Privacy Policy

1. How PromptShield Works

Detection and masking run locally in your browser. Your prompts and AI replies are never sent to PromptShield's servers.

PromptShield masks detected data before your prompt is sent to the AI provider. The AI website you are using can still see what you type into its text box before masking happens, and its own privacy policy applies to your use of that website.

2. What Data We Collect & Why

• Account & License Data: We store your email address, name, license key, and plan to manage your account. If you buy a paid plan, we also store your Stripe customer and subscription IDs.
• Activity Counts: To show your dashboard activity log, the extension reports the platform, the data category, the number of items masked, and the time (e.g., "1 Email Address masked on ChatGPT at 14:02 UTC"). The masked values themselves are never transmitted.
• Custom Terms: Custom confidential terms you add are stored on our servers and in your Chrome sync storage so they stay in sync between your account and your browsers. Please keep this in mind when choosing what to add.

3. Third-Party Services

We use these providers to run PromptShield:

• Stripe: Payment processing and billing management. We never store credit card numbers.
• Supabase: Account, license, and custom term storage.
• Vercel: Website and API hosting.

4. Browser Permissions

PromptShield requests only the minimal browser permissions required to detect inputs on AI chat platforms:

• storage: To persist your settings, toggle states, and custom terms.
• contextMenus: To add selected text as a custom term from the right-click menu.
• host_permissions: Limited to ChatGPT, Claude, Gemini, and promptshield.pro.

5. Contact Us

If you have questions regarding this Privacy Policy, reach out to us at contact@promptshield.pro.