CyberSentien

Browser extension — Privacy Policy

Last updated: 23 July 2026

Who we are. The CyberSentien extension is published by CyberSentien Pty Ltd (ACN 688 655 334), New South Wales, Australia (“CyberSentien”, “we”, “us”). Questions: sales@cybersentien.com.

What the extension is. A thin client for the CyberSentien compliance-assurance engine. It lets you ask compliance questions about text you select on a page, receive an evidence-grounded answer, capture selections as evidence, and continue in the CyberSentien cockpit. All compliance reasoning happens in the CyberSentien engine, not in the extension.

What we collect, and why

Page or selection content you act on. When you choose to “Ask” about or “Capture” a text selection, that text is sent to the CyberSentien engine; when you click “Analyse this page with Trust Lens”, the page’s visible text is sent for that one analysis; and if you use a scoped advisor link, any file you choose to upload is sent to your advisor’s engine. We do not read pages in the background — there is no content script. Only content you deliberately act on is transmitted.
Your email address. In the free (insight) lane the extension asks for your email once, with an on-screen consent line, before your first question. We use it to add you to CyberSentien updates and our onboarding funnel, and you can unsubscribe at any time. Operators also provide an email to sign in.
Sign-in credentials (operators only). If you sign in, your numeric PIN is sent to your CyberSentien engine to authenticate; we do not store the PIN. On success the engine returns a scoped access token, stored locally on your device and sent only to the engine host you configured, to authorise your requests.
Your settings. Your engine URL, tenant/surface preference and white-label branding are stored in Chrome’s synced storage. A logo you add for white-labelling is read on your device and stored as data; it is never uploaded to us.
Local session state. Captured selections and a client-side daily counter (how many free answers you’ve used today) are stored locally on your device.

What we do NOT collect

We do not collect your browsing history, we do not track your activity across pages, we do not collect location, health, financial or payment data, and we do not run analytics on the pages you visit. We do not use cookies to track you.

Where your data goes

The extension talks only to CyberSentien engine hosts (*.cybersentien.com) — or, if you are an operator who has pointed the extension at your own self-hosted CyberSentien engine, to that host you configured. We do not send your data to any other third party, and we never sell your data.

AI processing and data location — please read. Answers may be produced with an AI model running on CyberSentien’s compute. For the free public demo lane, that AI generation may run on GPU infrastructure located outside Australia (currently the United States); the in-product answer discloses when this happens. When the AI model is unavailable or busy, the engine returns a deterministic, evidence-based answer instead, clearly labelled as such. If you need Australian-only or client-owned processing, use an operator engine configured for a sovereign or client-owned GPU lane. Do not select and send information you are not authorised to process off-shore in the free lane.

Retention

Your email and any leads sit in our onboarding store until you ask us to remove them. Locally stored settings, captures and tokens remain on your device until you clear them (sign out, remove a capture, disconnect a client link, or uninstall the extension).

Your rights

Under the Australian Privacy Principles you may request access to, or correction of, the personal information we hold about you, and you may lodge a complaint. Contact sales@cybersentien.com.

Children

The extension is a professional compliance tool and is not directed at children.

Changes

We may update this policy; the “last updated” date will change and the current version will always be at this URL.