Privacy Notice — ME-TA SCE Desktop Client

What this app is

The ME-TA SCE desktop client gives authorised users access to the Metawebservice platform, ME-TA's validated environment for clinical-trial statistical services. Your organisation's agreement with ME-TA (including a Data Processing Agreement, where applicable) governs how study data is processed; this notice describes what this app itself does on your computer.

Data the app processes

• Account data — your name and email address, registered on the Metawebservice platform by you or your organisation's administrator. Used to identify you and to sign you in (single sign-on via your organisation's identity provider, or a one-time code sent to your email). The app does not use or store passwords. ME-TA ApS is the data controller for this account data.
• Study content — files and information belonging to studies your organisation's administrator has granted you access to. The app shows this content and stores locally only what you explicitly download or synchronise. For study content, ME-TA acts as a data processor on behalf of your organisation (the controller); your organisation controls who has access.
• Sign-in tokens — the long-lived refresh token is stored in the Windows Credential Manager; short-lived session tokens are stored in files encrypted with Windows data protection (DPAPI) in the app's local data folder.

What stays on your computer

• Files you download individually are saved wherever you choose in the save dialog. Studies you synchronise are kept in a study folder you can open in Explorer — by default under your user profile (%USERPROFILE%\ME-TA\studies); installations set up before August 2026 keep their previously configured location. Technical synchronisation logs are kept in a hidden .me-ta area inside the study folder.
• If you use the bulk-migration feature, a local work plan (a listing of the file names, folders and sizes of the folder you selected) is kept while the migration is in progress; it is deleted when the migration completes, and any leftover plans are deleted after 90 days. The app also keeps a small local registry of where each study folder is located on this computer.

The app produces no crash reports or usage analytics, and has no facility to upload logs from your computer.

What leaves your computer

The app communicates outbound only, over encrypted TLS connections, with the Metawebservice platform and its supporting AWS services in EU regions (platform API, file storage, authentication). By default, file uploads go directly to AWS in the EU; you can optionally enable an accelerated transfer mode (in the app's settings) that routes upload traffic via the nearest AWS edge location worldwide for higher throughput — files are stored in the EU in either mode. The app exposes no inbound network services, except a temporary local listener on your own machine that receives the sign-in response from your browser during single sign-on.

The app is distributed and updated through the Microsoft Store (or your organisation's device management); the Store's own communication with Microsoft is governed by Microsoft's privacy statement.

The app contains no advertising, no third-party analytics, and no tracking, and makes no network connections to third parties. No data is sold or shared with third parties for their own purposes.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. For account data, contact ME-TA at contact@me-ta.dk; ME-TA will act on requests within the limits of its regulatory obligations (records relating to clinical trials are subject to mandatory retention periods). For study content, contact your organisation (the data controller); ME-TA will support your organisation in fulfilling your request. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

Retention and deletion

Account data is retained while your account is active, and thereafter only as long as required by ME-TA's contractual and regulatory obligations. Locally stored content and logs remain on your computer until you or your organisation delete them; uninstalling the app does not automatically delete the study folder — see the uninstall instructions, provided alongside this notice, for exactly what uninstalling removes and how to remove everything.

Changes

Material changes to this notice are published at the same location and, for organisational customers, notified per the applicable agreement.

Last updated: 2026-08-04