Privacy Policy for ONYXx Prompt Assistant
Last updated: October 1, 2026
ONYXx is an enterprise AI security extension and gateway that helps organizations detect prompt injection, sensitive-data exposure, and policy violations on supported AI tools.
No prompt-body storage
ONYXx may transmit prompt text to the ONYXx service for live security analysis after registration consent, but prompt bodies are not stored in the ONYXx database, are not shown in the admin console, and are not sold or used for advertising.
Prompt Assistant writing help runs locally in the browser using built-in rules and, when supported, on-device AI. Prompt Assistant text is not sent to ONYXx for rewrite or grammar assistance, is not stored, and is not shown in the admin console.
Data ONYXx handles
| Category | Examples | Use | Retention |
|---|---|---|---|
| Registration information | Full name, work email address, OTP verification status, extension ID, and device identifier. | Verify authorized ONYXx users, prevent unauthorized extension use, and support account troubleshooting. | Stored while the organization uses ONYXx or until deletion is requested. |
| Prompt security metadata | Prompt hash, length, platform, page domain or URL for supported AI tools, risk score, action, finding types, policy reason, timestamps, and request ID. | Provide prompt-protection logs, policy enforcement, audit history, analytics, and troubleshooting. | Stored as metadata. Prompt bodies are not stored. |
| Prompt text | Text typed into supported AI prompt boxes or submitted through the ONYXx AI Gateway. | Analyze live security requests for prompt injection, sensitive-data exposure, and policy violations after registration consent. Prompt Assistant rewrite and grammar help runs locally in the browser. | Not retained in the database or admin console. Prompt Assistant text stays in the browser. |
| Extension activity and health logs | Extension version, browser/device metadata, connectivity status, security decision status, and error diagnostics. | Maintain security protections, measure reliability, and troubleshoot extension/backend issues. | Stored as operational logs without prompt bodies. |
| File and network security metadata | File type, size, download/upload decision, destination domain, network request metadata, and policy outcome. | Enforce organization security policies for downloads, uploads, and supported network activity. | Stored as security metadata. File contents are not stored by the prompt log system. |
How ONYXx uses data
- Verify extension registration and user authorization.
- Analyze live prompts for injection, sensitive data, malware, and policy risks after registration consent.
- Return allow, warn, redact, or block decisions to the user.
- Show admins security logs that contain metadata and findings, without prompt text.
- Maintain reliability, security, auditability, and abuse prevention.
Sharing and selling
- ONYXx does not sell user data.
- ONYXx does not use user data for advertising or cross-context behavioral profiling.
- ONYXx does not use prompts or documents to train public AI models.
- Data is shared only with service providers needed to operate ONYXx, when required by law, or for security and abuse prevention.
Chrome Web Store limited-use disclosure
ONYXx uses Chrome extension permissions and user data only to provide and improve its disclosed AI security, prompt-protection, local writing-assistance, registration, and operational reliability features. ONYXx does not transfer user data for advertising, sale, unrelated profiling, or uses unrelated to the extension's single purpose.
User choice and access
Users must agree to the in-extension disclosure before ONYXx protection is activated. Organization administrators can disable or uninstall the extension, and they can request deletion of organization data by contacting ONYXx support.
Extension privacy page: https://onyxx-public-privacy-policy.s3.ap-south-1.amazonaws.com/privacy-policy.html