Privacy policy — Clean before AI extension

1. What the extension does

Clean before AI helps you use AI chat services without exposing personal and confidential data. When you paste or type text into the message box of a supported AI website, it finds personal data (for example names, national and tax IDs, IBANs, card numbers, email addresses, phone numbers, addresses and company names) and — after you confirm — replaces it with labels such as [PERSON_1]. When the AI answers with those labels, the extension shows you the answer with your real data in its own side panel.

2. What data is processed, and where

• Text you paste or type into the message box of a supported website: analysed locally in your browser to detect personal data. It is not sent anywhere by the extension.
• The key (which label stands for which real value): kept only in your browser’s session memory (chrome.storage.session), accessible only to the extension — not to the AI website. It is deleted automatically when you close the browser, or immediately with “Forget everything”.
• Conversation text containing labels: read on the page so the side panel can show the answer with your real data; kept only in session memory for the open tab and deleted when the tab or browser is closed.
• Settings (interface language, label language, on/off switches) and your known-names list: stored locally with chrome.storage.local on your device. If your organisation sets a known-names list through a Chrome policy, the extension reads it from chrome.storage.managed.
• Local AI model: bundled in the extension package and run in an invisible extension document (offscreen) with WebAssembly. It reads the text only on your computer to find names and addresses; it has no network access and sends nothing anywhere.

3. What leaves your computer

Only the text that you yourself send to the AI service. After cleaning, it contains labels instead of the detected data. That text is processed by the AI provider (for example OpenAI, Anthropic, Google, Microsoft) under its own terms and privacy policy. Automatic detection cannot guarantee that every personal detail is found, so please review the text before sending it.

4. What the extension does not do

• No collection or transmission of personal or other user data to us or to third parties
• No analytics, tracking, advertising or cookies
• No remote code — all code is included in the extension package
• No sale of data, no use for advertising, no use for creditworthiness or lending decisions
• No access to websites other than the supported AI chat sites listed below

5. Permissions and why they are needed

• storage — to keep the key in session memory and your settings on your device.
• sidePanel — to show answers with your real data in the extension’s own panel, which the AI website cannot read.
• offscreen — to run the bundled local AI model in an invisible extension document (it has no access to web pages and makes no network requests).
• Access to supported AI websites (chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, copilot.microsoft.com, perplexity.ai, chat.deepseek.com, chat.mistral.ai, grok.com, poe.com, chat.qwen.ai, huggingface.co/chat) — to detect personal data when you paste, show the “Clean” button and read labels in the conversation.

6. Chrome Web Store User Data Policy

The use of information by this extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide the extension’s single purpose — protecting personal data before it is sent to an AI — and never leaves your device through the extension.

7. Children

The extension is not directed at children and does not knowingly process data about children beyond what a user pastes into a message box.

8. Changes and contact

We will publish any change to this policy on this page and update the date above. Questions: hello@hypervision.si · hypervision.si