Privacy Policy

Filtro is a browser extension that scans what your team types, pastes, and uploads on their own device, before it reaches an AI tool. The content being scanned never leaves the browser and is never sent to us. We only record that a rule was triggered — never what triggered it.

The following never leaves the device and is never sent to or stored by Filtro:

• The text of your prompts or messages
• Anything pasted into an AI tool
• The contents of files you upload
• The actual sensitive values Filtro detects (the SSN, card number, etc.)
• Your conversations with AI tools or their responses
• Your browsing history or activity on non-AI sites

To give an administrator a useful dashboard, we store a minimal event record when a rule triggers. Each record contains only:

• The time it happened
• Which AI tool was in use (e.g. “ChatGPT”)
• Which rule triggered and whether it warned or blocked
• A one-way hashed user identifier that cannot be reversed to a person
• The file type, if the event involved a file (never the filename or contents)

To run your account we also process standard information: your name and email for sign-in (via our authentication provider), your organization name, and — if you subscribe — billing details handled by our payment processor. We do not store card numbers.

We use account information to operate your account and the dashboard, to provide support, and to process payments. We use the minimal event records to show administrators aggregate patterns (for example, “12 blocks this week”). We do not sell your information, and we do not use your data to train any AI model.

We rely on a small number of vendors to run Filtro:

• Clerk — sign-in and organization management
• Stripe — subscription billing (we never see full card numbers)
• Railway — application hosting and database
• Vercel — hosting for this website and the dashboard

Each processes only the limited data needed for its function, under its own security and privacy commitments.

Minimal event records are retained according to your plan (7 days on Free, up to 1 year on Pro), after which they are deleted. Account information is kept while your account is active. You can ask us to delete your account and its data at any time.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. Because Filtro stores no content and only a hashed user identifier, the personal data we hold is limited by design. To exercise any right, email us and we will respond promptly.

Filtro is a workplace tool and is not directed to anyone under 16.

If we make material changes to this policy we will update the date above and, where appropriate, notify account administrators.

Questions about privacy? Email hello@getfiltro.com. Filtro is operated by Green Mountain Ventures LLC.