naosuu
Privacy Policy
Last updated: October 18, 2026
The short version: Naosuu checks your prompts and documents for sensitive information on your device, and never sends your prompt text, document contents or detected values to Naosuu's servers. When you send a prompt, it goes to the AI provider you are using (OpenAI for ChatGPT, Anthropic for Claude, Google for Gemini), with the values you chose to protect replaced by placeholders. Anything Naosuu did not detect, or that you left unprotected, is sent as you wrote it. Detection can miss sensitive information, so check each prompt and document before you send it. The personal data we collect for licensing and subscriptions is your email address and, when you subscribe through Stripe, your first and last name. We use this information to manage your subscription, send trial-related emails, and, where permitted, send marketing or promotional communications that may be relevant to you.
This policy covers the Naosuu Chrome extension, our license server (which the extension and our website use for trials, subscriptions and email preferences), and visits to our website, naosuu.com. Sections 1 to 4 describe the extension and your account; section 5 describes website visits.
What data Naosuu collects
1. Email address and subscriber name
- Why: To activate your free trial, validate your subscription, identify the subscribed customer, send transactional emails such as a reminder before your trial ends, and send newsletters, marketing or promotional materials, and other information that may be of interest to you.
- When: When you enter your email on naosuu.com/welcome to start a free trial, or when you subscribe through Stripe and Stripe provides your first name, last name, and email address to Naosuu.
- Where it goes: Your email address is sent to our license server (
naosuu-worker.naosuu.workers.dev, hosted on Cloudflare Workers) to create your trial record or Stripe checkout session, and to verify your subscription status. When you subscribe, your first name, last name, and email address are provided to Naosuu through Stripe. For trial confirmation and reminder emails, your address is also passed to Resend (see Third-party services below). Links in our trial-confirmation, reminder and unsubscribe emails place your email address (and, for confirmation and unsubscribe links, a one-time code or signature) after a "#" in the web address, a part that your browser does not send to our website. If your trial or subscription is inactive and you choose to reactivate from the extension, the link it opens currently includes your email address in the web address itself so that naosuu.com/welcome can prefill it; naosuu.com receives it as part of that page request. - Logging: We have not enabled persistent request logging for our license server (Cloudflare Workers Logs or log exports), and the error messages it produces do not include email addresses. Cloudflare processes the requests as our service provider.
- How long it's stored: Locally in
chrome.storage.localfor as long as the extension is installed. On our license server for as long as your account exists.
2. Trial record
- Why: To track the start and end date of your free trial so the extension can accurately reflect your access status.
- When: Created when you start a free trial on naosuu.com/welcome.
- What it contains: Your email address, trial start date, and trial end date.
- Where it goes: Stored in Cloudflare KV (key-value storage) on our Cloudflare Workers infrastructure.
- How long it's stored: Automatically deleted within 60 days after your trial starts, or immediately when you subscribe.
2a. Trial eligibility marker
- Why: Free trials are limited to one per email address in any 12-month period. This marker lets us enforce that rule and avoid sending unnecessary trial-confirmation emails.
- What it contains: A server-secret-keyed, pseudonymous digest derived from the normalized email address. The marker does not contain the email address itself.
- Where it goes: Stored in Cloudflare KV.
- How long it's stored: 12 months, the period the trial rule covers. It is created when you start a trial or subscribe and renewed while your trial record exists, so it is deleted automatically no later than 14 months after your trial starts, or 12 months after you subscribe.
3. License token
- Why: To authenticate your subscription without requiring a password on every check.
- When: Issued by our license server after successful trial activation or subscription.
- Where it goes: Stored locally in
chrome.storage.local. Transmitted with your email address to our license server to validate your access: at most once every 24 hours during normal use, and immediately when you activate the extension or re-check your access from the extension. - How long it's stored: Locally for as long as the extension is installed.
4. Professional contact information for B2B outreach
- What we may collect: Professional contact information such as names, job titles, business email addresses, firm or company names, and publicly available business contact details.
- Where it may come from: Publicly available sources, professional networking sites, business directories, law firm websites, company websites, or similar professional sources.
- Why: For B2B outreach and marketing related to Naosuu's browser extension and services.
- Opt out: You may opt out of receiving any, or all, marketing communications from us by following the unsubscribe link provided in any email we send, or by visiting naosuu.com/unsubscribe.
5. Website visits
- What: When you visit naosuu.com, Cloudflare, which hosts our website and provides its security and network services, automatically processes standard request information: your IP address, browser type, the page or file requested, the referring page, and the date and time. Cloudflare's security features (such as protection against denial-of-service attacks and malicious requests) evaluate each request.
- Why: To deliver our website, protect it against attacks and abuse, and fix errors. We do not use this information to identify, profile, or track you, and we do not combine it with other data.
- Our own data practices: We do not run analytics, advertising or session-recording tools on naosuu.com. We have not enabled Cloudflare Web Analytics or the export of request logs, and we have turned off Cloudflare's Network Error Logging setting for our domain. Cloudflare's hosting service still adds a reference to its Web Analytics script to our pages, which our website's security policy blocks so that it does not run, and may still ask your browser to report failed connections to Cloudflare (Network Error Logging), which Cloudflare uses to monitor its network. We do not download Cloudflare's request records; Cloudflare's security dashboard shows us a limited sample of requests its security features acted on.
- Cloudflare's processing: Cloudflare processes this information as our service provider under its data processing terms, and also uses it to secure and operate its own network as described in its privacy policy.
- How long it's stored: As set by Cloudflare under its data processing terms. We cannot configure this retention.
