AI Guardrail extension privacy notice
This notice explains what the Penaxtra AI Guardrail browser extension does and does not do with your data. It covers the extension only. Our general privacy policy and terms also apply.
Last updated 19 July 2026.
The short version
The extension scans your prompts and file attachments on your own device, in your browser. Your prompt text and file contents are never sent to Penaxtra, to any AI provider on our behalf, or to any third party. There is no account and no sign in.
What stays on your device
- Prompt and file content. Everything the extension scans is processed locally and never leaves your browser.
- Matched values. When a secret or a piece of personal data is found, only a masked preview is shown to you on screen. It is not stored and not transmitted.
- Your settings and local history. Your rules, per-site choices and the short recent-activity list are stored in your browser only.
What the extension sends to Penaxtra
To keep detection current and, for managed deployments, to give an administrator basic fleet visibility, the extension contacts Penaxtra for two purposes only:
- Rule updates. It downloads the detection rule library as signed data. This is a one way download of patterns; no prompt content is involved.
- Anonymous, optional usage counts. A random install identifier and basic device metadata (browser, operating system, extension version, language) are sent on a rare heartbeat. Aggregate counts of how often a rule fired, by site and action, are sent only if you turn telemetry on. Telemetry is off by default. These counts never include prompt content or matched values.
What we never collect
- Your prompts, messages or the contents of any file you scan.
- The actual secrets, credentials or personal data that were detected.
- Your browsing history or the pages you visit outside the send path on supported AI sites.
Permissions and why they are needed
- Access to AI sites. Required to read the prompt you are about to send and step in before it leaves the page. Scanning runs only on supported AI sites.
- Storage. To keep your settings and local activity on your device.
- Alarms. To schedule the rare rule and heartbeat checks.
- Scripting. To protect AI sites that an administrator adds, using code that ships inside the extension. The extension never loads or runs remote code.
Data location and retention
On device data stays in your browser until you clear it or remove the extension. The optional heartbeat and aggregate counts are held by Penaxtra to operate the service and are not sold or shared for advertising. For managed deployments, an administrator in your organisation can see enrolled installs and aggregate counts for their own fleet.
Your choices
- Turn protection on or off, or disable it per site, at any time.
- Leave telemetry off, or turn it on only if you want your administrator to see coverage.
- Remove the extension to delete all on device data.
No warranty
The extension provides best effort, local detection. It does not guarantee that every secret or piece of personal data will be caught, and you remain responsible for what you choose to share with any AI service. Full terms are in the extension settings and in our terms of service.
Contact
Questions about this notice or the extension: [email protected].