Privacy policy

This Privacy Policy governs the data practices for the secureintent.ai website and the SecureIntent browser extension, operated by SECUREINTENT.AI LTD (Company No. 17237217), with registered offices at 124-128 City Road, London, England, EC1V 2NX.

01. Local Inspection and Raw-Content Protection

SecureIntent evaluates pasted text and potential secret values on your device. The extension does not transmit or retain raw pasted text, clipboard contents, detected secret values, complete URLs, URL paths, or query strings. A paste is inspected locally to provide the warning or redaction feature.

Account and Business features use a signed session to authenticate the user and, where applicable, their organisation. SecureIntent uses this only to provide the requested account, entitlement, policy, and security-reporting features.

02. Business Shadow AI Security Metadata

Shadow AI is available only to a signed-in Business organisation user after they accept the current Terms and Privacy Policy. It helps that organisation understand and manage use of recognised AI services. Shadow AI sends only limited security metadata:

• The recognised AI-service hostname and service identifier, and an event timestamp. It does not send a full URL, URL path, query string, page content, or prompt.
• Paste byte size; a detection category and reason; the warning outcome; and a finding count. It does not send pasted text, clipboard content, or a secret value.
• The authenticated Business organisation and user context needed to place the event in that organisation's DLP reporting. Events are ignored for incognito pages, are bounded in the local queue, and are discarded on sign-out, consent removal, or organisation change.

SecureIntent uses this metadata only to provide, secure, and improve the DLP and Business Shadow AI features. It is not sold, used for advertising, or used to build a cross-site behavioural profile.

03. Strict Prohibition on Data Sales & Third-Party Access

As a cybersecurity provider, we treat the protection of your workflow as our sole business model. We guarantee the following:

04. Website Analytics and Cookies (secureintent.ai)

This website only uses analytics cookies if you accept them in the cookie banner. You can change your choice at any time with Cookie settings (also in the footer).

• Cookieless traffic statistics: We use Cloudflare Web Analytics to measure page views, referrers and page speed. It sets no cookies, does not fingerprint visitors and does not build user profiles.
• Google Analytics (only if you accept): Helps us understand which pages are useful and where visitors leave, using events such as viewing pricing, clicking an install button or sending a Business enquiry. Advertising features, ad personalisation and Google signals are switched off. Google Analytics never runs on the account, team console or promotion pages.
• Creator attribution (only if you accept): If you arrive through a creator or campaign link, we remember that link so we can credit the creator if you later sign up.
• No advertising: We do not use advertising cookies, advertising pixels or cross-site trackers.

Cookies we use

• si_consent: SecureIntent, strictly necessary, 12 months. Remembers your cookie choice.
• Clerk sign-in: Clerk, strictly necessary, for example __session and __client_uat, until you sign out. Keeps you signed in to your account and the extension.
• Paddle checkout: Paddle, strictly necessary, set only during checkout. Processes payments securely.
• _ga, _ga_*: Google Analytics, optional, up to 2 years. Counts visits and tells visitors apart. Only with your consent.
• si_creator: SecureIntent, optional, 90 days, also si_creator_medium and si_creator_campaign. Creator attribution. Only with your consent.

If you reject or later withdraw consent, we stop Google Analytics and delete the optional cookies above. Light or dark theme preferences are stored in your browser only and are never sent to us.

05. Your Rights Under UK GDPR

We operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

You may request access, correction, or erasure of personal data related to your account or Business organisation by contacting Privacy & Data Governance below. We may need to verify your identity and organisation authority before acting on a request. Removing consent, signing out, or leaving a Business organisation causes the extension to discard queued Shadow AI metadata on the device.

06. Open Source Transparency & Contact

We believe trust in cybersecurity must be verifiable. Our extension’s frontend code is entirely open source, allowing any developer to independently audit our local processing and raw-content protections.

If you have questions about our data practices or wish to report a security vulnerability, please contact the appropriate team:

SECUREINTENT.AI LTD
124-128 City Road, London, England, EC1V 2NX