Legal
Browser Extension Privacy Policy
Effective {{EFFECTIVE}} · Last updated {{EFFECTIVE}}
Shield 360 is a product of ThinkFleet ("Company", "we", "us", "our").
The Shield 360 extension for Chrome and Edge applies your organization's AI usage policy in your browser. It works only after your organization connects it to its Shield 360 account, and it reports only to that account.
This page covers the extension. The Shield 360 Privacy Policy covers the rest of the service, including how long data is kept and your rights; where the two differ on the extension, this page applies.
1. What it does
- Allows, warns about or blocks AI tools such as ChatGPT, Claude, Gemini, Copilot and Perplexity, as your organization's policy says.
- On ChatGPT (chatgpt.com) and Claude (claude.ai), checks a prompt for sensitive data, such as API keys, passwords, payment card numbers and personal details, before it is sent, and then warns you, masks the data or blocks the prompt, as the policy says.
The check happens in your browser. The text of your prompt is examined on the page and is never sent to Shield 360 or anywhere else.
2. What it sends to your organization's Shield 360
- Who you are: the email address of the profile signed in to your browser.
- This installation: a random identifier the extension creates for itself, whether the browser is Chrome or Edge, the extension's version, and whether its checks are working on each supported site.
- AI tools: which AI tools you were warned about or blocked from, and what you chose (for example, continuing after a warning).
- Sensitive data in a prompt: the kind of data found (for example "payment card number"), a masked form of it (for example •••• 4242) and a one-way fingerprint that lets your organization see repeats without seeing the value, together with what happened: warned, masked, blocked, or sent anyway with the reason you gave. Sensitive data in a reason you give is masked before it is sent.
A prompt with nothing sensitive in it creates no record at all.
3. What it never sends
- The text of your prompts.
- The sensitive values themselves.
- Your browsing history outside the listed AI tools.
- Anything to any party other than your organization's Shield 360.
The extension has no permission to read your browsing history, cookies or tabs, and it runs on web pages only on the AI tools its policy covers. The permissions it asks for are listed on its Chrome Web Store page.
4. Who can see it
Your organization's Shield 360 administrators. Your organization decides whether the extension is used and controls the data it sends; requests to see, correct or delete it go to your organization. ThinkFleet processes the data on your organization's behalf, under its agreement with your organization. We do not sell it, use it for advertising, or use it to train AI models.
If your organization runs Shield 360 itself
Where your organization hosts Shield 360 in its own environment, the extension reports to that deployment and ThinkFleet receives nothing.
5. Your choices
Open the extension from the browser toolbar and choose Disconnect, or remove the extension. A browser your organization manages may not allow either.
6. Changes to this policy
We will update the date above when this policy changes, and change the extension's Chrome Web Store listing to match.
7. Contact
- Privacy: privacy@thinkfleet.ai
- Security: security@thinkfleet.ai