant that:

• You have the right and authorization to upload the data contained in your files.
• Your uploaded files do not contain any Prohibited Data as described in Section 2.
• You have reviewed the contents of your exports and have removed or redacted any sensitive, regulated, or personally identifiable information that should not be processed by the Service.
• Your use of the Service complies with all applicable laws, regulations, and organizational policies.

The Service analyzes metadata structure, not file contents for accuracy or completeness. You are solely responsible for how you use the scores and reports generated by the Service.

• File contents: Not retained. Temporarily stored in encrypted storage during processing, then automatically deleted upon completion of analysis.
• Report metadata: Stored in your account as long as the account remains active. This includes: filename, row and column counts, quality score, governance band, company name, platform, dataset label, and timestamp.
• User-initiated deletion: You may delete individual reports from your dashboard at any time. Deletion is immediate and permanent.
• Account termination: Upon account deletion, all associated report metadata will be removed within 30 days.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

MQS does not warrant that quality scores are accurate, complete, or suitable for any specific decision-making purpose. Scores reflect structural analysis of metadata patterns and should be used as one input among many in governance assessments.

IN NO EVENT SHALL MQS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE, INCLUDING BUT NOT LIMITED TO DAMAGES ARISING FROM DATA UPLOADED IN VIOLATION OF THESE TERMS.

You agree to indemnify, defend, and hold harmless MQS and its operators from and against any claims, damages, losses, liabilities, fines, penalties, costs, and expenses (including reasonable attorney's fees) arising out of or relating to:

• Data you upload in violation of these Terms, including the Prohibited Data and HIPAA provisions.
• Your violation of any applicable law or regulation in connection with your use of the Service.
• Any third-party claim that data you uploaded infringes intellectual property rights or violates privacy rights.

We may update these Terms from time to time. When we do, we will update the version number and effective date at the top of this page. If we make material changes to the Prohibited Data or HIPAA provisions, you will be asked to re-accept the updated Terms before your next upload. Continued use of the Service after changes constitutes acceptance of the revised Terms.