1. Information We Collect

We collect information to provide better services to all our users. The types of information we collect include:

Account Information: Name, email address, and organization details when you register as an administrator.
Authentication Data: We use secure authentication providers to verify your identity.
Usage Metadata: We track which authorized AI tools are accessed by employees to verify policy compliance.

What we DON'T collect

We take your employees' privacy seriously. Our browser extension and platform:

Do NOT read or store the content of AI prompts.
Do NOT store AI-generated responses or conversations.
Do NOT track general browsing history outside of identified AI tool domains.
Do NOT record keystrokes or screen content.

2. How We Use Your Information

We use the collected data exclusively to:

Monitor and report organizational compliance with your AI policies.
Provide training and quizzes to employees.
Detect "Shadow AI" usage within your organization.
Improve platform security and prevent unauthorized access.

3. Data Storage and Security

All data is encrypted at rest using AES-256 and in transit using TLS 1.2+. We utilize SOC 2 Type II compliant infrastructure providers including Supabase (built on AWS) for secure data persistence.

4. Browser Extension Data

The PolicyGuard AI extension only activates on specified AI tool domains. It temporarily processes the URL to match against your organization's policy and logs whether the user has acknowledged the displayed guidelines. This metadata is the only information transmitted to our servers.

5. Third-Party Services

We share data with third-party processors only as necessary to provide our service:

Supabase/AWS: For database storage and authentication.
Stripe: For secure subscription and payment processing.
Resend: For transactional email notifications.
Google Analytics 4: To analyze website traffic and improve user experience. You can opt-out by declining cookies or using a browser add-on.

6. Cookies

We use cookies to enhance functionality and analyze traffic. Functional cookies are necessary for the site to work (e.g., authentication). Analytics cookies (Google Analytics) are optional and require your consent. You can manage your preferences via our cookie banner.

7. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or similar regulations, including the right to access, delete, or port your data. Admin users can manage organization data via the dashboard settings.

8. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@getpolicyguard.com.