ClicGuard Privacy Policy
The short version
ClicGuard reads what you paste or type in a few AI chat sites so it can warn you before sensitive data is sent. It does that inside your browser. The text of your messages never leaves your computer and is never sent to us. We only know your email and whether you're on a trial, the free version or Pro.
ClicGuard is a Chrome extension made by ClicAuto, a brand of The U-Shaped House, LLC (a Delaware limited liability company), 1925 Grand Ave, Ste 129, PMB 83841, Billings, MT 59102, USA. We are responsible for your data. This page explains what data ClicGuard uses, why, and what you can do about it.
What ClicGuard reads, and where
ClicGuard runs only on these sites: chatgpt.com, chat.openai.com, claude.ai, gemini.google.com, copilot.microsoft.com, perplexity.ai and chat.mistral.ai. On those sites, it reads the text you paste into or type in the message box, to look for API keys, passwords, bank details, card numbers, emails, phone numbers and the names in your client list. It also reads the text shown on the page, only to replace placeholders it created (like [CLIENT_1]) with your real values on your screen. All of this happens in your browser. ClicGuard has no access to any other website, your other tabs, your browsing history or your clipboard.
What stays on your device
- Your settings and your client list, saved in Chrome on your computer. They are not synced and not sent to us.
- The table that links placeholders to your real values. It is kept in your browser's memory and erased when you close Chrome. API keys, passwords and card numbers are never kept in it, only a scrambled fingerprint so the same item always gets the same placeholder.
- The log of what was caught: the date, the site, the type and number of items, and what you did (masked, edited, sent anyway, blocked). Never the items themselves and never the text of your messages. It is kept 90 days and you can export or clear it anytime.
What we receive, and why
- Your Google account email and Google account ID, when you sign in. We use them to start your free trial, link it to you, and manage your subscription or license.
- Your trial, subscription or license status (start date, end date, active or not). This decides which features you can use.
- Payments are handled by Link, a payment service by Stripe that sells ClicGuard subscriptions and licenses on our behalf and takes care of taxes. Link receives your payment details, billing address and email to process your payment; its own privacy policy applies to that. We only receive a customer ID, your billing country and the status of your purchase. We never see your card number.
- An anonymous install signal the first time you open ClicGuard: the extension version and your browser language, nothing else. No IP address is stored and there is no identifier attached. You can turn it off in Settings.
- Newsletter, only if you opt in. The box is unticked by default. If you tick it, we'll email you when ClicAuto launches a new tool. Every email has a one-click unsubscribe link.
What we never collect
The text of your messages or of the AI's answers, the items ClicGuard catches, your client list, your browsing history, the pages you visit, your contacts, your location.
Who processes your data
- Our servers: Hetzner, Germany (European Union). Backups: Hetzner, Finland (European Union).
- Emails: Resend, sending from Ireland (European Union).
- Payments: Link, by Stripe (it sells the subscription or license on our behalf).
- Sign-in: Google.
We don't sell your data, we don't share it for advertising, and we don't use it to train AI models.
Google user data and Limited Use
ClicGuard's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We only request your basic profile (email, account ID) to run your account. ClicGuard's use of the data it reads in your browser is limited to its single purpose: helping you avoid sending sensitive data to AI chats. It is not transferred to anyone, not used for advertising, and not read by humans.
How long we keep it
Your account data is kept while you use ClicGuard. If you delete your account, we erase it within 30 days, except billing records we must keep by law (invoices), which Link, Stripe and we keep for the period the law requires.
Your rights
You can ask to see, correct, export or delete your data at any time: email contact@clicauto.com and we'll answer within 30 days. If you're in the EU or UK, you can also complain to your data protection authority.
Children
ClicGuard is not meant for children under 16.
Changes
If we change this policy in a way that matters, we'll update the date above and tell users by email.