Privacy Policy

1. Who we are

PII Guard is a privacy-first product that helps you mask personally identifiable information (PII) and custom dictionary terms before text is sent to large language models (for example ChatGPT and Claude.ai via our browser extensions, or Documents / Chat / Data in this web app). This policy describes how the web application and the Chrome / Firefox extensions handle data.

2. Data we process

• Account data (when you sign up): email and authentication identifiers via our auth provider (Supabase).
• API keys you create in Account (`pg_…`) to use the extension, proxy, or SDK. Keys are stored hashed server-side; the extension keeps the key you paste in browser extension storage on your device.
• Prompt / document text you submit for mask/classify/unmask. Text is sent to our privacy APIs and upstream masking provider (ROS Policy) to produce masked output and a mapping token. We design audit logs to store types and counts only — not raw PII values or snippets.
• Usage metering: counts of feature use (preview/send/extension) for quotas. Guests may be identified by a first-party visitor cookie (`pg_vid`).
• Extension settings (local only): app base URL, enable/pause, mask category toggles, optional settings-lock password hash, dictionary terms, and a short-lived session map for Unmask. These live in Chrome/Firefox extension storage on your device.

3. Browser extensions

The extensions inject only on ChatGPT and Claude.ai pages. They read composer text when you send, call your configured PII Guard origin (after you grant optional host access for that origin), and may rewrite on-page tokens when you click Unmask. They do not sell data, show ads, or inject on unrelated websites.

Permissions in brief: storage for settings and session maps; optional host access only for the app origin you configure; declared content scripts for chatgpt.com, chat.openai.com, and claude.ai.

4. What we do not do

• We do not sell personal data.
• We do not use your prompts for advertising profiling.
• We do not execute remote JavaScript inside the extension package; API responses are treated as data (masked text / mappings), not code.

5. Retention and deletion

Extension data is removed when you clear site/extension data or uninstall the extension. Account data, API keys, and workspace content can be managed from Account while signed in; you may also request deletion by contacting us (see below). Mapping tokens from the masking provider may expire according to that provider’s rules.

6. Third parties

Depending on configuration, processing may involve Supabase (auth/database), our hosting provider (e.g. Vercel), and ROS Policy for mask/unmask. LLM providers you register yourself receive only what you choose to send after masking (or via the proxy). Review those providers’ policies as well.

7. Children

PII Guard is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Do not use the product if you are under that age.

8. Changes

We may update this policy as the product evolves. The “Last updated” date at the top will change when we do. Continued use after an update constitutes acceptance of the revised policy where permitted by law.

9. Contact

For privacy questions or deletion requests, contact the publisher email listed on the Chrome Web Store / Firefox Add-ons listing for PII Guard, or the support email shown in your deployed app’s Account or documentation.