Security & processing transparency
Last updated: November 2, 2026
1. Protect before sharing
Text detection and masking run in your browser. You review, correct and approve the version to copy or export. The Documents workflow does not automatically submit your original to ChatGPT, Claude, Gemini or Copilot for a conversation.
2. PDFs and images: external extraction
With your explicit consent, Google Gemini through Lovable AI receives the complete original file to transcribe visible text. Masking then runs in your browser. This is not local processing. Provider retention, location and contractual conditions still require validation for customer documents; do not submit data requiring an agreement that has not been established.
3. Formats, layers and export
File limit: 8 MB. Word and Excel are not supported. PDF and image metadata, comments, attachments and hidden layers are not comprehensively inspected. Approved export is a newly generated UTF-8 text file, not an original PDF or image covered with rectangles. It does not embed the original binary layers, but undetected information may remain in its text.
4. Content and temporary configuration
Text, session confidential terms and identity-restoration mappings remain in page memory; they are not included in exported evidence. Closing or removing the session releases application references, without guaranteeing physical erasure of device memory. Scan records retain metadata, not document text. Provider, backup and diagnostic retention requires independent validation.
5. Technical evidence, not certification
Exported evidence binds SHA-256 fingerprints of original bytes and approved protected bytes, engine version and review status. File comparison runs locally. The summary is unsigned and its timestamp comes from the browser: it does not certify identity, deletion or complete detection. Signing keys, trusted timestamping and immutable storage are not represented as operational.
6. Access, hosting and billing
Lovable Cloud provides authentication and company records. Authenticated scan operations enforce a shared server-side counter. Billing uses Stripe. Adversarial company-isolation, export-permission, backup and actual hosting-location validation is still required before enterprise security guarantees. We do not claim end-to-end encryption, guaranteed US/EU residency or ISO/SOC 2 certification.
7. Extension boundaries
Prompt Shield is an optional Chromium extension. Its effectiveness depends on supported website interfaces and browser permissions. It does not intercept every application or bypass. The file-analysis service now requires external-extraction consent and denies unreadable files; this does not establish extension control over every attachment.
8. Deletion and reporting
Account deletion is available in My account and refuses a personally owned renewing subscription to avoid charges after deletion. Company metadata may be retained; a comprehensive retention schedule still needs formalization. Report vulnerabilities to contact@cyberinnoshield.com without attaching confidential documents or secrets.