Nova Guard and your data

Nova Guard reads what you send to AI tools (ChatGPT, Claude, Gemini, Copilot and others) before it goes. Sensitive data can become a stand-in, such as “[PERSON 1]”, and your real details come back in the answer and in files. Everything happens on your computer. Here is what it does with your data.

• Guard reads on your computer. Your messages and files are never sent to Nova.
• Your real details stay in memory, in Chrome, for the conversation. They are erased when Chrome closes or Guard is updated. Nothing is written to disk.
• Guard never clicks “Send” for you.
• Without a company code, nothing is sent to Nova.
• With a company code: only daily numbers, never a text, a file or a name.
• No ads, no audience tracking, no data sold.

Where Guard is active

Only on the sites of the AI tools on its list (ChatGPT, Claude, Gemini, Copilot, Mistral, Perplexity, DeepSeek, Grok, DeepL and others), and on novaforwork.com to link Guard to your account. It does nothing on any other site.

What Guard reads

The text you type or paste into the tool’s box, when you send it, and the files you drop there. It looks for sensitive data: keys and passwords, bank details, ID numbers, emails, phone numbers, names, and what your company listed. Depending on the rules, it lets it through, warns or blocks.

When the AI tool answers, Guard puts your real details back in place of the stand-ins on the page. When the tool gives you a file, Guard reads it on your computer to make a copy with your real details.

Guard helps you spot data, it does not see everything: it does not replace your care.

What Guard keeps

• Your settings and rules, in the extension’s storage, on your computer.
• The link between stand-ins and real details, in memory only, for each conversation. It is erased when Chrome closes or Guard is updated.
• Numbers: messages checked, warned, blocked, anonymized.

With a company code

If you link Guard to a company (or to your Nova account) with its code, Guard receives its rules from Nova and sends, at most every 30 minutes: the code, a random device ID, the kind of device (extension or app), the system (Mac, Windows), the Guard version, and daily numbers (messages checked, warned, blocked, anonymized, by category and by tool). Never a text, a file, a name or a real detail.

If a linked Guard is removed from Chrome, Chrome opens a Nova page with the code, the device ID and the language: the administrator sees that a device removed Guard, without knowing who.

Permissions requested

• Access to AI tool sites: read before sending and put your real details back in the answer.
• Downloads: make the copy with your real details of a file the AI tool gives you.
• Storage: keep your settings, and the stand-in table in memory.
• Context menu and shortcut: “Copy the selection anonymized”.
• Alarms: receive the company’s rules and send it the numbers.
• Offscreen document: read files and images (text in screenshots) on your computer.
• Native messaging: talk to the Nova Guard desktop app, if you installed it.
• Scripting and active tab: add Guard to AI tool tabs already open at install.

Your rights

What Guard keeps stays on your computer: you erase it by removing the extension. For numbers sent to a company, contact the company or us. Nova’s rules are on Nova’s privacy page. Any question: hello@novaforwork.com.