Corpilus Privacy Extension — Privacy Policy
Last updated: 2026-10-29
TL;DR — Corpilus Privacy checks what you type, paste and attach in ChatGPT, Claude and Gemini, and masks, removes or blocks personal and company data before it is sent. It is part of a Corpilus subscription and protects nothing until you sign in. The check of what you type normally runs on your computer; if the local check fails, the message may be checked in your workspace instead. Some things do go to the Corpilus workspace you signed in to — api.corpilus.com, or your company's own Corpilus server — and nowhere else: your sign-in; text you paste into an AI chat, checked for hidden instructions whenever protection is on (not when your company's code protection flags it as source code); an attachment, uploaded for a full check unless the check in your browser has already found data to stop the file (a file it cannot read is uploaded too; your company can keep file checks on the computer), with its name and result recorded in your company's audit log; the message itself only with the optional deep check; and reports of what was stopped, without the text — once your company has saved an extension policy, these also name you, the site and the attachment. If you turn on the optional link check for Gmail and Outlook on the web, the address of the link you click is checked there before it opens; the address is not stored. We do not sell your data, show ads or train models on it.
1. What the extension does
Corpilus Privacy is a Manifest V3 browser extension. In ChatGPT, Claude and Gemini — and in other AI chats your company adds — it checks the message you are about to send, text you paste and files you attach. It looks for personal identifiers (e-mail addresses, phone numbers, national IDs, IBANs, card numbers, tax IDs and similar) and company identifiers (such as contract numbers and customer IDs). Depending on your company's settings it replaces them with placeholders such as [EMAIL_ADDRESS_1], removes them or blocks the message. You see what was found and can undo a single match. When the AI answers, your original values can be shown in place of the placeholders — on your screen only. It also warns you when pasted text contains hidden instructions aimed at the AI, and when a page loads a tool that can record what you type or asks to read your clipboard. Optional features, off until you or your company turn them on: • Protect every site — the same in-browser check of text pasted into large text fields on any website, plus the page check. • Password and card alerts — a warning when a company password is typed into a site outside your company's list, when a page imitates a login page or a shop, or when a script from another site is attached to a page's card-number field. • Links in e-mail — a link you click inside a Gmail or Outlook web message is checked before it opens. • Deep check — your message is also checked by your Corpilus workspace, which can find names. • Names on this computer — a names model downloaded from your workspace, or a local AI model on your own computer, finds names without sending the text anywhere.
2. What data we collect
The extension does not keep your messages, and your Corpilus workspace does not store the text it checks. Stays in your browser: • The check of what you type. The full rule set is built into the extension and normally runs on your computer, so this check works offline. If the local check fails, the message may be checked in your workspace instead. • Text pasted on websites other than AI chats (with “Protect every site” on). It is never sent anywhere. • Showing your original values in the AI's answer. • For the password alert: a salted hash of your company password. Never sent; deleted when you sign out. Goes to the Corpilus workspace you signed in to — api.corpilus.com, or your company's own Corpilus server (a dedicated server or an NVIDIA DGX Spark) if you set its address in Settings — and nowhere else: • Signing in: your e-mail address and password, once. The access and refresh tokens it returns stay on this device and are sent only to that workspace. • Your company's detection settings (languages, name detection) and protection policy, read from your workspace at sign-in, the policy again every 15 minutes. The detection settings belong to the company: an administrator or manager can change them on the options page, which saves them for the whole company. • Text you paste into an AI chat, for the check for hidden instructions aimed at the AI. This runs whenever protection is on; there is no separate switch. The text is not sent when your company's code protection flags it as source code. If what you paste is not text (an image, for example), the text already in the message box is checked instead. The text is checked, not stored. • Attachments. A file is first read in your browser. Under the default setting (“On this computer, then your Corpilus workspace”), the file is uploaded to your workspace for a full check, including a malware check, unless that check has already found data to stop the file (a file it cannot read is uploaded too). If the file was stopped and you choose “Attach anyway”, it is uploaded for the malware check. The setting “On this computer” sends no file. The file itself is not kept, but its name and the result of the check are recorded in your company's audit