Privacy Policy
- The text you type into an AI service, and any file you attach, is checked inside your browser. It is never sent to us.
- If you sign in, we hold your account: your email address, an optional display name and a hashed password.
- If reporting is on, we receive a short record of each protection decision: which AI service, when, what types of information were found and how many, and what the extension did. Never the words themselves.
- We use two service providers: Vercel to run the website and API, and Neon to host the database. We do not sell data, show adverts or run analytics.
1. Who we are
This product is published by VIRADOTECH COMPANY LIMITED, a company registered in Ghana (“Viradotech”, “we”). Contact us about this policy or your data at virgil@viradotech.com.
When your employer or organisation uses the product, the organisation decides what is reported and who in it can see that record. For that record, the organisation is responsible for its use of the data, and we process it on its behalf.
2. What stays in your browser
The extension runs only on these AI services: ChatGPT (chatgpt.com, chat.openai.com), Claude (claude.ai), Google Gemini (gemini.google.com), Microsoft Copilot (copilot.microsoft.com), Perplexity (perplexity.ai) and Mistral Le Chat (chat.mistral.ai). It reads nothing on any other website.
On those sites it reads only the box you type your prompt into, plus any file you yourself attach. That content is processed locally and never leaves your device:
- Prompt text: scanned in memory to find sensitive information, then discarded.
- Attached files: opened in a hidden page belonging to the extension, scanned in memory and discarded. The file, its text and its file name are never sent anywhere. The PDF and image-reading engines are bundled inside the extension, so checking a file makes no network request at all.
- The values found (a name, an email address, an ID number) and the replacements used to anonymise them: held in memory for that browser tab only and cleared when the tab closes.
The extension also keeps, on your device only: your settings, today’s protection counters, a local history of up to 200 protection decisions (in the same form as the record described in section 3, never containing what you typed), and a cached copy of your organisation’s policy. While you are signed in, it holds your session token, account email and organisation list in browser session storage, which Chrome clears when the browser closes. Uninstalling the extension removes all of this.
3. What reaches our servers
Your account
If you create an account or sign in, we receive and store:
- your email address and, if you give one, a display name;
- your password, sent when you sign in or register and stored only as an Argon2id hash, never in readable form;
- if you turn on two-step verification, the secret your authenticator app uses and hashed backup codes;
- your sessions: a hashed session token with its creation, last-used and expiry times. We do not record your IP address, device or browser against a session.
Your organisation
If you create or join an organisation, we store its name, its members and their roles, any teams (units) and policies configured in it, and invitations. An invitation can name the email address it was sent for, or be an open link.
Protection records (“audit metadata”)
A protection record is sent only when reporting is on. That happens if you switch on Send audit metadata in the extension’s settings, or if an administrator of your organisation requires reporting for the organisation. An organisation’s requirement applies only while you are signed in and working under that organisation, never to your personal use.
Each record contains exactly these fields, and no others:
| Field | What it holds |
|---|---|
eventId | A random identifier for the record |
timestamp | When the decision happened |
aiService | Which supported AI service, for example “claude”. Not a web address, page title or conversation |
risk | The overall risk level, for example HIGH |
entityTypes, entityCounts | The types of information found and how many of each, for example “EMAIL: 1”. Never the values |
action, result | What the policy decided (allow, anonymise, warn or block) and what happened |
policyId, policyVersion | Which policy was applied |
itemsAnonymised | How many items were replaced |
promptLength | The length of the prompt in characters. A number, not text |
source, fileCount, fileKinds, extractionStatus | Whether it was a prompt or an attachment, how many files, their general kind (for example “pdf”) and whether they could be read. Never a file name or contents |
Our server adds the time it was received, your user account and the organisation it belongs to. The extension refuses to send a record containing a prompt-text field, and our server independently rejects any record that contains one, or a value that looks like a raw email address, key, token or card number. The database has no column that could hold prompt content.
Administrative log
We keep a log of account and administrative actions, such as sign-ins and failed sign-ins, sign-outs, role changes, policy changes and invitations. Each entry records who acted, on whom, what was done and when. It does not record IP addresses.
Abuse protection
To stop password-guessing, we count sign-in and verification attempts by IP address and email address for one minute. These counters are deleted automatically within a day of expiring. Our hosting provider may also keep standard request logs, including IP addresses, for operating and securing the service.
What we never receive
Prompt text, file contents, file names, the sensitive values found, your conversations with any AI service, other websites you visit, your browsing history, keystrokes or your passwords for AI services.
4. Who can see it
- You can see your own protection records in the dashboard.
- Owners and administrators of your organisation can see the protection records of every member while those members work under the organisation, and the organisation’s administrative log. Plain members see only their own records.
- Viradotech operates the service and can access stored data where needed to run, secure and support it. Our operator console shows each organisation’s name, its owner’s name and email, and member counts.
- Our service providers, Vercel (hosting) and Neon (database), process data only to provide their service to us.
We do not sell, rent or trade personal data. We do not use it for advertising, profiling or creditworthiness, or for any purpose other than providing the product. No analytics, advertising or tracking code runs in the extension or on this website.
5. Where it is stored
Data on our servers is stored and processed in the United States: the API runs on Vercel in Washington, D.C., and the database on Neon in Ohio. If you use the product from Ghana, the European Union or elsewhere, your account and protection records are transferred to the United States. Your prompts and files are not; they never leave your device.
6. How long we keep it
| Data | Kept for |
|---|---|
| Protection records | 90 days by default. An organisation’s administrator can choose 30, 90, 180 or 365 days. Older records are deleted automatically every day. |
| Account and organisation data | For as long as the account or organisation exists, or until you ask us to delete it. |
| Administrative log | For as long as the organisation or account exists. It is not currently deleted automatically. |
| Sessions | Stop working after 30 days without use, and after 90 days in all cases. Expired session records are not yet deleted automatically. |
| Two-step sign-in challenges | Expire after 5 minutes. |
| Sign-in attempt counters | One minute, deleted within a day. |
| Data in the extension | On your device until you change it, clear it or uninstall the extension. Today’s counters reset each day. |
7. Your choices and rights
- The extension protects you without an account. Signing in is optional.
- You can switch Send audit metadata off in the extension’s settings. If your organisation requires reporting, records are still sent while you work under that organisation. If you belong to more than one organisation you can choose which one you are working under, including your personal context. Signing out of the extension stops all reporting.
- You can sign out, or sign out of every device at once, from the dashboard’s Settings.
- You can ask us to give you a copy of your data, correct it or delete your account by writing to virgil@viradotech.com. Account deletion is not yet available as a button, so we handle it on request. If your organisation holds records about you, we may need to involve its administrator.
- Depending on where you live, you may have further rights under data-protection law, including complaining to your data-protection authority.
8. Security
Data travels over encrypted HTTPS connections. Passwords and session tokens are stored only as hashes. Access to an organisation’s data is checked on our server for every request, against your actual membership and role. No system is perfectly secure, and we cannot promise that this one is.
9. Children
The product is built for work and is not directed at children.
10. Changes to this policy
If what the product collects or shares changes, we will update this page and its effective date before the change takes effect.