Privacy Policy | SilentGuard

1. Introduction

At SilentGuard, we believe that your data belongs to you. Our security architecture is strictly designed to process sensitive information locally on your device whenever possible. We do not store your PII (Personally Identifiable Information) on our servers.

Data Controller

Web analytics Hub FZ LLC
Ras al Khaimah, UAE
Email: support@silentguard.ai

2. Data We Collect

We collect minimal data necessary to provide our services. Below is what we process, why, and on what legal basis:

Account Information

What: Name, email address, organization details, user role

Why: Authentication, access control, service delivery

Lawful Basis: Contract (GDPR Art. 6(1)(b)) — necessary to provide the Service

Usage Metrics (Metadata Only)

What: Detection counts, guardrail triggers, feature usage flags, policy enforcement actions — NOT prompt content, user identity, or sensitive data details

Why: Product improvement, security monitoring, capacity planning

Lawful Basis: Legitimate Interest (GDPR Art. 6(1)(f)) — improving detection accuracy and service security

Payment Data

What: Billing information (processed by Stripe). We do not store credit card details.

Why: Billing and payment processing

Lawful Basis: Contract + Legal Obligation (GDPR Art. 6(1)(b) & (c)) — billing and tax compliance

3. Data Retention

We keep your data only as long as necessary:

Account Data: For the duration of your subscription + 30 days after termination

Usage Metrics: 12 months (or per your organization's retention policy)

Payment Records: As required by law (typically 7 years for tax compliance)

Deleted Data: Securely purged within 30 days of deletion request

4. Local Processing & Security

Our unique "Edge-First" architecture means that:

✓Regex pattern matching runs 100% locally in your browser/extension.
✓Local LLM checks run on your device's hardware.
✓Sensitive text segments are redacted before leaving your network.

5. Your Rights

Under GDPR, CCPA, and other data protection laws, you have rights over your data:

Right to Access

Request a copy of all personal data we hold about you

Right to Rectification

Request correction of inaccurate or incomplete data

Right to Erasure ("Right to be Forgotten")

Request deletion of your data (subject to legal retention obligations)

Right to Data Portability

Request your data in a structured, machine-readable format

Right to Object

Object to processing based on legitimate interest (e.g., analytics)

How to Exercise Your Rights

Right to Lodge a Complaint

If you believe your rights have been violated, you have the right to lodge a complaint with your local data protection authority:

EU/EEA: Contact your national Data Protection Authority
UAE: UAE Data Protection Office (email: DPO@uaegovconnect.ae)
UK: Information Commissioner's Office (ICO)
California (US): California Privacy Protection Agency (CPPA)
Singapore: Personal Data Protection Commission (PDPC)

6. Third-Party Data Processors (Sub-processors)

We use trusted third-party processors to deliver our service. These companies are contractually bound to protect your data:

Processor	Purpose	Location	Agreement
Amazon Web Services (AWS)	Cloud infrastructure, hosting, database	Asia	DPA (SCC)
Stripe	Payment processing	UAE	DPA

For a complete list and details, see our Sub-processors page.

For any questions regarding this policy, please contact us at support@silentguard.ai