Privacy Policy
Last Updated: September 2026 • Effective Date: September 2026
100% On-Device
All PII detection runs locally in your browser sandbox. No input text ever leaves your machine.
Zero Tracking
We do not track your browsing history, keystrokes, personal identities, or search activities.
No Data Selling
Halo AI does not sell, license, or monetize your information to data brokers or third parties.
1. Overview & Purpose
Halo AI ("we", "our", or "the Extension") provides real-time Data Loss Prevention (DLP) and Personally Identifiable Information (PII) sanitization across web input fields, including AI chat systems such as ChatGPT, Claude, and Gemini. This Privacy Policy discloses our strict data handling protocols and our fundamental architectural commitment to user privacy.
2. How Data is Processed (Client-Side Only)
Halo AI operates with a Zero-Transmission Architecture:
- Local Inference: When you type into a text field, DLP inspection (identifying emails, API keys, credentials, credit card checksums, and personal records) occurs directly within your browser's isolated execution context.
- No Remote Text Uploads: Your raw input text, prompt drafts, and redacted entities are never transmitted to external cloud servers, third-party APIs, or remote databases.
- No Logging of Sensitive Content: Redacted strings and placeholders are handled ephemerally in volatile memory while the tab is active.
3. Information Stored Locally
Halo AI uses standard browser extension storage (chrome.storage.local) strictly for:
- User Preferences: Toggles such as Auto-Protection on/off and rule configuration settings.
- Aggregate Counters: Numerical statistics (e.g., total items protected, number of emails masked) to power your local security dashboard.
This data resides exclusively on your local device and is wiped instantly if you uninstall the extension.
4. Browser Permissions Explained
During installation, Halo AI requests the following permissions:
- Host Permission (<all_urls>): Necessary so the extension can detect editable input areas across whatever web apps or AI tools you choose to use (e.g. ChatGPT, Claude, GitHub, Gmail) and display the inline protective shield.
- Storage: Required to preserve your local preference toggles and detection counts between browser sessions.
5. Third-Party Disclosures & Advertising
We do not incorporate third-party tracking scripts, analytics SDKs, advertising beacons, or data broker integrations. We do not sell, rent, or trade any user data under any circumstances.
6. User Control & Data Deletion
You retain complete control at all times. You can disable protection dynamically via the popup toggle or remove the extension at any time from your browser's extension manager, which immediately purges all local storage entries.
7. Contact & Inquiries
If you have questions regarding this Privacy Policy or Halo AI's security architecture, please contact us at: