← Back to GC Protect

Privacy Policy

Last updated: July 2025 · Gratia Core LLC

What GC Protect does

GC Protect is a browser extension that detects sensitive information in text before it is submitted to AI platforms including ChatGPT, Claude, Gemini, and Microsoft Copilot. It replaces detected sensitive data with anonymous tokens and logs metadata about each protection event.

What data we collect

We do NOT collect, transmit, or store the original sensitive content of your prompts. GC Protect processes all text locally in your browser. The original content of your prompts never leaves your device or is sent to any Gratia Core server.

The audit log stored locally in your browser contains: date and time of each protection event, which AI platform was used, the risk score assigned, which categories of sensitive data were detected (e.g. "SSN", "Email" — not the actual values), and the action taken (protected, cancelled, or sent unprotected). This data is stored only on your device using Chrome's local storage API.

If you choose to export the audit log, it is downloaded directly to your device. Gratia Core does not receive a copy.

Subscription and payment data

Payments are processed by Stripe. When you subscribe, Stripe collects your payment information. Gratia Core receives confirmation of your subscription status but does not store your full card details. Stripe's privacy policy governs how your payment data is handled.

Permissions used

storage — to save your audit log locally on your device.
activeTab — to detect which AI platform you are currently using.
scripting — to inject the protection layer into supported AI websites.
tabs — to update the extension badge when switching between tabs.
host_permissions — limited to chat.openai.com, claude.ai, gemini.google.com, copilot.microsoft.com, and perplexity.ai only.

Third party services

GC Protect does not send your prompt content to any third party service. The extension operates entirely locally in your browser.

Children's privacy

GC Protect is intended for business use and is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

We may update this policy as the product evolves. We will update the "Last updated" date at the top of this page when changes are made.

Contact

Questions? Email us at privacy@gratiacore.com