Chado AI is a workplace data-loss-prevention tool. Employers deploy it on company devices to see which AI tools are used at work and to stop confidential data being pasted into them. It is not a consumer product and does nothing until an administrator enrolls it with an organization token.

**The employer that deploys Chado AI is the data controller.** They decide what is collected and how long it is kept, and they are responsible for telling their staff that monitoring is in place. Veganext operates the service on their behalf as a processor.

**What this add-on collects**

* *Prompt content on AI tools.* When a request is sent to a recognized AI service, its text is examined for sensitive data — credentials, API keys, and personal data such as email addresses or card numbers.
* *AI usage activity.* Which AI tool was used, at what time, and what the policy decided (allowed, warned, redacted, or blocked).
* *Technical and device data.* A one-way hashed machine identifier, the browser name, and the add-on version, so a device can be recognized across restarts and the fleet's versions are known.

Detection is scoped to AI services. On ordinary websites the add-on observes request shapes only in order to recognize AI APIs on unknown or white-labeled domains; it does not read page content, and typing is never captured on non-AI sites.

**What it does not collect:** browsing history unrelated to AI tools; passwords or password-manager content; personal email, messages, or files outside AI prompts; location, financial, or health data; anything at all before enrollment.

**Where the data goes.** Collected data is sent over an encrypted connection to the Chado AI backend and stored against the organization the enrollment token belongs to. By default that is the deployment operated by Veganext at chado.vegax.ai. Organizations that self-host point their devices at their own deployment, in which case the data never reaches Veganext. **We do not sell data, share it with third parties, or use it for advertising, credit decisions, or training AI models.**

**Retention.** Each organization chooses whether prompt text is stored in full, stored as a one-way hash, or discarded entirely. Discarding is the default: the detection result is recorded and the prompt text is dropped at ingestion.

**Your rights.** Because your employer controls this data, requests to access, correct, or delete it should go to them first. If you are unsure who to contact, write to privacy@veganext.com. Depending on where you live you may have rights under the GDPR, the CCPA, or similar laws.

Full policy: https://chado.vegax.ai/privacy