Privacy Policy

What SafeAIData Guard does

SafeAIData Guard is an enterprise browser extension designed to help organizations reduce the risk of sensitive data being shared with AI tools.

The extension enforces tenant-defined security policies when users interact with supported AI services. Depending on configuration, SafeAIData Guard can warn users, block actions, or log security events when policy conditions are triggered (for example keyword patterns, restricted providers, or file upload restrictions).

SafeAIData Guard is typically deployed by organizations through managed browser policies (such as Chrome Enterprise or Microsoft Intune) and configured by tenant administrators.

Data processed by the extension

SafeAIData Guard evaluates certain content locally within the browser in order to enforce security policies defined by the tenant organization.

• Device identifier A randomly generated identifier used for device enrollment and seat management.
• Security events Events such as WARN, BLOCK, or HEARTBEAT which may include metadata like timestamp, provider hostname, and policy result.
• Policy configuration Security policies retrieved from the SafeAIData tenant such as enabled AI providers, keyword patterns, and enforcement toggles.
• AI interaction context Limited contextual information related to supported AI tools (such as the provider hostname) required for policy enforcement.

Policy evaluation is primarily performed locally in the browser. Only minimal metadata required for enforcement, monitoring, or auditing may be transmitted to the SafeAIData platform.

What we do not collect or use

• We do not sell personal data.
• We do not use collected data for advertising or marketing.
• We do not track browsing activity unrelated to AI policy enforcement.
• We do not collect passwords or payment information.
• We do not collect personal emails, files, or documents outside supported AI tool interfaces.

Data usage

Security events and device identifiers may be transmitted to the SafeAIData backend in order to:

• enforce tenant security policies
• allow administrators to monitor policy events
• support enterprise security auditing
• manage enrolled devices within an organization

This processing occurs strictly within the context of enterprise security enforcement.

Data retention

Retention of security events and device identifiers is controlled by the tenant organization and may depend on the organization's internal compliance or security requirements.

SafeAIData does not retain data longer than necessary to operate the service.

Security

SafeAIData applies industry-standard security practices to protect organizational data, including:

• encrypted communication (HTTPS)
• tenant isolation between organizations
• authenticated API communication
• role-based access to administrative interfaces

Your rights (GDPR)

If you are located in the European Economic Area (EEA), you may have certain rights under the General Data Protection Regulation (GDPR), including:

• the right to access your personal data
• the right to request correction of inaccurate data
• the right to request deletion of data where applicable
• the right to restrict processing under certain circumstances

Contact

For privacy questions or data protection requests contact info@safeaidata.com.