log. • The message itself, only with the optional deep check switched on. It is checked, not stored. • Reports of what the guard did: when, where (paste, file, text …), what it did, how many items and rule names such as “IBAN / Bank account” — never the text or the value found, and never a page address or page title. Auditing is on by default once your company has saved an extension policy; it is off only when no policy has been saved or the company switches it off. With auditing on, the report also records who you are, the host name of the AI chat or site, the attachment's name and whether the check ran on your computer or in the workspace. With the password or card alerts on, the host name of the site that triggered the alert is always sent with the report; the workspace keeps it only when auditing is on. • If your company requires a Chrome permission you have not granted, a daily notice naming which one. • With the names model: its files are downloaded from your workspace. Nothing about your text is sent. Only if you turn on “Links in e-mail” (off by default): • When you click a link inside a message in Gmail or Outlook on the web, the address of that link (with Google and Outlook redirect wrappers removed and without its #fragment), which webmail you were in, and whether the visible link text points somewhere else go to your Corpilus workspace, which checks the link before it opens. Never the message, the sender or anything else on the page. If the check does not answer within about 1.5 seconds, the link opens as usual. • The workspace does not store the address. It keeps only the link's host name for 5 minutes per organisation, to answer the next click faster, and it may look the host name — never the full address — up in the threat-intelligence sources your company has configured. If your company uses its own URLhaus key, the host name may wait up to 24 hours in the queue for that lookup, and the answer is cached for up to 24 hours under a hash of the host name. • For a link it finds suspicious or dangerous, it records an event with the host name only (no address), the verdict, the reason codes and the webmail. These events are deleted automatically after 30 days, or after 365 days if an administrator has labelled one. A clean click leaves no record. • If a check fails to answer, the extension's local log keeps the host name, never the address. From your browser to the AI provider you chose: • Whatever you decide to send — typically your message with placeholders. That is governed by the AI provider's own privacy policy (OpenAI, Anthropic, Google). The extension does not route it through us. Only to your own computer: • With a local AI model for names switched on, the text being checked goes to that model at http://127.0.0.1 on your own computer and nowhere else.
3. What data we do NOT collect
• The text you type, for the ordinary check — it normally stays on your computer; only if the local check fails may the message be checked in your workspace. (Pasted text, attachments and the deep check are the cases listed in section 2.) • The values found — an e-mail address, an IBAN, a card number — never appear in a report; reports carry rule names and counts. • Text you paste on websites other than AI chats — never sent. • Page addresses and page titles of the sites you visit — never. The exceptions are host names, described in section 2: the host of the AI chat or site in an audited report, the site that triggered a password or card alert, and the link you click with “Links in e-mail” on. • In Gmail and Outlook: the message, the sender and the rest of the page — never. • Your company password — only a salted hash on this device, never sent. • Keystroke logs, mouse movements, screenshots, location — never.
4. Who decides, and the legal basis
The organisation that uses Corpilus (your Corpilus tenant) is the controller for this processing and decides its legal basis — usually its legitimate interest in protecting its data and its users (Article 6(1)(f) GDPR). Corpilus processes the data as its processor under Article 28 GDPR, on the terms of the organisation's agreement with Corpilus. If your organisation runs its own Corpilus server, the data stays on its infrastructure.
5. Data retention
• On this device: your settings, your sign-in tokens until you sign out, your company's policy, reports waiting to be sent (up to 500, removed once sent), the log of link checks that failed (host names only) and the salted password hash (deleted at sign-out). • Pasted text, deep-check text and the address of a clicked link: checked and not stored. The link's host name is cached for 5 minutes; with your company's own URLhaus key, the lookup answer is cached for up to 24 hours under a hash of the host name. • Attachments: the file is not stored. Its name and the result of the check are written to your company's signed audit log. The log is tamper-evident — entries cannot be edited or removed one by one — and it is kept for as long as your company's workspace exists. • Reports of what was stopped: kept in your company's workspace. They are not deleted automatically; your company decides how long it keeps them. • Link-check events: deleted automatically after 30 days, or after 365 days if an administrator has labelled one. • The detection rules are part of the extension itself and change only with a new version.
