ClearPane by Ironpane privacy policy
Last updated: November 3, 2026
ClearPane is a browser extension your organization's admin deploys. It warns you before sensitive data such as card numbers, SSNs, API keys or your organization's own terms is entered into supported AI chat tools. Checks run on your device.
Checks run on your device. The text you type or paste is not sent to Ironpane or your organization.
At a glance
| Data | Sent off your device? | Who receives it | Kept for |
|---|---|---|---|
| Text you type or paste on AI tools | No. Checked on your device only | Nobody | Not stored. Replaced text stays on your device until you press Undo, close the card or leave the page |
| Web addresses and page content | No | Nobody | Not stored |
| Enrollment: this browser's public key and a signature (creates its device ID) | Once, at enrollment. On managed browsers, your admin's setting decides. On other installs, only after you agree. | Your organization's ClearPane console | Until your admin removes the device, or 30 days after your organization's account closes |
| Check-in: the policy version and a health status (ok or stale) | Yes. On managed browsers, your admin's setting decides. On other installs, only after you agree. | Your organization's ClearPane console | Until your admin removes the device, or 30 days after your organization's account closes |
| Daily counts of warnings, blocks and send-anyway choices per AI tool, plus daily tallies of extension errors and health checks. Error details stay on your device | Only if your organization turns them on, and after you agree on unmanaged installs | Your organization's console (shown as organization totals) | Up to 13 months |
| Admin name and work email | Yes (admins only) | Ironpane, for console access | While your organization's account is open |
| Admin console sign-in IP address | Yes (admins only) | Ironpane, for security | Up to 31 days |
| Company sign-in header (workspace or tenant IDs) | Only if your admin turns it on | The AI service or Microsoft sign-in page, not Ironpane | Not kept by ClearPane |
What stays on your device
On supported AI tools, text you type or paste is checked on your device. It is not sent to Ironpane or your organization. If your admin's policy replaces sensitive text with a label such as [KEY_1], the original stays only on your device, and only until you press Undo, close the card or leave the page. ClearPane is built so that nothing it sends to Ironpane or your organization's console contains page text, web addresses or email addresses. ClearPane keeps its data in your browser's local storage on this device, and your browser's sync feature doesn't copy it. Crash reporting in your browser is run by your browser maker, not ClearPane.
ClearPane also includes a small, fixed block list that stops ChatGPT's own analytics requests, which may include text you've typed but not sent. The list ships with the extension, changes only when a new version of the extension is released, and sends nothing to Ironpane.
What your organization's console receives
ClearPane sends three things to your organization's console. On browsers your organization manages, your admin turns these on. On other installs, they're sent only after you agree. None of them contains what you typed or pasted, or the sensitive data a check found.
- Enrollment (once): when your organization enrolls this browser, ClearPane sends the browser's public key and a signature. This creates a device ID for this browser.
- Check-ins: the policy version this browser is using and a health status of ok or stale.
- Daily counts (if your organization turns them on): for each supported AI tool, how many warnings, blocks and send-anyway choices happened per day (UTC), plus daily tallies of extension errors and health checks. These are numbers only, with no error messages, web addresses, page content or anything you typed. The error details themselves stay on your device.
- Device token: check-ins and counts are sent with a token created for this browser at enrollment. ClearPane never collects your own passwords or sign-in details.
Admins see daily counts as organization totals, plus each enrolled browser's health status. They can't use any of this to see what anyone typed, pasted or sent, and they don't see page text or web addresses.
Your choices
On browsers your organization manages through browser policy (with your organization's ID and a valid signed ClearPane policy), enrollment, check-ins, daily counts and any sign-in header your admin turned on stay on and are controlled by your admin, not by you individually. On other installs, you can decline or later withdraw consent in ClearPane's settings. That stops check-ins, counts and the sign-in header. Warnings, blocks and replacements keep working on your device either way.
Company sign-in header
If your admin turns it on, ClearPane adds your organization's workspace or tenant identifiers (for Microsoft, a tenant ID and a policy ID) to requests to supported AI tools and Microsoft sign-in pages. It goes to those services, not to Ironpane. ClearPane's role stops there: how each service uses it is set by your organization's agreement with that service.
Permissions ClearPane uses
- storage: saves your admin's signed policy, settings and on-device daily counters. Text being checked is never stored.
- alarms: schedules policy refresh, check-ins and, if your organization turns them on, the upload of daily usage counts.
- declarativeNetRequest (with host access on Chrome and Edge), analytics blocking: loads the fixed ChatGPT analytics block list described above.
- declarativeNetRequest, admin-only features (off by default): your admin can turn on the company sign-in header, or block signed-out ChatGPT use on chatgpt.com so staff use the company workspace. Neither runs unless your admin turns it on.
- Host access: limited to the AI chat and assistant sites listed in the extension, plus Microsoft sign-in pages. ClearPane reads nothing on any other site.
- Remote code: none. Policy updates are signed data, not code.
How we use data
ClearPane uses host access only to check text on your device, apply your admin's policy (warn, block, replace, sign-in header, signed-out ChatGPT block) and load the analytics block list on the listed AI and sign-in sites. We use data only to run ClearPane for your organization: keep policy current, show your admin health and counts, and secure the console. We don't sell data, use it for advertising, use it for credit or lending, or use it for purposes unrelated to ClearPane. Our use of information received from browser extension APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements.
Our role
Your organization controls ClearPane and its policy. For data the console receives, we act as your organization's processor: we handle it only on your organization's instructions. A data processing agreement is available on request.
Sharing and service providers
We share data only with the providers that host ClearPane's console and this website: Lovable and Cloudflare. Data may be processed in the United States. We don't currently serve customers in the EU or UK.
Your rights
If your employer deployed ClearPane, contact your IT admin first. You can also contact us to access, correct or delete data, and we will help your organization respond. Depending on where you live, such as California, the EU or the UK, you may have more rights under local law.
Children
ClearPane is a business product and is not directed to children under 13.
Changes
We'll post changes here with a new date, and tell admins about material changes. If data practices change, ClearPane asks for consent again on installs that need it.
Contact
Privacy questions or requests: use our contact page.
Product names belong to their owners. ClearPane by Ironpane is not affiliated with them.