Privacy Policy

This policy explains what ClearGate Security ("ClearGate," "we," "us") collects, what we don't, and why. It covers the browser extension and cleargate.cc.

The short version

ClearGate exists to keep your data away from AI tools you don't control. We built the product to need as little of your data as possible ourselves, for the same reason. We do not read, store, or have access to the content of your prompts, ever — sanitization happens entirely on your own device.

What we never see or store

• The content of your prompts. Sanitization runs locally, inside the browser extension on your own device. Your actual prompt text — before or after sanitization — is never transmitted to ClearGate's servers.
• The "vault" mapping your real information to synthetic placeholders. This exists only in your local device's memory for the duration of a session and is never sent anywhere.
• Your conversations with ChatGPT, Gemini, Claude, or Copilot. We are not a party to those conversations. We only intercept the outbound prompt and inbound response on your own device to substitute values before they leave and after they return.

What we do collect, and why

To provide accounts and paid subscriptions, we collect and store:

• Your email address and a hashed password — used to log you in and identify your account. Passwords are stored only as salted, one-way hashes (scrypt); we cannot see or recover your actual password.
• Subscription and billing status — whether you're on the Free or Individual plan, and enough information to verify an active subscription. Actual payment processing (card details, billing address) is handled entirely by Stripe, our payment processor — we never receive or store your card information ourselves.
• Aggregate, non-content usage statistics — counts of prompts protected and entities replaced, including per-category counts (e.g. "3 names, 1 IP address"). When you're logged in, these counts sync to your account so your dashboard works across devices; you can turn syncing off in the extension popup at any time. This is a count, not content — we cannot see what any of those entities actually were.
• A session/license token — stored on your device, used to verify your plan status with our servers periodically.

Third parties we use

• Stripe — payment processing and subscription management. Governed by Stripe's own privacy policy.
• Vercel / Upstash — infrastructure hosting for our website and the account system described above.
• Resend — delivers account emails (password reset links). We send it your email address and nothing else; it never sees your prompts or protected data.

We do not sell, rent, or share your information with any other third party for advertising or marketing purposes.

Your choices

• You can cancel your subscription at any time through the account portal (powered by Stripe), with no additional steps required on our end.
• You can remove the extension at any time, which immediately stops any local processing.
• To request deletion of your account and associated data, contact us at ranveerjayaswal@gmail.com.

Children's privacy

ClearGate is not directed at children, and we do not knowingly collect information from anyone under 13.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we'll update this page and adjust the date above.

Contact

Questions about this policy: ranveerjayaswal@gmail.com

Back to ClearGate