6. Third party data sharing
We do not sell, rent or share your data for marketing, and we do not use it to train AI models. Data leaves your browser only to: • The AI provider you use (OpenAI, Anthropic, Google) — only what you decide to send, directly from your browser. We do not control or proxy this. • Your Corpilus workspace, as described in section 2. The hosting provider that runs api.corpilus.com processes these requests on our behalf. • With the link check on: your workspace may look up the link's host name — never the full address — in the threat-intelligence sources your company configured, for example abuse.ch URLhaus with the company's own key.
7. Detection rules and code
All detection rules are built into the extension package. No code from outside the package runs in the extension. The checks your Corpilus workspace runs on what you send it are listed in section 2. The optional names model is downloaded from your workspace as data, and each file is checked against a fixed SHA-256. New rules arrive only with a new version through the Chrome Web Store.
8. Changes to this policy
If we change this policy in a way that materially affects what data is collected or how, we will tell account administrators by e-mail, where practicable at least 14 days in advance, and update the “Last updated” date above.
Permissions we request and why
We ask only for what the features need, and every permission below has one documented purpose. We do not record the pages you visit, track you across sites or show ads. The few cases where a host name or a link address leaves your browser are listed in section 2.
| Permission | Why we need it |
|---|---|
| storage | Keeps your settings, your sign-in to your Corpilus workspace, your company's protection policy and a small queue of reports waiting to be sent, on this device (chrome.storage). The queued reports are sent to your workspace as described in section 2. The detection settings belong to your company: an administrator or manager who changes them on the options page saves them for the whole company. |
| activeTab | Lets the popup see which tab you are looking at while the popup is open, so it can show whether protection is active there. No other tab is read. |
| scripting | Adds the extension's own scripts to sites you (or your company's policy) opted into: every site with “Protect every site” or the password / card alerts, Gmail and Outlook on the web with “Links in e-mail”, and extra AI chats your company lists. It never injects remote code. |
| alarms | Refreshes your company's protection policy from your workspace every 15 minutes, so a setting your company changes reaches the browser without a restart. |
| offscreen | Opens a hidden extension page that reads the text of a file you are about to attach (PDF, Word, Excel, PowerPoint, images with text recognition) inside your browser. |
| host: chatgpt.com, chat.openai.com | The AI chat the extension protects: reads the message you are about to send, text you paste and files you attach, and masks or blocks personal data before it is sent. |
| host: claude.ai | Same as above, for Claude. |
| host: gemini.google.com | Same as above, for Gemini. |
| host: api.corpilus.com | Your Corpilus workspace: sign-in, your company's policy, the hidden-instructions check on text pasted into an AI chat, the server check of attachments, the optional deep check, reports of what was stopped and, only if you turn it on, the link check. If your company runs its own Corpilus server, you grant that address instead. |
| optional host: *://*/* | Not granted at install and never requested on its own. Chrome asks you for a specific part only when a feature is turned on: Gmail and Outlook on the web (mail.google.com, outlook.office.com, outlook.office365.com, outlook.live.com) for “Links in e-mail”; every site for “Protect every site” or the password / card alerts; your company's own Corpilus server or extra AI chats; http://127.0.0.1 for an optional local AI model on your own computer. Each is given back when the feature is turned off. |
Contact
Data protection inquiries: info@corpilus.com For GDPR data subject requests (export, deletion, objection) email the same address. We respond within one month (Article 12(3) GDPR); where your organisation is the controller, we pass your request to it and help it answer.