- Cookies and browser storage: Our website does not set cookies, and our pages do not store information in your browser. Cloudflare may set a strictly necessary security cookie (
cf_clearance) if it asks your browser to complete a security check. To protect our email addresses from spam harvesters, Cloudflare rewrites them on our pages and adds a small script, served from our own site, that displays them. - Other services: Our pages do not load fonts, scripts or images from other companies. Links to Stripe and the Chrome Web Store take you to those services, which handle your visit under their own privacy policies.
- Forms: When you start a trial, activate a subscription or unsubscribe on naosuu.com, the email address you enter is sent to our license server, as described in section 1.
6. Emails you send us
- What: Your name, email address, and anything you include in your message.
- Why: To answer your question or request.
- Where it goes: Our mailboxes are hosted by Google Workspace.
- How long it's stored: As long as needed to deal with your request and keep a record of our correspondence.
- Please note: Do not send us confidential client information, patient information, or other sensitive personal data by email.
Marketing communications
We send marketing and outreach emails using Gmail in Google Workspace, provided by Google. We may use your personal information, such as your email address, to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link provided in any email we send.
If you unsubscribe, we keep a record that your email address has opted out for as long as we send marketing email. US law (the CAN-SPAM Act) requires us to stop emailing you within 10 business days of your request and does not let an opt-out expire, so this record is how we make sure you are never contacted again, including if your address later reaches us from another source.
What Naosuu cannot guarantee
- Detection is not complete. Naosuu finds many, but not all, names, organizations, places and identifiers. Some can be missed or only partly replaced.
- Unchecked suggestions are sent as written. Lower-confidence detections appear under “Needs your review” and start unchecked. Naosuu replaces them only if you check them before applying.
- You decide what is sent. After you review and send, the prompt goes to the AI provider under that provider's own terms. The same applies when you choose “Send original”.
- Review before sending. Do not rely on Naosuu as your only safeguard for confidential or regulated information.
What data Naosuu does NOT collect
- Prompt text. Naosuu analyzes the text you type into ChatGPT, Claude, or Gemini on your device and never sends it to Naosuu's servers. When you send the prompt, it goes to that AI provider.
- Detected entities. Names, SSNs, emails, or any other sensitive values detected in your prompts, together with any aliases you confirm for them, are stored only in
chrome.storage.sessionand in memory, so Naosuu can use the same placeholders and recognise the same values in later prompts in that tab. They are cleared when the tab closes or the browser restarts, and are never transmitted. - Dismissed detections. When you remove a detection from the review panel, its value and type are kept only in
chrome.storage.sessionfor that tab, so the same suggestion is not offered again while the tab is open. They are cleared when the tab closes or the browser restarts, and are never transmitted. - Document contents. Files you upload for document protection are processed on your device and never sent to Naosuu's servers. The redacted text you choose to use goes to the AI provider with your prompt, including anything Naosuu did not detect.
- Vault entries. Custom patterns you save in the Naosuu vault are stored only in
chrome.storage.localon your device. - Local usage totals. Naosuu stores three aggregate counts in
chrome.storage.local: prompts analyzed, prompts protected, and sensitive items protected, so the extension can display your protection totals across prompts and browser sessions. It also stores small local settings, such as which tips or reminders it has already shown you. These counters and settings contain no prompt text, detected values, categories, websites, or activity history; they are never transmitted to Naosuu or any third party. They remain on the device until the extension's locally stored data is cleared or the extension is uninstalled. - Browsing history. Naosuu does not read, record, or transmit any information about which pages you visit.
Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Cloudflare Workers | License validation, trial management, and Stripe checkout creation | Email address, subscriber name for paid subscriptions, license token, trial dates |
| Cloudflare KV | Storage of free trial records, pseudonymous trial-eligibility markers, and unsubscribe records | Email address, trial start and end dates; server-keyed email digest; email addresses that have unsubscribed |
| Stripe | Subscription payment processing | First name, last name, email address, and subscription status. Payment card details are handled directly by Stripe — Naosuu does not receive or store payment card details |
| Google Workspace (Gmail) | Hosting our email, and sending marketing and B2B outreach emails | Name, email address, and the content of emails we exchange with you |
| Cloudflare Pages and DNS | Hosting naosuu.com and our domain name service | Technical request information (IP address, browser type, pages requested, referring page, date and time); for the license server, the email address and data listed above |
| Resend | Sending trial-confirmation and trial-reminder emails | Email address |
Apart from the redacted prompts and documents that you choose to submit to ChatGPT, Claude, or Gemini, which those services handle under their own terms, no other third parties receive data from the Naosuu extension.
International transfers
Naosuu is a United States company, and our service providers (Cloudflare, Google, Stripe, and Resend) may process personal information in the United States and other countries. Where personal information from the European Economic Area, the United Kingdom, or Switzerland is transferred to the United States, we rely on our providers' certification under the EU-US Data Privacy Framework (and its UK and Swiss extensions) where available, and on the European Commission's Standard Contractual Clauses included in their data processing terms. To ask for a copy of the relevant safeguards, contact [email protected].
Data security
- All communication with our license server and our website uses HTTPS.
- License tokens are stored in
chrome.storage.local, scoped to the extension and not accessible to websites. - Session maps (temporary entity-to-placeholder mappings) are stored in
chrome.storage.session, scoped to the browser session, and cleared when the associated tab closes or the browser restarts. - We do not store payment card numbers or sensitive financial data.
Your rights
You can remove all locally stored data at any time by uninstalling the extension. To request deletion of your account data from our servers, contact [email protected].
Changes to this policy
If this policy changes materially, the updated version will be published at this URL with a new "Last updated" date.
Contact
Naosuu LLC
418 Broadway, Ste N
Albany, NY 12207
[email protected]