BiVelio Shield — Privacy Policy

What data the extension handles, and where it stays

When you fully close your browser, the in-memory encryption key is discarded, the stored vault becomes undecryptable, and older conversations de-identify themselves back to opaque tokens. This is intentional.

What the free tier redacts locally

Before your prompt leaves the browser, the deterministic engine detects and replaces:

• Emails and phone numbers
• Credit-card numbers (Luhn-validated)
• IBANs and bank details (mod-97-validated)
• National IDs — Spanish DNI / NIE / CIF, US SSN, and more
• API keys & secrets — OpenAI, AWS, GitHub, Stripe, Slack, and others
• IP addresses

Honest scope: to keep precision high, structured identifiers are validated by their checksum, so a well-formed but checksum-invalid value can pass unless you enable “Redact on shape” (below). The free tier does not remove people’s names or other free-form personal text — there is no fixed pattern to match. Name and context redaction is the optional Pro / NLP tier, which is off unless you explicitly enable it.

The optional “Redact on shape” setting

You can turn on “Redact on shape” in the popup to also hide identifiers that look like an IBAN, card, or ID but fail their checksum (for example a mistyped number). It is off by default, still runs entirely locally, and we tell you plainly that it may over-redact things like order numbers, timestamps, or tracking codes. Your choice.

What the extension does NOT do

• It does not send your prompts, redacted values, tokens, or any usage data to BiVelio.
• It does not use trackers, cookies, analytics SDKs, or advertising.
• It does not read or act on any website other than the supported AI chat sites (see Permissions). It does not access your browsing history, other tabs, or your files.
• It does not sell or share personal data, and it never uses your data to determine creditworthiness or for lending.

Permissions, and why the extension needs them

storage

to keep the on/off toggle, the “Redact on shape” setting, the value-free counter, and the encrypted vault (key kept in memory, never on disk) described above.

Host access to chatgpt.com, chat.openai.com, claude.ai

to run the local redaction only on those AI chat sites. The extension has no access to any other site.

The AI providers you use

When you send a message, the extension forwards the redacted prompt to the AI provider you chose (OpenAI for ChatGPT, Anthropic for Claude). Your use of those services is governed by their privacy policies and terms — the extension does not change your relationship with them; it only reduces the sensitive data they receive.

Paid / NLP tier (if and when you opt in)

The free extension is fully local as described above. A future paid tier may offer name and free-form redaction powered by a hosted BiVelio gateway. If you choose to enable it, that tier will process the relevant text on BiVelio’s infrastructure under a separate, clearly-presented agreement. It is off unless you explicitly turn it on. This policy covers the free, local extension.

Your rights

Because the extension holds no personal data on our servers, there is generally nothing for us to access, export, or delete on your behalf. The local data (vault, settings, counter) is entirely under your control: you can clear it from the extension, or remove it completely by uninstalling the extension. Under the GDPR and similar laws you may still contact us with any question or request.

Children

BiVelio Shield is not directed at children under 16 and does not knowingly process their data.

Changes to this policy

We will update this page and its “Last updated” date when the extension’s data behavior changes. Material changes will be reflected here before they take effect in a released version.