Legal

Privacy Policy

Last updated: 4 October 2026

Nesgate protects sensitive data from being pasted or uploaded into AI tools. It is built so that we and your organization never need to see what you type. This policy explains what the Nesgate browser extension, the Nesgate console (app.nesgate.com) and this website process, and why.

1. The short version

• Detection happens inside your browser. The text you type and the files you upload are checked on your device and are never sent to Nesgate.
• When the extension is connected to a console, it sends findings: the type of data found (for example “card number”), the action taken, the AI site, and a masked preview such as 4111 •••• •••• 1111.
• The extension only runs on AI apps (ChatGPT, Claude, Gemini, Copilot, DeepSeek, Perplexity, Grok, Mistral, Meta AI and apps your organization adds). It does not record your browsing history.
• We do not sell data, do not use it for advertising and do not use it to train AI models.

2. The browser extension

Without signing in, the extension does not check anything and sends nothing to us.

After you sign in or join an organization, the extension sends to your console:

• Your account email, or the email of your browser’s work profile when your organization deploys Nesgate.
• Browser details: browser and operating system name and version, extension version and a random installation ID.
• Findings: data type, detection rule, severity, action (masked, warned, blocked or allowed), AI site address without query string, time, and a masked preview.
• For attachments: file name, file type, size and a SHA-256 fingerprint of the original and the masked copy, never the file content.
• Daily counts of visits to AI apps on your organization’s list, so it can approve or block “shadow AI” tools.
• When the extension is removed from the browser: the browser opens a Nesgate page that tells your console which browser it was (its random ID and a one-time key, nothing else), so your organization’s admins know. On Firefox this happens only if you allowed “technical data” (asked at installation; you can change it in about:addons, under Nesgate, in Permissions).

The extension also downloads your organization’s policy (which data types to protect and how).

3. The console

For console accounts we store your email, a password hash (bcrypt, we cannot read your password), two-step verification secrets (encrypted) and passkey public keys. For security we log sign-ins and administrative actions with IP address, browser details and the approximate location (country and city) derived from the IP address. Organizations see the findings and audit log of their own members only; they are isolated from every other organization.

4. The website

We measure visits with Google Analytics (by Google LLC, USA), but only if you accept the cookie banner: until then no analytics cookie is set and no usage data is sent. The Google tag itself always loads when a page opens (so Google sees your IP address), then stays quiet until you accept. Once accepted, it sets cookies such as _ga (kept for up to two years) and sends Google your IP address, device and browser details, and which pages you visit, so we can see which content is useful. The contact forms are protected by Google reCAPTCHA, which sends Google your IP address and browser details to tell humans and bots apart. Fonts are loaded from Google Fonts, which receives your IP address when the page loads. You can change your mind anytime with the Cookie settings link in the page footer, or opt out entirely with the Google Analytics opt-out add-on.

5. Why we process data

• To provide the service you or your organization signed up for (contract).
• To keep accounts and the service secure, detect abuse and investigate incidents (legitimate interest and legal obligations).
• To see which pages on this website are useful, using Google Analytics as described in section 4 (legitimate interest).
• To send account emails: verification, password reset, invitations and security notices.
• To keep anonymous daily counts across all customers, for example “card numbers blocked on ChatGPT”, to improve detection and describe trends. These counts contain no account, person, device, custom rule name, company domain or content, and cannot be linked back to you.
• Only if an administrator turns on Help improve Nesgate (off by default, can be turned off at any time): studying how the product is used in that account to improve it (consent). Never the text or files that are checked, and never sold.

6. Organizations and employees

When an organization deploys Nesgate, the organization decides which data is protected and who can see findings; it is the controller of that data and Nesgate processes it on its behalf. Employees can ask their organization or us which findings are linked to them.

7. Where data is stored and who helps us

Data is stored in our PostgreSQL database on DigitalOcean servers and reaches them through Cloudflare. Our email provider delivers account emails. When you pay online, our payment partner processes the payment. Card numbers never reach Nesgate. These providers process data only on our instructions. Backups are encrypted with a key that is not stored on the servers, and an encrypted copy is kept in DigitalOcean Spaces in a separate location.

8. How long we keep data

• Findings: as long as your organization’s retention setting (30 days to 5 years, or until deleted), then deleted automatically, together with related activity (AI app usage, time on AI apps, case notes and delivery logs).
• Deleted accounts: access closes at once; all data is permanently erased 7 days later (so a mistaken deletion can be undone). We keep only what the law requires: invoices and payments (10 years), the record of which terms were accepted (5 years), and a record that the account was deleted, with how many records were erased (no content).
• Anonymous statistics: kept, because they contain no personal data.
• System and security logs: 180 days.
• Your organization’s audit log: as long as the organization exists, so its tamper-evident record stays verifiable.
• Encrypted backups: 14 days on the server, 35 days for the separate off-site copy.
• Invoices and payment records: 10 years, as required by Indonesian tax law.
• Records of which version of our terms and policies you accepted: as long as the account exists.
• Account data: until the account is deleted.

9. Your rights

Under Indonesia’s Personal Data Protection Law (UU PDP) and, where applicable, the GDPR, you can ask to access, correct, export or delete your personal data, or object to processing. Write to [email protected]. We answer within 3 × 24 hours as required by UU PDP for most requests.

10. Security

Encryption in transit (TLS 1.2+), secrets encrypted at rest, least-privilege database access, tamper-evident audit logs, two-step verification and passkeys for accounts, and no open server ports. All traffic passes through Cloudflare.

11. Changes

We will update this page and the date above when this policy changes, and notify console administrators of important changes by email.

12. Contact

Nesgate · [email protected]