Your data, in plain English

Who we are

Pidacta is run by Creative Crow Ltd, a company registered in England and Wales (company number 15080594), based in London N4 2HA. In this policy, “we” and “us” mean Creative Crow Ltd.

We are the controller for the personal data described here: analytics about how our website and extension are used, and the messages you send us. This policy covers the Pidacta website and the Pidacta browser extension.

What stays on your device

When you use Pidacta on a supported AI chat site, the extension reads the draft in that site’s message box to check it for personal information. In the side panel, it processes the text you paste and the PDFs you open. All of this happens locally in your browser.

None of that content is sent to us or to anyone else. The original draft and its redaction mapping are kept in your browser’s session storage so that Undo works, and are deleted when the tab closes or navigates, or when the browser session ends. Redacted files and alias maps are saved only when you choose to download them.

Analytics

We use PostHog, a product analytics service, to understand how people find and use Pidacta: which pages are visited, which features are used and where things go wrong. PostHog processes this data on our behalf and stores it in the EU.

What we collect

• On our website: the pages you visit, how you arrived (for example the referring site or campaign) and interactions such as button clicks.
• In the extension: product events such as installation, when a check runs, when you redact or undo, how many details were found by category (never the details themselves) and errors.
• Technical details: browser, operating system, device type, screen size, language, and an approximate location (country or city) derived from your IP address. We don’t store the IP address itself.
• A random identifier kept in your browser, so we can recognise returning visitors and group events into sessions.

What we never collect

Analytics never include the text in your drafts or the side panel, the contents or names of your files, the personal details Pidacta detects, redacted results or alias maps. Events describe what happened, not what you wrote. We don’t use session recording.

Why, and your choices

We rely on our legitimate interest in understanding and improving Pidacta. Where the law requires consent for analytics cookies or similar browser storage, we ask first, and you can change your mind at any time. You can block or clear our cookies in your browser, and you can ask us to delete analytics data linked to your browser or extension.

When you contact us or join the waitlist

If you use our contact form, we collect your name, email address, the type of request, its subject and your message. We use this to reply to you and to keep a record of our conversation.

If you join the waitlist, we collect your email address and, if you give one, your organisation. We use this only to let you know when Pidacta is available and about early access.

We store both in Airtable. For messages, we rely on our legitimate interest in answering you. For the waitlist, we rely on your consent, which you can withdraw at any time by asking us to remove you. Please don’t include personal information about other people in your message; we won’t need it to help.

Detection model download

On first use, the extension downloads an open-source detection model from Hugging Face (huggingface.co) and caches it in your browser. That request contains none of your text. Like any web request, it reveals your IP address and browser details to Hugging Face, whose own privacy policy applies to the download.

Who we share data with

We don’t sell or rent personal data, and we don’t share it with advertisers. We use a small number of service providers who process data on our behalf and only on our instructions:

• PostHog, for product analytics.
• Airtable, to store contact messages and the waitlist.
• Vercel, to host this website, which involves standard server logs.

Some of these providers process data outside the UK. When they do, we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU standard contractual clauses to protect it. We may also disclose information if the law requires it.

How long we keep data

• Analytics events: up to 12 months, then deleted.
• Contact messages: up to 2 years after our last conversation with you.
• Waitlist entries: until you ask to be removed, or 12 months after launch, whichever comes first.

Your rights

Under UK data protection law, you can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to how we use it, or transfer it to you or someone else. Where we rely on your consent, you can withdraw it at any time.

To make a request, email support@creativecrow.io or use our contact form. We’ll respond within one month. Because we don’t receive the content you redact, there is no copy of it for us to give you or delete.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office. We’d appreciate the chance to put things right first.

Children

Pidacta is made for people at work. It isn’t directed at children under 16, and we don’t knowingly collect their data.

Changes to this policy

We’ll update this page when our practices change and revise the date at the top. If a change is significant, we’ll make it clear on the website or in the extension before it takes effect.

Contact us

Questions about this policy or your data? Email support@creativecrow.io, use our contact page, or write to Creative Crow Ltd, London N4 2HA.