Privacy policy

This Privacy Policy governs the data practices for the secureintent.ai website and the SecureIntent browser extension, operated by SECUREINTENT.AI LTD (Company No. 17237217), with registered offices at 124-128 City Road, London, England, EC1V 2NX.

01. Local Inspection and Raw-Content Protection

SecureIntent evaluates pasted text and potential secret values on your device. The extension does not transmit or retain raw pasted text, clipboard contents, detected secret values, complete URLs, URL paths, or query strings. A paste is inspected locally to provide the warning or redaction feature.

Account and Business features use a signed session to authenticate the user and, where applicable, their organisation. SecureIntent uses this only to provide the requested account, entitlement, policy, and security-reporting features.

02. Business Shadow AI Security Metadata

Shadow AI is available only to a signed-in Business organisation user after they accept the current Terms and Privacy Policy. It helps that organisation understand and manage use of recognised AI services. Shadow AI sends only limited security metadata:

• The recognised AI-service hostname and service identifier, and an event timestamp. It does not send a full URL, URL path, query string, page content, or prompt.
• Paste byte size; a detection category and reason; the warning outcome; and a finding count. It does not send pasted text, clipboard content, or a secret value.
• The authenticated Business organisation and user context needed to place the event in that organisation's DLP reporting. Events are ignored for incognito pages, are bounded in the local queue, and are discarded on sign-out, consent removal, or organisation change.

SecureIntent uses this metadata only to provide, secure, and improve the DLP and Business Shadow AI features. It is not sold, used for advertising, or used to build a cross-site behavioural profile.

03. Strict Prohibition on Data Sales & Third-Party Access

As a cybersecurity provider, we treat the protection of your workflow as our sole business model. We guarantee the following:

04. Website Analytics (secureintent.ai)

Our website respects your privacy before you even install our product:

• No Tracking Cookies: We do not use persistent tracking cookies, cross-site trackers, or advertising pixels.
• Privacy-First Analytics: We use Cloudflare Analytics to monitor general website health and traffic volume. This operates entirely at the network layer, aggregating basic performance metrics without capturing individual IP addresses or building user profiles.

05. Your Rights Under UK GDPR

We operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You may request access, correction, or erasure of personal data related to your account or Business organisation by contacting Privacy & Data Governance below. We may need to verify your identity and organisation authority before acting on a request. Removing consent, signing out, or leaving a Business organisation causes the extension to discard queued Shadow AI metadata on the device.

06. Open Source Transparency & Contact

We believe trust in cybersecurity must be verifiable. Our extension’s frontend code is entirely open source, allowing any developer to independently audit our local processing and raw-content protections.

If you have questions about our data practices or wish to report a security vulnerability, please contact the appropriate team:

SECUREINTENT.AI LTD
124-128 City Road, London, England, EC1V 2NX