Security

Designed so we never need your prompts.

Free and Pro center on on-device processing. Enterprise adds optional organization-controlled telemetry — not silent scraping of chats for advertising.

Local by default

Masking, OCR (Pro), and custom rules run in Chrome on your machine.

Minimal Pro traffic

License activation sends a key and install id over HTTPS — not message bodies.

Enterprise under your policy

Telemetry endpoints and keys are configured by the customer via managed policy.

What stays on your device

Detection and masking for Free and Pro happen inside the extension. Your conversations with ChatGPT, Claude, Gemini, and other supported sites are not uploaded to OmniShield to perform that masking.

What Pro may send

When you activate Pro, the extension may send your license key and a random install identifier to our license API so we can confirm entitlement. That traffic is for licensing only.

Infrastructure

  • Marketing site and APIs served over HTTPS
  • Payments handled by a Merchant of Record partner (card data not stored by OmniShield)
  • License records stored in a managed database in production