Privacy-first workflow

Privacy &
Data Handling

SanitiseAI processes sensitive text in a focused workflow designed to minimise retention risk. Content is sanitised during request handling and returned as safe-to-share structured output.

Browser extension

What happens to your text?

One focused action, with clear boundaries around processing and storage.

01 / Processing

Sent securely to our API

The text you choose is sent over HTTPS when you click Sanitise, use the selected-text action, or enable automatic sanitisation for a supported form submission.

Text may include personal details or credentials. Processing happens on the server, not on your device.

02 / Storage

Preferences, not prompt history

The extension stores its automatic-mode preference in browser storage. It does not keep a prompt history or include analytics or advertising scripts.

The info control shows detected categories and counts so you can understand what changed.

Core technology

Practical sanitisation controls

Multi-layered masking

Pattern heuristics and entity-based detection work together to reduce sensitive value leakage.

  • Consistent tokenization
  • Format-preserving substitution

Entity-aware detection

Entity detection improves identification in unstructured notes, contracts, and support transcripts.

  • Context heuristics
  • Alias consistency checks

Consistency checks

Post-processing checks reduce duplicate placeholders and obvious formatting leaks in anonymised output.

  • Placeholder cleanup
  • Conservative fallbacks

Optional website analytics

With your permission, we load Google Analytics on public information pages to measure visits. It is not loaded on the sanitiser or contact form, or on URLs containing query strings or fragments. Our page-view events exclude uploaded files, source text, sanitised results and contact messages.

Google receives technical connection information when its tag loads and may set analytics cookies. Advertising storage, advertising personalisation and Google signals are disabled in our tag configuration. We remember your choice in this browser for up to 180 days. Rejecting analytics does not affect the tool. Change or withdraw your choice using Analytics preferences in the footer; withdrawing also reloads the page to unload the tag.

Google Privacy Policy

Secure Data Lifecycle

From ingestion to cleanup, privacy controls are applied across the full request lifecycle.

  1. Data ingestion

    Input arrives through encrypted transport and is handled in active request memory.

  2. In-memory masking

    Detection and anonymisation run in transient request scope without saving the raw document.

  3. Secure output

    Structured placeholders are returned so content remains useful while sensitive data stays protected.

  4. Instant destruction

    Temporary buffers are released after request completion as part of the normal processing lifecycle.

Data-handling controls

SanitiseAI supports safer handling of sensitive text through practical controls, documented behaviour, and reviewable operational safeguards.

HTTPS transportRate limitingControlled operations
  • Request-scoped processing
  • No raw text storage
  • Usage limits
  • Operational review

Your Rights (GDPR & CCPA)

Request privacy assistance

Access

Ask what contact or support records we hold about you.

Rectification

Ask us to correct contact details submitted through support or enquiry forms.

Erasure

Request deletion of contact or support records where operational and legal retention allows.

Portability

Request export of contact or support records in standard formats when applicable.

Ready to sanitise sensitive text?

Run SanitiseAI on real content, then contact us for rollout and policy guidance.