Privacy Policy

Last updated: August 2026

OpenSecureAI is built to be privacy-respecting by design. This page explains, in plain language, what data the site does and does not collect.

Tools run in your browser

The Prompt Injection Scanner and System Prompt Auditor run entirely client-side in your browser. Prompts you paste into these tools are analysed locally and are not sent to or stored on our servers. Saved scans in the Dashboard are stored only in your browser's local storage on your device.

Information you choose to submit

If you use the contact form we receive the name, email address, subject, and message you provide, solely to respond to you. If you subscribe to the newsletter we receive your email address to send you updates. We do not sell or share this information.

Public API

If you call the public scan API (/api/scan), the text you send is processed to return a result and is not persisted. We may apply rate limiting based on IP address to prevent abuse.

Analytics & hosting

The site is hosted on Vercel and uses Vercel's privacy-friendly, cookieless analytics to understand aggregate traffic (such as page views and country). This does not identify individual visitors. Standard server logs may temporarily record request metadata.

Contact

Questions about privacy? Reach us through the contact page.