Website document tool
Text you paste and files you select in the website document tool are processed inside your browser. The application does not send document contents, filenames, detected values, custom terms, protected output, or token mappings to a LegisComply application server.
The optional enhanced scan downloads model assets from Hugging Face and runtime assets from jsDelivr, which may use delivery networks. Those services receive ordinary download request metadata, such as IP address and requested asset. Document text is passed to a model running in a browser worker, not a hosted inference API. Downloaded assets may remain in the browser cache.
Reversible mappings are held in browser memory for the current tab. They are not saved to an account or application database and disappear when you refresh or close the page.
Chrome extension
The extension runs only on its listed AI websites. From version 0.4.1, prompt/file processing and conversation restoration remain off until you choose “Agree & enable protection” in the extension menu. Once enabled, it reads composer text, pasted text, selected PDF/DOCX/TXT files, supported screenshots and displayed conversation text to detect and replace sensitive values and restore known tokens. These inputs can include personal communications, identity, financial, health, authentication and other sensitive information. High-confidence findings may be protected automatically; context-dependent findings are presented for your review.
Prompt text, extracted file content, findings, and token mappings are processed locally and are not sent to a LegisComply server. By default, mappings are tab-only. Optional local recovery, introduced in version 0.4.0, stores passphrase-encrypted token/value pairs and unencrypted metadata (site origin, creation time and mapping type) on this device, not whole prompts or files. The encryption key is kept in trusted session storage. Unlock after browser restart or extension disable/update. Saved mappings expire after 7, 30 (default), or 90 days, checked on access. Recovery is separated by AI-site origin, not conversation or account. There is no cloud backup or passphrase reset.
The extension may restore known values in the conversation displayed in your browser. Text typed into the AI composer and values restored into the host page may be readable by that site’s scripts. Local processing is not a guarantee that original values never reach the AI provider. A restored value visible on the page is not evidence that the original value was included in the outbound request. The extension verifies the protected composer immediately before sending and blocks the send when it cannot verify that protected content remains in place.
The 0.5.19 extension release adds local text recognition for PNG, JPEG and WebP screenshots, using bundled reader files. Screenshot pixels, recognized text and redaction boxes remain in memory for the review; they are not sent to LegisComply or saved in recovery. You review suggested areas and may add manual boxes before attaching a new PNG with selected pixels permanently covered. Cancel or a failed scan does not silently attach the original. These image redactions cannot be restored. Supported screenshots always require review. Earlier releases and other image formats use the original-image sharing confirmation preference. Sharing an original image sends its unchanged contents to the AI provider. Check your installed version; store publication can lag the release.
Protected PDF, DOCX, and TXT attachments are text-only working copies. Images, layout, comments, annotations, signatures, macros, embedded files, and document metadata are not carried forward. Scanned PDFs require an extractable text layer.
AI-provider boundary
The website document tool does not automatically submit text to an AI provider. In the Chrome extension, you choose when to send a protected prompt or protected working copy through the supported AI site. The AI provider is outside the LegisComply privacy boundary; its terms, retention practices, and privacy notice govern the content you submit.
Automatic detection can miss context-specific or distinctive information. Review important prompts, uncertain findings, and the protected result before sending.
Website delivery
The screenshot redaction tool reads images in your browser using reader files downloaded from this website. Image pixels, recognized text, and redaction boxes stay in memory in the current tab and are not uploaded or saved by the tool. Download creates a new PNG on your device; Copy image writes that redacted PNG to your clipboard only when requested. The screenshot workspace is masked from optional session analytics.
Vercel and the network providers that deliver the LegisComply website may process ordinary technical request data, such as IP address, browser type, timestamps, and requested pages. This is separate from the document-processing workflow. The Chrome extension contains no analytics SDK and sends no extension usage or prompt data to LegisComply.
LegisComply’s use of user data adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used only for the disclosed protection and recovery features, not advertising, sale to data brokers, creditworthiness or lending. We do not receive or remotely inspect your prompts, files or mappings.
Website analytics choice
Optional website analytics remain off until you choose “Allow product analytics.” Your preference is saved in local browser storage and can be changed through “Analytics preferences” in the site footer.
After consent, the website may use Microsoft Clarity to understand aggregate product behavior. The working application is masked. Fixed event names may record steps such as opening a review, requesting a pilot, copying protected text, or answering an outcome question, but those events do not contain document text or detected values.
Microsoft may process technical and usage information under its own privacy terms. Continuing without analytics prevents Clarity from loading. This website analytics choice does not enable analytics in the Chrome extension.
Your choices
You can use the website document tool without creating an account. You can decline optional website analytics, clear site data through your browser, or close the tab to discard in-memory document data and mappings.
Extension users can disable or remove the extension at any time. The menu also lets you withdraw consent by turning protection off. This stops further page-content processing and locks recovery, but does not delete saved mappings or undo content already shared with the AI site. The consent version and agreement timestamp are stored locally; withdrawing consent removes that record. While protection is off, sends and uploads are not protected. The extension menu can lock recovery, change retention, or permanently delete saved mappings. Reload AI tabs to remove originals already displayed on the page. Refreshing discards unsaved mappings; uninstalling clears extension storage. Lost mappings cannot be reconstructed.
Contact
Questions about privacy or how LegisComply handles data can be sent to [email protected].