Updated 2 November 2026. This policy explains how AiXSafe File Guard processes local files on your device.
AiXSafe File Guard processes selected local files on your device to mask numeric values you configure before supported uploads to ChatGPT. It is an independent extension and is not affiliated with OpenAI.
Only files you select and numeric values you configure are processed for redaction. These may contain personally identifiable information, financial or payment information, health information, authentication information, personal communications, and text or images (website content). These categories describe content handled locally; they do not mean that AiXSafe receives that content. The extension does not read existing ChatGPT conversations or collect browsing history.
Revealing saved values uses a device-bound passkey through your platform authenticator, where supported. AiXSafe does not receive your Windows or macOS password, PIN, fingerprint or face data. Credential identifiers and cryptographic material needed for the local vault remain in extension-local storage. The temporary viewing session expires after five minutes; scanning continues. A local operational key remains available for background scanning, so the reveal lock is not protection against someone who can copy or control your browser profile.
Configured numbers are saved in Chrome extension local storage, restricted to trusted extension pages. They are not synced through Chrome Sync. Selected files and OCR results are processed in memory by packaged code and models, without an AiXSafe server or external OCR service. The extension uses file names locally to select a parser and name outputs with the original stem followed by _aixsafe, but does not include them in usage statistics. Closing the editor clears its working preview; downloaded outputs remain wherever you save them.
Local statistics store scan outcomes, source category, time and counts of masked regions or values. They contain no source file names, protected numbers, extracted text, chat content, browsing history, account IDs or device IDs. Totals remain until reset or uninstall; the recent-event list is limited to 100 records. You can pause recording, reset statistics and export a count-only JSON report from the editor. Export is a local download and is shared only if you choose to share it. Historical preview logs are removed on upgrade.
Source files, protected values, filenames and detected text are never sent to AiXSafe or analytics providers. Anonymous aggregate sharing is enabled by default and sends daily scan totals and extension version to AIxSafe. Detailed sharing is off by default and requires separate consent; it adds aggregate feature and outcome counts. Uncheck either option independently in Settings; turning sharing off clears pending reports. No persistent installation ID or browsing history is sent. Reports also include the reporting day and a schema version. The report ID is random and used only for retry deduplication. Counts do not identify unique people or installations. Our Cloudflare hosting provider receives network connection metadata, including the connection IP address; the collector hashes that address for rate limiting and does not store it in the usage-report database. Aggregate reports do not provide network anonymity. We use reports to measure and improve redaction reliability and feature operation, not for advertising, profiling, sale, creditworthiness or lending decisions. Raw reports older than 30 days are deleted during daily cleanup. Sanitized images are attached automatically after local processing. Documents require explicit review before attachment. Manual editors require review before attachment. ChatGPT handles any resulting attachment according to its own policies. No message is sent automatically by this extension. Downloads and exports are under your control.
Google separately provides Chrome Web Store installation and listing metrics to publishers under Google's policies. Those metrics are separate from local scan statistics. The extension contains no Google Analytics SDK. The only usage-report endpoint is https://aixsafe.com/api/usage.
Use Forget numbers to remove settings; Reset local statistics to delete counts; uninstall to remove extension-local data. OCR can miss text and does not detect every kind of personal information. Cloud imports, other devices and unsupported upload paths are outside its coverage. Review outputs before sharing.
The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
For support and inquiries, contact AiXSafe engineering or email [email protected].