Privacy Policy

This Privacy Policy describes how NoeticGuard ("we", "us") handles information when you visit noeticguard.com, create a workspace, use our documentation, or interact with related marketing surfaces. Product surfaces (dashboard, API, browser extension, CLI) are covered where they send metadata to NoeticGuard; local masking does not upload raw prompts to NoeticGuard for redaction.

Who we are

NoeticGuard provides DevSecOps tooling that masks PII with deterministic tokens before text is sent to LLM APIs. Contact us at [email protected]. Where paid plans apply, billing and tax may be handled by our Merchant of Record.

Information we collect

• Waitlist and contact data: email address, optional name/company fields you submit, and the product tier you select.
• Product metadata: workspace/account identifiers, API key prefixes, policy and quota config, anonymized scan aggregates, masking counts/kinds, and optional masking-feedback notes (must not contain raw PII). We do not receive raw prompts for masking.
• Technical data: IP address, browser type, device signals, and approximate location derived from IP — used for security, rate limiting, and analytics.
• Usage analytics: aggregated page views and events via Google Analytics when enabled (cookie/consent rules of your region still apply).

How we use information

• Operate the waitlist and send product updates you request
• Respond to support and sales inquiries
• Secure our services (abuse prevention, rate limits)
• Measure marketing and documentation performance

Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on consent (waitlist signup, marketing email), legitimate interests (site security and product improvement), and/or contract performance when you use paid services under separate terms.

Sharing

We use processors such as hosting, email delivery, and analytics providers solely to run NoeticGuard. We do not sell personal information. We may disclose data if required by law or to protect rights and safety.

Retention

Waitlist and support records are kept until you ask us to delete them or they are no longer needed for the purposes above, unless a longer period is required by law. Anonymous CLI scan reports retain aggregate counts and heavily redacted teaser previews (high-risk kinds such as card / national ID are counts-style placeholders only) — never raw "value" fields.

Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection. Contact [email protected]. You may also lodge a complaint with your local supervisory authority.

International transfers

Data may be processed in the UK, EEA, or other countries where our providers operate. We use appropriate safeguards where required.

Children

Our marketing site and waitlist are not directed to children under 16. We do not knowingly collect their personal information on these surfaces.

Changes

We may update this policy and will revise the "Last updated" date above. Material changes may also be communicated by email or a site notice.

Contact

Privacy questions: [email protected]