Browser extension privacy

The short version

• The extension checks prompts on your computer. The text of your prompts and the AI's answers is never sent to Saiela.
• It sends us metadata only: what kind of personal data it found, which AI tool, and what it did.
• Used without signing in, it sends nothing at all.
• It doesn't sell data, show ads or track the websites you visit.

What it reads

On the AI tools it protects, such as ChatGPT, Microsoft Copilot, Claude, Gemini and Perplexity, the extension reads what you type or paste before it's sent, so it can find personal data. When your organisation uses file cleaning, it also checks files you add to those tools, such as spreadsheets and PDFs. It runs only on those AI tools, listed below, and on your organisation's Saiela console, where it shows the "Connect this browser" link. It doesn't run on any other website.

What stays on your computer

• The text of your prompts and the AI's answers.
• The personal details it finds, and the placeholders it swaps them for, so it can put the real details back in the answer on your screen.
• Your organisation's rules, so it can apply them.

What it sends to Saiela

When you're signed in to an organisation's Saiela account, the extension sends:

• events, as metadata: which AI tool and type of account, what kinds of personal data were found (for example "2 names, 1 email address"), what Saiela did (swapped, warned or blocked), when, and your team, with you identified by a pseudonym;
• its status: that protection is on, the extension version and the browser.

It receives your organisation's settings and rules from Saiela. Data is sent over an encrypted connection and kept in the UK data region.

Using it without an account

Without signing in, the extension works as a free AI GDPR check: it warns you about risky AI tools and accounts and keeps a report on your device. Nothing leaves your computer. If you later sign in, your settings come with you.

Permissions

These are the permissions the extension asks your browser for, and why:

• Access to the AI tools it protects: ChatGPT (chatgpt.com and chat.openai.com), Microsoft Copilot (copilot.microsoft.com, copilot.cloud.microsoft and m365.cloud.microsoft), Claude (claude.ai), Gemini (gemini.google.com), Perplexity (perplexity.ai), DeepSeek (chat.deepseek.com), Le Chat (chat.mistral.ai), Grok (grok.com) and Meta AI (meta.ai). It checks what you type, paste or attach there before it's sent.
• Access to your organisation's Saiela console: asked for when you connect your browser, for that one address only, so the extension can fetch your organisation's rules and send activity records.
• Storage: keeps your organisation's settings, its rules and the placeholder mapping on your computer. Your IT team can also preset the organisation key and console address through managed settings, such as Microsoft Intune or the Google Admin console.
• Alarms: fetches your organisation's latest rules every 5 minutes, and sends activity records every minute.
• Scripting: adds the "Connect this browser" link to console tabs that were already open when the extension was installed.
• Offscreen: reads and checks files you add to an AI tool in a separate, hidden page of the extension, away from the AI site's own page.

It doesn't ask for your browsing history, your tabs on other sites, or any sign-in permission.

Who controls the data

If you use the extension at work, your employer is the controller of the events it records and decides how Saiela is set up. We process that data for them as their processor. Questions about it should go to your employer first. Our privacy notice covers the data we control ourselves, such as account and billing details.

Contact

SimpleKPI Ltd, 66 Paul Street, London EC2A 4NA. Privacy questions: use our contact form.