Eclipsery — Privacy Policy

Last updated: 12 July 2026

This Privacy Policy describes how Artificialy SA, Via Ferruccio Pelli 13, 6900 Lugano, Switzerland ("Artificialy", "we", "us"), processes personal data in connection with the Eclipsery browser extension and the related Eclipsery services (the web application at app.eclipsery.ch and the anonymization API at api.eclipsery.ch, together the "Service").

Artificialy SA is the data controller for the processing described in this policy. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

Eclipsery is not intended to replace or override the client organization's own internal policies on privacy, IT security, or data protection, and the client organization remains solely responsible for defining, communicating, and enforcing those policies. We assume no liability for the failure of users or employees to comply with internal policies restricting the transmission of sensitive or confidential information to third-party services, regardless of whether the Service is used.

For the processing of personal data relating to visits to our corporate website (www.artificialy.com), please refer to our separate Website Privacy & Cookie Policy.

1. What Eclipsery does

Eclipsery is a privacy tool. Its single purpose is to detect and anonymize personally identifiable information (PII) in the messages you write on supported AI chat platforms (such as ChatGPT, Claude, Gemini, Copilot, Perplexity, Grok, Meta AI and DeepSeek) before those messages are sent to the AI provider, and to restore the original values in the responses displayed to you.

To provide this function, the extension must — by design — process the text of your messages, including any personal data it contains. This policy explains exactly what happens to that data.

2. Personal Data we process

a) Account and authentication data

When you create an account and sign in to Eclipsery, we process your name, email address, and authentication data (login credentials and session tokens managed through our identity provider). We do not store your password in plain text.

b) Message content submitted for anonymization

When anonymization is enabled and you submit a message on a supported AI chat platform, the extension sends the text of that message to our anonymization API (api.eclipsery.ch) over an encrypted connection (TLS). Our service detects entities such as names, email addresses, phone numbers, locations, dates, financial identifiers (e.g. IBANs, amounts) and other identifiers, and returns an anonymized version of the text in which these entities are replaced with placeholders.

Document anonymization (for file formats such as DOCX and PDF) is a planned feature and is not yet active in the current version of the Service. The following paragraph describes how it is intended to work once released; until then, no documents or files are processed or transmitted to us.

Once available, documents you attach to a supported AI chat in supported formats (planned: DOCX and PDF) will be processed in the same way and for the same sole purpose: the file is sent to our anonymization API, which extracts its text content, anonymizes it and returns the anonymized version. Documents will be processed transiently: they are not stored, cached or logged on our servers — each time a file is submitted, it is processed anew, even if it is identical to one submitted before. Attachments in unsupported formats are not processed or transmitted to us, and the extension warns you that the document will not be anonymized.

Because your messages and documents may contain any kind of information, the data processed under this section may include personal data of you or of third parties you mention, including — depending on the content — financial information or other sensitive content.

The mapping between placeholders and original values, which is used to de-anonymize AI responses, is returned to your browser by the API and handled exclusively on the client side. It exists only for the duration of the individual request: it is not saved, logged or tracked in any way on our servers, and it is discarded in your browser when you refresh or leave the page.

c) Service and usage logs

For security, billing and service improvement purposes, we log metadata about API calls (such as user identifier, timestamp, provider/platform, request size and outcome). Logs contain metadata only: they never include the content of your messages or documents, nor the entities detected in them.

d) Local settings

Your extension preferences (anonymization on/off, de-anonymization on/off, status indicator position) are stored locally in your browser and are not transmitted to us.

3. What we do NOT do

  • We do not sell or rent your personal data to anyone.
  • We do not use your message content for advertising or profiling.
  • We do not transfer your personal data to third parties, except for the technical service providers listed in Section 6.
  • We do not use your personal data to determine creditworthiness or for lending purposes.
  • We do not track your browsing history. The extension only operates on the supported AI chat platforms listed above.
  • The extension processes the text of your messages and, where document anonymization is available, documents you attach to the chat in supported formats (see Section 2b). Attachments in unsupported formats are not processed or transmitted to us; the extension informs you that they will not be anonymized.

4. Purposes and legal bases

We process your personal data to:

  • Provide the Service (anonymization and de-anonymization of your messages): performance of a contract (Art. 6(1)(b) GDPR).
  • Authenticate you and secure your account: performance of a contract and our legitimate interest in the security of the Service (Art. 6(1)(f) GDPR).
  • Operate, maintain and improve the Service, including troubleshooting and abuse prevention: our legitimate interest in running a reliable and secure service (Art. 6(1)(f) GDPR).
  • Comply with legal obligations, where applicable (Art. 6(1)(c) GDPR).

5. Where your personal data is processed

The Eclipsery Service runs on servers provided by a third-party hosting provider located in Switzerland and managed exclusively by Artificialy: the hosting provider supplies the infrastructure, but does not access, administer or process the personal data handled by the Service. The original message and document content is processed on this infrastructure and is not sent to third-party AI or analytics services by Eclipsery. (Note that the anonymized version of your message is subsequently sent to the AI chat platform you are using — that processing is governed by the privacy policy of the respective AI provider.)

6. Service providers (sub-processors)

We use a limited number of technical service providers to operate the Service — primarily our hosting provider, Tinext Cloud SA, which supplies the server infrastructure on which the Service runs. The Service itself is managed exclusively by Artificialy. These providers act on our behalf, under contract, and only as necessary to provide their services.

7. Retention

  • Account data: retained for as long as your account is active, and deleted or anonymized within 60 days after account closure.
  • Message and document content submitted for anonymization: processed transiently and not stored after the anonymized response is returned. We keep no copy of, and no cache over, the content you submit.
  • Service logs: retained for 60 days for security and billing purposes, then deleted or anonymized.

8. Your rights

Subject to applicable law (FADP/GDPR), you have the right to:

  • access the personal data we hold about you;
  • obtain rectification of inaccurate personal data;
  • obtain erasure of your personal data;
  • object to or restrict certain processing;
  • receive your personal data in a portable format;
  • withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact us at eclipsery.support@artificialy.com. You also have the right to lodge a complaint with the competent supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

9. Security

We apply appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), authenticated API access, access controls, and network isolation of the processing infrastructure. No system can guarantee absolute security, but we design the Service so that the exposure of your personal data is minimized — that is the very reason Eclipsery exists.

Although Eclipsery is designed to reduce the disclosure of personal data to AI providers, no anonymization technology can reasonably guarantee that every item of personal data or confidential information will always be detected or anonymized. Users remain responsible for reviewing the information they submit and for complying with applicable laws and internal policies.

10. Children

The Service is intended for professional use and is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The current version is always available at this page; material changes will be communicated through the Service or by email.

12. Contact

Artificialy SA
Via Ferruccio Pelli 13
6900 Lugano, Switzerland
Email: eclipsery.support@artificialy.com