Data Guard Privacy Policy
- Data Guard hides sensitive details (names, phone numbers, CNICs, emails, addresses and similar) in what you send to ChatGPT, Claude and Gemini, so those services receive placeholders such as
PERSON_1instead of the real values. - To do that, your prompts, the files you upload and the AI's answers are sent to Data Guard's own server, operated by Jazz. They are sent nowhere else.
- The server keeps the link between placeholders and real values for a short time (one hour after last use), so the real values can be put back into the answers. Then it is deleted.
- No advertising, no analytics, no tracking, no selling or sharing of your data.
Who this policy is for
Data Guard is an internal tool for Jazz employees. It works only after you sign in with your Jazz Microsoft 365 account. This policy explains what the Data Guard Chrome extension does with your information. It covers the extension and the Data Guard server it talks to. It does not cover ChatGPT, Claude or Gemini themselves, which have their own privacy policies.
What the extension handles
The extension runs only on chatgpt.com, chat.openai.com, claude.ai and gemini.google.com. It does nothing on any other website and does not read your browsing history.
Prompts you send
When you send a prompt on one of those sites, the extension sends its text to the Data Guard server. The server replaces sensitive details with placeholders and returns the masked text. Only the masked text goes to the AI site.
Files you upload
When you attach a file on one of those sites, the extension sends it to the Data Guard server, which returns a masked copy. Only the masked copy is uploaded to the AI site; the original is never handed to it. If masking fails, nothing is uploaded. To confirm the AI site accepted the masked copy, the extension looks for its file name on the page; that check happens in your browser and sends nothing anywhere.
The AI's answers
When an answer contains placeholders, the extension sends that text to the Data Guard server, which returns it with the real values put back. The restored answer is shown on the page in your browser. It is not sent back to the AI site.
Your sign-in
You sign in with Microsoft, in Microsoft's own window, either from the extension or on the Data Guard console. The extension never sees your password. Microsoft returns a token that confirms who you are; the extension passes it once to the Data Guard server and does not keep it. The server then sets a sign-in cookie, which the extension cannot read. That cookie identifies you (by your work email address) to the Data Guard server, so that only you can restore what you masked. A sign-in lasts 8 hours.
Your choices in the extension
Your on/off choices (detect tables, restore answers automatically, show the on-page button) are saved with Chrome's storage. If you use Chrome sync, Chrome syncs these choices to your other devices. They contain no personal information.
Custom terms you type (extra words to always mask) and the link between each chat and its masking session are kept only in your browser's memory. They are never written to disk, never synced, and are erased when you close the browser.
Where your data goes
Prompts, files and answers travel only between your browser and the Data Guard server at data-guard.jazz.com.pk, over an encrypted HTTPS connection. The server runs on Jazz's own network and can be reached only from that network or its VPN. No other company or service receives your data from Data Guard.
The AI sites receive only the masked version of your prompts and files, exactly as they would receive anything you send them. What they do with it is governed by their own policies.
What is kept, and for how long
| What | Where | How long |
|---|---|---|
| Link between placeholders and real values (needed to restore answers) | Data Guard server | Deleted one hour after it was last used |
| Uploaded files and their masked copies | Data Guard server | Deleted when the masking job finishes. Anything left over is removed within 6 hours. |
| Activity record: your work email, the time, and how many items of each type were masked or restored | Data Guard server logs | Kept for security and troubleshooting. It never contains the real values, your prompts, your files or the answers. |
| Sign-in session | Data Guard server and a cookie in your browser | 8 hours, or until you sign out |
| Custom terms and chat-to-session links | Your browser's memory only | Until you close the browser |
| On/off choices | Chrome storage (synced if you use Chrome sync) | Until you change them or remove the extension |
The placeholder links are never backed up, so they cannot outlive their expiry.
Who can see your data
- You. Only the person who masked something can restore it. Other users of Data Guard, including other Jazz employees, cannot.
- Jazz administrators who run the Data Guard server. While your data is being processed, and while it is held for the times above, it is on a server they operate. Access is limited to the people responsible for running it.
- Nobody else. Data Guard does not sell, rent, share or transfer your data to third parties. It does not use it for advertising, for profiling, for credit decisions, or to train any AI model.
Things worth knowing
- Restored answers are shown on the AI site's page. That is how real values appear in place in the answer. Like anything shown on that page, the site's own scripts could read it. Data Guard never sends restored values back to the AI site.
- Your own prompt stays masked on screen, so you can see exactly what the AI received.
- Masking is automatic and may miss something. Data Guard is designed to mask too much rather than too little, but it cannot guarantee that every sensitive detail is caught. Follow Jazz's policies on what may be shared with AI services.
Why the extension asks for each permission
| Permission | Why it is needed |
|---|---|
| Access to chatgpt.com, chat.openai.com, claude.ai and gemini.google.com | To mask prompts and uploads before they are sent, and to restore the real values in answers |
| Access to data-guard.jazz.com.pk | To send text and files to the Data Guard server for masking and restoring |
| Storage | To remember your on/off choices, custom terms and which masking session belongs to which chat |
| Scripting | To start protecting AI-site tabs that were already open when the extension was installed or updated |
| Side panel | To show Data Guard beside the page |
| Identity | To open Microsoft's sign-in window without leaving the page you are on |
The extension contains all of its own code. It does not download or run code from anywhere else.
Chrome Web Store User Data Policy
The use of information received through this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide Data Guard's single purpose, masking sensitive data in what you send to AI chat services and restoring it in their answers.
Your choices
- Turn off automatic restoring, table detection or the on-page button at any time in the side panel.
- Sign out of the Data Guard console to end your sign-in session.
- Remove the extension at
chrome://extensions. This erases everything it stored in your browser. Anything still on the server expires on the schedule above.
Changes to this policy
If Data Guard starts handling data differently, this page will be updated and the effective date above will change.
Contact
Questions about this policy or about your data: syed.raza4@guest.jazz.com.pk.