Privacy Policy

Privacy information for the SIM Web Layer browser extension and associated browser-governance service.

1. Scope

This Privacy Policy explains how AHALA SeC handles information in connection with the SIM Web Layer browser extension, Freemium service, and associated browser-governance functions.

2. Information handled by SIM Web Layer

• Authentication information. Extension-issued credentials, protected-session tokens, binding identifiers, installation identifiers, and related technical authentication state used to authenticate the protected browser installation.
• AI-surface and browsing metadata. The hostname or domain of supported or organization-approved AI services with which SIM Web Layer interacts. SIM Web Layer is not designed to collect a general-purpose history of unrelated browsing.
• User activity metadata. Governance-relevant interaction events such as AI-surface access, surface observation, submission events, timestamps, and operational event types. SIM Web Layer is not designed as a general-purpose keylogger.
• Derived governance data. Normalized governance signals, server decisions, policy actions, outcomes, evidence identifiers, and related metadata used to show and prove governed AI crossings.
• Website content and personal communications. Content displayed or entered on supported AI surfaces may be processed transiently inside the browser as necessary to derive governance signals. Raw prompt, chat, or page content is not retained or exported to AHALA SeC for raw-content storage.
• Network and location-related information. IP addresses may be processed automatically as part of normal HTTPS request delivery, security controls, and server logging. SIM Web Layer does not use IP addresses to determine precise physical location.
• Extension-local operational state. Configuration, protected-session status, Custom Surface snapshots, browser-permission state, runtime identifiers, and similar state required for the extension to function.
• Support and privacy requests. If you voluntarily submit the public Support or Data Subject Rights form, AHALA SeC processes the contact details and message you provide in order to answer and manage that request.

3. How information is used

Information is used only as necessary to operate, secure, support, and maintain the disclosed SIM Web Layer browser-governance functionality, including authentication, governed AI-surface observation, server-managed decisions, metadata-only evidence, reliability, troubleshooting, security, and response to support or privacy requests.

4. Raw AI content

AHALA SeC does not retain raw AI prompt or chat content through the SIM Web Layer governance-evidence path. Raw content needed for browser-side governance analysis is processed transiently and is not stored in extension storage or exported to AHALA SeC as raw prompt or chat content.

5. Sharing and disclosure

AHALA SeC does not sell user data and does not use or transfer user data for personalized advertising, retargeting, creditworthiness, lending, or purposes unrelated to SIM Web Layer's disclosed functionality. Derived governance metadata and evidence may be available to authorized administrators of the organization that owns the relevant SIM Web Layer tenant. Information may also be processed by service providers only as necessary to operate and secure the service, or disclosed where required by applicable law.

6. Custom AI Surfaces and browser permissions

Built-in AI surfaces are defined by the extension. For organization-approved Custom Surfaces, broad HTTPS access is not granted automatically. The approved hostname is published by SIM Web Layer server authority, and the extension requests browser permission for the exact approved site only through an explicit user-consent flow. Chrome permissions can be denied or revoked by the user.

7. Retention

• Raw prompt/chat content: not retained through the governance-evidence path.
• Authentication and session data: retained only as required to maintain, expire, or revoke protected sessions and credentials.
• Governance metadata and evidence: retained as necessary to provide governance, evidence, security, and operational functions, subject to service configuration and organizational requirements.
• Support and privacy requests: may be retained within AHALA SeC business communications and case-handling systems as necessary to respond to the request and meet applicable legal or operational obligations.
• Security and server logs: retained as necessary for reliability, security, abuse prevention, and troubleshooting.

8. Security

SIM Web Layer uses encrypted HTTPS transport for service communications. Authentication data is treated as sensitive operational data. Governance decision authority remains server-side. The Chrome extension does not load or execute remote JavaScript or WebAssembly code.

9. User and organization controls

Depending on access rights, users or authorized administrators may disable or uninstall the extension, revoke Chrome site permissions, retire Custom Surfaces, revoke protected installations, or use the public support channel for applicable privacy and data-subject requests.

10. Chrome Web Store Limited Use

SIM Web Layer's use of information received from Chrome APIs is limited to providing its disclosed browser-governance functionality and related security and operational purposes, consistent with applicable Chrome Web Store user-data requirements.

11. Changes

AHALA SeC may update this Privacy Policy when the extension, service, applicable requirements, or data-handling practices change. The date below will be updated when a revised policy is published.

12. Contact and Data Subject Rights

Privacy requests and product-support requests can be submitted through the public SIM Web Layer Support page. The channel separates Data Subject Rights requests from product support so they can be routed and handled appropriately.