Privacy policy

1. Who we are

BG Assurance is operated by Litebyte media ltd. This policy covers our website, browser extensions, and connected account services. Litebyte media ltd is responsible for the personal information we process to operate these services.

If your organisation provides your account, it may also determine how work-related information is used. Its own privacy notices and instructions may apply alongside this policy.

2. Information processed by the extension

Draft scoring and automatic account sync

After you sign in, the extension reads the current draft in supported chat pages on ChatGPT, Claude, and Gemini where you have enabled it and granted website access. The draft score is calculated in your browser.

Signing in also enables automatic sync of prompt text and scores to your BG account. We receive draft text, assessment results, the supported site name, timestamps, and identifiers that associate the activity with your account and prompt. Up to three checkpoints are stored per prompt: the first draft, the latest intermediate draft, and the submitted draft. Intermediate updates may be sent more than once while you edit and replace the previous intermediate checkpoint.

These records power your private BG Analytics history. Pause a site in the extension popup or sign out to stop future scoring and sync. Local scoring and account sync are currently enabled together.

The extension does not read your earlier chat messages or model responses, collect your general browsing history, or automatically inspect files attached to the host chat. It does not send, change, or block a message on your behalf.

File reviews you request

When you choose Upload files in the BG panel, your selected files and current draft are sent to BG Assurance and OpenAI to assess sharing risks and relevance. The panel explains this before upload. Choosing to review a file is separate from attaching or sending it to ChatGPT, Claude, or Gemini.

Files and review results remain in the extension panel’s memory rather than persistent extension storage, and are discarded when the panel is destroyed. Server and AI-provider processing are separate from this local storage behavior; removing a file from the panel does not recall information already sent.

3. Website, account, and support information

• Account information: name, email address, account ID, account type, organisation or role where applicable, and authentication/session information. Credentials are processed to sign you in and recover your account.
• Website drafts and conversations: prompt text, supplied context, scores, AI responses, and conversation metadata. Website AI-assisted scoring can send a draft and relevant earlier draft/advice to BG and OpenAI while you edit, before you press Send. Completed conversations are saved to your account history.
• AI requests and files: prompts, context, and files you submit for a selected feature may be processed by the AI provider used for that feature. This includes file reviews, responses, and rule generation.
• Usage and billing: request counts, token usage, provider/model names, feature usage, costs, plan details, and payment or subscription references. Where website payments are available, Stripe collects payment details through its hosted checkout. BG does not provide its own card-entry form.
• Support: your email address and the messages, screenshots, or other information you choose to send us.
• Technical information: our hosting and service providers may process IP addresses, browser/device information, request details, and diagnostic logs to deliver and protect the service.

You control the content you provide. Avoid including sensitive personal information or confidential material unless it is necessary and you are authorised to share it with the services involved.

4. Why we process information

We use information to provide accounts, scoring, analytics, file review, AI features, billing, and support; to maintain security and investigate problems; and to meet applicable legal obligations.

Where UK or European data protection law applies, our grounds for processing are: performing our contract with you for the services you request; our legitimate interests in maintaining and securing the service and responding to enquiries; complying with legal obligations; and your consent where we request it. You may withdraw consent for future processing where consent is the applicable basis.

The extension is not used for advertising or cross-site advertising tracking. Our use of information received through the extension is limited to its disclosed functionality and related service operations, consistent with the Chrome Web Store User Data Policy, including its Limited Use requirements. We do not sell extension data or share it with data brokers.

Scores and recommendations are advisory. BG Assurance does not use them to make decisions about you that have legal or similarly significant effects.

5. Who receives information

Information is processed by Litebyte media ltd and service providers supporting the features you use:

• Supabase: account authentication and storage of account, conversation, prompt-activity, and usage records.
• OpenAI: file review and website AI-assisted scoring, plus applicable AI features.
• Other configured AI providers: Anthropic, Google Gemini, or DeepSeek may receive the prompts and context needed for a website request when that provider is selected or used by routing. The extension’s local draft score does not itself call these AI providers.
• Stripe: website subscription and payment processing where available, including the account and billing information needed to administer a purchase.
• Hosting and communications providers: delivery, security, diagnostics, and support communications.

These providers process information under their applicable terms and privacy arrangements. Their retention practices may differ from BG’s; local scoring or clearing browser data does not imply that an AI provider retains nothing.

We may also disclose information where required by law or necessary to protect the security of the service or the rights of its users. Access for support or administration is limited to the purpose of that access; account-level access controls do not mean that data is end-to-end encrypted.

Providers may process information in countries other than your own. Applicable international-transfer protections depend on the provider and service arrangement. Contact us for information about the locations and safeguards relevant to your data.

The websites where the extension runs independently process information under their own privacy policies. This policy covers BG Assurance’s processing.

6. Cookies, permissions, and browser storage

The website uses authentication cookies and browser storage for sessions, appearance, preferences, and working state. Website drafts and conversation interface state may be kept in browser session storage.

The extension stores site preferences, a limited account profile, and access/refresh tokens in your browser profile. A separately configured legacy connection may also store a revocable connection token. Prompt-sync queues are held in memory and are not saved as a persistent prompt queue in extension storage.

Website access permissions let the extension operate on supported chat sites. Access to the configured BG website is used for sign-in, account sync, usage information, and file reviews. You can manage these permissions in your browser’s extension settings.

7. How long information is kept

Saved prompt checkpoints and conversation history remain associated with your account to provide history and analytics. They are not automatically deleted when you pause a site, sign out, or uninstall the extension.

We determine retention by the purpose of each record: maintaining your active account and requested history, resolving support enquiries, investigating security incidents, and meeting billing, accounting, or other legal requirements. Retention also takes account of deletion requests and any records we must continue to keep for those requirements.

The extension’s file-review endpoint processes uploaded file contents in memory rather than saving a durable copy of the original file in BG’s application database. Usage records are recorded separately. AI providers may retain submitted information under their own service settings and terms.

To delete your BG account, open the extension while signed in, choose Delete account, type DELETE, and confirm. This deletes your BG profile, saved conversations, prompt checkpoints, usage records, and extension connections, and ends any BG subscription immediately. For help with deletion or requests about other saved records, contact contact@litebyte.co.uk. We may need to verify your identity and explain any information that must be retained. Deletion of local browser data is separate from deletion of server records and provider-held information.

8. Your choices and rights

• Extension activity: pause individual sites, sign out, revoke browser permissions, or uninstall to stop future extension processing.
• Website checkpoint history: the “Save prompt activity” setting controls website prompt checkpoints. It does not switch off extension sync, website AI processing, or saved conversation history.
• File sharing: file review happens when you select files for review. You can choose not to use it.
• Data requests: depending on the law that applies, you may request access, correction, deletion, restriction, or a portable copy of your personal information; object to processing; or withdraw consent where we rely on it.

Send requests to contact@litebyte.co.uk using your account email where possible. Do not include your password. We may ask for information needed to verify your identity.

You may complain to your local data protection authority. In the UK, you can contact the Information Commissioner’s Office (ICO). You can also contact us first so we can try to resolve your concern.

9. Security

Production requests use HTTPS. Account authentication and database access controls restrict access to stored information. Signing out in the extension clears its local account session. No system can guarantee absolute security; please keep your device and account credentials protected.

If you believe your BG account or data has been exposed, email contact@litebyte.co.uk with a description of the issue. Do not include passwords, tokens, or other people’s personal data.

10. Updates to this policy

We may update this policy as BG Assurance changes. The date at the top shows when it was last revised. Where a change requires additional notice or consent, we will provide it through the service or an appropriate account communication.

For help using BG Assurance, visit Support.