Privacy Policy

1. What SecureDoc AI Bridge Does

SecureDoc AI Bridge is a Chrome extension that anonymizes sensitive information in documents before users interact with third-party AI chatbots (ChatGPT.com and Claude.ai). The extension replaces identifiable data—such as names, numbers, dates, and custom terms—with placeholders, and can reverse the mapping when displaying AI responses back to the user.

2. Data We Collect

2.1 Authentication Credentials

When you sign in, your email address and a session token (JWT) are stored in Chrome's local storage. These are used solely to authenticate requests to our backend API. We do not store your password in the extension.

2.2 Documents You Upload

Document text you upload is sent to our backend API for anonymization processing. The backend identifies sensitive entities, generates placeholder mappings, and returns the anonymized text. Original document content is stored locally in your browser (IndexedDB and Chrome local storage) and is not persisted on our servers after the anonymization response is returned.

2.3 Anonymization Mappings

The mapping between original sensitive terms and their placeholders is stored locally in your browser. This mapping never leaves your device except when sent to our backend for processing during anonymization.

2.4 Website Content on ChatGPT and Claude

The extension reads and modifies content on ChatGPT.com and Claude.ai pages to replace placeholders with original values in AI responses (de-anonymization). It also monitors the chat composer to provide inline suggestions for placeholder terms. This content is processed locally in your browser and is not sent to our servers.

3. Data We Do NOT Collect

• We do not collect browsing history or web activity outside of ChatGPT.com and Claude.ai.
• We do not collect financial, health, or location information.
• We do not log keystrokes, mouse movements, or clicks.
• We do not use analytics, tracking pixels, or third-party tracking scripts in the extension.

4. How We Use Your Data

• Authentication: Your email and session token are used to authenticate API requests to our backend.
• Anonymization: Document text is sent to our backend solely to identify and replace sensitive entities. The backend returns the anonymized text and mapping; it does not retain your original document content.
• De-anonymization: Placeholder-to-original mappings are applied locally in your browser when displaying AI responses.

5. Third-Party Services

The extension interacts with the following third-party services:

• ChatGPT.com (OpenAI): The extension injects UI elements into ChatGPT pages and reads AI responses to perform de-anonymization. Your anonymized text is sent to ChatGPT by you through their normal chat interface—we do not send data to OpenAI's API directly.
• Claude.ai (Anthropic): Same as above—the extension operates within the Claude.ai interface.
• Supabase: Used for user authentication. Your email and hashed password are managed by Supabase Auth.

6. Data Storage & Security

• Session tokens and cached documents are stored in Chrome's local storage, which is sandboxed to the extension.
• All communication between the extension and our backend API occurs over HTTPS.
• Authentication tokens are sent via Authorization headers, not stored in URLs or cookies.

7. Data Sharing

We do not sell, trade, or transfer your data to third parties. We do not use your data for advertising, profiling, or creditworthiness assessments. Your data is used exclusively to provide the anonymization functionality described above.

8. Data Retention & Deletion

Document content and anonymization mappings are stored locally in your browser. You can delete this data at any time by:

• Clearing your browser's extension storage
• Uninstalling the extension
• Using the extension's built-in document management to remove individual documents

To delete your account and any associated authentication data, contact us at the support email below.

9. Remote Code

The extension does not load or execute any remote code. All JavaScript is bundled within the extension package, including the Supabase client library.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the extension after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or want to request data deletion, contact us at: [your-email@example.com]