Privacy Policy

AIovert (“AIovert”, “we”) builds enterprise data-loss-prevention software for AI tools. This policy explains what we collect and how we use it. It applies to our website and the AIovert browser extension.

Our core privacy principle

Detection runs entirely in the employee's browser. The extension never stores, transmits, or logs the raw content a user types or pastes. It transmits only the classification of detected data (e.g. SSN, API_KEY), the AI tool domain, the action (paste/type/drop), a timestamp, a confidence level, and a one-way SHA-256 hash used solely for deduplication. We cannot reconstruct the original content from anything we receive.

Information we collect

• Account data: your work email, company name, and authentication credentials.
• Event metadata: the classifications, domain, action, timestamp, and hash described above. No raw content.
• Billing data: handled by our payment processor (Stripe); we do not store full card numbers.
• Usage and diagnostics: standard server logs (IP, user agent) for security and reliability.

How we use information

• To provide the dashboard, risk scoring, and alerting features you configure.
• To secure the service, prevent abuse, and meet legal obligations.
• To communicate about your account, billing, and material changes to the service.

Cookies

We keep cookies to a minimum. Strictly-necessary cookies are essential to deliver a service you have requested and are exempt from prior consent under the ePrivacy Directive (Art. 5(3)) and GDPR:

• Authentication & security: set by our authentication provider (Supabase) to keep you signed in and protect your session.
• Checkout: set by our payment processor (Stripe) during sign-up and billing.
• Preferences: a cookie that remembers your chosen language.

We also use optional analytics cookies (Google Analytics 4) to understand aggregate traffic and improve the site. These are not strictly necessary, so they load only after you opt in via our cookie banner. We use Google Consent Mode with analytics denied by default: if you don't accept, Google Analytics is not loaded and sets no cookies. If you accept, Google sets its _ga analytics cookies to distinguish visitors and sessions. We do not use advertising or cross-site tracking cookies.

You can change or withdraw your choice at any time via the “Cookie preferences” link in the site footer, or clear/block cookies in your browser settings (note that blocking the authentication cookie will prevent you from signing in).

Sharing

We do not sell personal data. We share data only with sub-processors that help us operate the service (e.g. cloud hosting, our database provider, our payment processor, and our email provider) under contractual confidentiality and security obligations.

Retention

Event metadata is retained for the period configured by your organization's administrator. Account data is retained while your account is active and deleted on request, subject to legal retention requirements.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise them, contact privacy@aiovert.com.

Contact

Questions about this policy? Email privacy@aiovert.com.