Privacy Policy

1. Personal data we process

Contact information. When you contact us, request a demo, or register for the Service, we collect details such as full name, business email, company, and — where an account is created — authentication details. We refer to this as "Contact Information".

Analytics information. When you use our website or Service, we record certain information about your interaction, including IP address, time and date of access, browser type, pages viewed, links clicked, and actions taken. We refer to this as "Analytics Information".

Content processed by the Service. To deliver the Service, we process content and data your organization or its users provide to the Service — such as text, files, and related metadata — in order to detect sensitive data and enforce your organizational policies. We refer to this as "Customer Content". ADRI processes Customer Content on behalf of the organization that deploys the Service (see "Controller and Processor" below).

2. Controller and processor

ADRI as Controller. For Contact Information, account data, Analytics Information, and marketing preferences, ADRI acts as the Data Controller and determines the purposes and means of processing.

ADRI as Processor. For Customer Content processed by the Service, ADRI acts solely as a Data Processor on behalf of the organization that owns the deployment. We process Customer Content only according to the organization's instructions and our agreement with it, and we do not use Customer Content for our own purposes or to train AI models. In on-premise deployments, Customer Content remains within the organization's own environment.

3. How we use personal data

• To respond to inquiries, provide demos, and manage our relationship with you.
• To provide, operate, secure, and support the Service.
• To maintain, develop, and improve the Service and user experience.
• Subject to your consent, to send you updates about new products, features, and offers. You can withdraw consent at any time via the "unsubscribe" link or by contacting us.
• To prevent fraud and abuse, resolve disputes, comply with law, and enforce our terms.

4. Who processes your data

We do not sell your personal information. We share it only with service providers that help us operate the Service, and only as necessary for them to provide their service to us:

• Hosting & infrastructure — Amazon Web Services (AWS), hosted in the Israel region (il-central-1), and Cloudflare.
• Analytics & marketing — Google (including Google Tag Manager / Analytics) to understand website usage and improve our Service.
• Legal & safety — competent authorities, legal advisors, or third parties where required by law, to handle abuse or violations, or to defend legal claims.
• Corporate changes — in the event of a merger, acquisition, or reorganization, information may be transferred as part of that transaction.

5. ADRI browser extension

Organizations that use the Service may deploy the ADRI Security browser extension to their employees' browsers, usually through their device-management tools. Its single purpose is to help the organization's security team discover and govern the AI tools used in the browser. The deploying organization is the Controller of this data and ADRI processes it on the organization's behalf, as described in section 2.

What the extension sends to the organization's ADRI console:

• The hostnames of AI tools visited (for example, chatgpt.com) and when, including sites the extension identifies as AI tools from how the page behaves — not full page addresses, and not other browsing history.
• Counts of prompts sent, text pasted, and files uploaded on AI tools, and whether pasted or uploaded content appeared to contain sensitive data (for example, "contains a secret") — never the content itself.
• The work email of the browser profile, the computer's user name, and the email of the account signed in to an AI tool, so activity can be attributed to the right employee.
• The names of installed browser extensions that are AI-powered.

What stays on the device. Page content, prompts, and pasted or uploaded content are analysed only within the browser (and, where installed, by the ADRI agent on the same device). They are not sent to ADRI or to anyone else. The extension does not log keystrokes, read passwords, or record activity on sites that are not AI tools.

What the extension receives. It downloads the organization's catalog of AI tools, its policy (which tools are allowed or blocked), and its branding, as data. It does not download or run remote code.

Use and sharing. Extension data is used only to provide this purpose to the deploying organization. It is not sold, not used for advertising, not used to train AI models, and not used to determine creditworthiness or for lending. The use of information received through browser and Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is retained and deleted according to the agreement with the deploying organization. Employees with questions about this data should contact their organization, or us at privacy@adrisecurity.ai.

6. Cookies and similar technologies

We use cookies that are strictly necessary to operate the website, together with statistics and marketing cookies (subject to applicable consent requirements) to understand usage and improve our Service. You can delete or disable cookies through your browser or device settings, though some parts of the site may not function properly without them.

7. Security and data retention

We implement measures designed to reduce the risks of loss, misuse, and unauthorized access to information; however, no method of transmission or storage is completely secure. We retain Contact Information, Analytics Information, and — where we act as Controller — related data for as long as needed to provide the Service and for legitimate business and legal purposes. Customer Content is retained and deleted in accordance with the agreement with the deploying organization.

8. International data transfers

Where we transfer personal data for processing outside your jurisdiction, we do so in accordance with applicable data protection laws and appropriate safeguards.

9. Your rights

Subject to applicable law — including the EU/UK GDPR and Israel's Protection of Privacy Law — you may have the right to access, rectify, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us at privacy@adrisecurity.ai. We may ask for reasonable evidence to verify your identity. You also have the right to lodge a complaint with your local supervisory authority.

Where we act as Processor of Customer Content, requests from end users should be directed to the organization that deploys the Service (the Controller); we will assist that organization as required.

10. Children's privacy

The Service is intended for business use and is not directed to children under the age of 16, and we do not knowingly collect personal data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, and we will make efforts to notify you of material changes.

12. Contact us

ADRI Security Ltd. — privacy@adrisecurity.ai · info@adrisecurity.ai