From e4a75a3740a75149dd6368166d7ef9efb19439d4 Mon Sep 17 00:00:00 2001
From: sirpiglr <49359077-sirpiglr@users.noreply.replit.com>
Date: Mon, 15 Dec 2025 00:17:48 +0000
Subject: [PATCH] Update privacy policy, terms of service, and support pages
with new sections and details
Enhances the Privacy Policy with Chrome Web Store Limited Use Disclosure, Data Controller, and Data Retention Schedule sections. Updates the Terms of Service with detailed disclaimers for browser extension use. Adds a Security & Abuse Reporting section to the Support page.
Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 9203795e-937a-4306-b81d-b4d5c78c240e
Replit-Commit-Checkpoint-Type: intermediate_checkpoint
Replit-Commit-Event-Id: 05219c3d-56d8-4eb5-ace6-24ec5d7e049a
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7c94b7a0-29c7-4f2e-94ef-44b2153872b7/9203795e-937a-4306-b81d-b4d5c78c240e/j2GzDqZ
Replit-Helium-Checkpoint-Created: true
---
client/pages/Privacy.tsx | 154 +++++++++++++++++++++++++++++++++++--
client/pages/Support.tsx | 162 ++++++++++++++++++++++++++++++++++++++-
client/pages/Terms.tsx | 97 +++++++++++++++++++----
3 files changed, 392 insertions(+), 21 deletions(-)
diff --git a/client/pages/Privacy.tsx b/client/pages/Privacy.tsx
index 83610b06..f0fefa06 100644
--- a/client/pages/Privacy.tsx
+++ b/client/pages/Privacy.tsx
@@ -165,10 +165,31 @@ export default function Privacy() {
>
Chrome Web Store User Data Policy
- , including the Limited Use requirements. We only request permissions
- necessary for DLP functionality and do not use this data for advertising,
- creditworthiness assessment, or sale to third parties.
+ , including the Limited Use requirements.
+
+
+ Minimal Permissions: We only request browser permissions
+ strictly necessary for DLP security scanning functionality. We do not
+ request access to browsing history, bookmarks, or other unrelated data.
+
+
+ No Human Review of Personal Data: User data processed
+ by the extension is NOT subject to human review except in cases of:
+ (a) explicit user consent, (b) security investigations for abuse/fraud
+ prevention, or (c) legal compliance requirements.
+
+
+ No Advertising or Profiling: We do not use extension
+ data for advertising, user profiling, creditworthiness assessment,
+ or sale to third parties.
+
+
+ Automated Processing Only: DLP pattern matching is
+ performed by automated systems. Human operators only access aggregated,
+ anonymized audit logs for security purposes.
+
+ Data Controller: AeThex Inc., 123 Innovation Drive,
+ Phoenix, AZ 85001, United States. We are responsible for deciding how
+ we collect, hold, and use your personal information.
+
+
+ Data Protection Officer (DPO): For questions about
+ data protection or to exercise your rights, contact our DPO at{" "}
+
+ dpo@aethex.dev
+ .
+
+
+
Legal Bases (EEA/UK)
@@ -214,11 +251,37 @@ export default function Privacy() {
-
Data Retention
+
Data Retention Schedule
We retain data for as long as needed to provide Services, comply
- with law, resolve disputes, and enforce agreements. You may
- request deletion of your account data, subject to legal holds.
+ with law, resolve disputes, and enforce agreements. Specific retention
+ periods include:
+
+
+
+ Account Data: Retained while your account is active
+ and for 30 days after deletion request to allow recovery.
+
+
+ Server Logs & Analytics: Retained for 90 days, then
+ aggregated or deleted.
+
+
+ Security Violation Records: Retained for 2 years for
+ abuse prevention and legal compliance.
+
+
+ Backups: Retained for 30 days in encrypted form,
+ then permanently deleted.
+
+
+ Financial/Transaction Records: Retained for 7 years
+ as required by tax and accounting regulations.
+
+
+
+ You may request deletion of your account data, subject to legal holds
+ and regulatory requirements.
+ If you are a California resident, you have additional rights under
+ the California Consumer Privacy Act (CCPA) and California Privacy
+ Rights Act (CPRA):
+
+
+
+ Right to Know: Request disclosure of personal
+ information we collect, use, disclose, and sell.
+
+
+ Right to Delete: Request deletion of your personal
+ information, subject to certain exceptions.
+
+
+ Right to Correct: Request correction of inaccurate
+ personal information.
+
+
+ Right to Opt-Out of Sale/Sharing: We do not sell
+ or share your personal information for cross-context behavioral
+ advertising. If this changes, you will have the right to opt out.
+
+
+ Right to Limit Use of Sensitive Data: Request
+ limitations on processing of sensitive personal information.
+
+
+ Right to Non-Discrimination: You will not receive
+ discriminatory treatment for exercising your rights.
+
+
+
+ Do Not Sell or Share My Personal Information: AeThex
+ does not sell personal information and does not share personal information
+ for cross-context behavioral advertising purposes.
+
+
+ To exercise any of these rights, contact us at{" "}
+
+ privacy@aethex.dev
+ {" "}
+ or submit a request through your account settings. We will verify your
+ identity before processing your request.
+
+
+
+
+
Right to Appeal
+
+ If we deny your data rights request (such as access, deletion, or
+ correction), you have the right to appeal our decision. To appeal:
+
+
+
+ Email{" "}
+
+ dpo@aethex.dev
+ {" "}
+ with the subject line "Privacy Appeal".
+
+
+ Include your original request reference number and explain why you
+ believe our decision was incorrect.
+
+
+ We will review your appeal within 45 days and provide a written
+ response explaining our final decision.
+
+
+ If you are unsatisfied with our appeal decision, you may file a
+ complaint with your local data protection authority (for EEA/UK
+ residents) or the California Attorney General (for California residents).
+
+
+
+
Security
diff --git a/client/pages/Support.tsx b/client/pages/Support.tsx
index c2543568..c90db4c5 100644
--- a/client/pages/Support.tsx
+++ b/client/pages/Support.tsx
@@ -476,8 +476,168 @@ export default function Support() {
+ Report security vulnerabilities, abuse, or policy violations
+
+
+
+
+
+
+
+
+
+
+
+ Report Security Vulnerability
+
+ Found a security issue? Let us know responsibly.
+
+
+
+
+
+
+ If you've discovered a security vulnerability in AeThex services,
+ please report it to our security team. We take all reports seriously
+ and will respond promptly.
+
+
+
+
+
+
+
+
+
+
+
+
+ Report Abuse or Violations
+
+ Report harassment, spam, or policy violations.
+
+
+
+
+
+
+ If you've encountered abuse, harassment, spam, or Terms of Service
+ violations, report them to our Trust & Safety team.
+
+
+
+
+
+
+
+
+ Incident Response Process
+
+ What happens after you report a security issue or abuse
+
+
+
+
+
+
+ 1
+
+
Acknowledgment
+
+ We acknowledge receipt within 24 hours for security reports,
+ 48 hours for abuse reports.
+
+
+
+
+ 2
+
+
Investigation
+
+ Our team investigates the report, gathers evidence, and
+ assesses severity.
+
+
+
+
+ 3
+
+
Resolution
+
+ We take appropriate action - patching vulnerabilities or
+ enforcing policies against violators.
+
+
+
+
+ 4
+
+
Follow-Up
+
+ We notify you of the outcome and any actions taken (where
+ appropriate).
+
+
+
+
+
+
+
+
+ Escalation Steps
+
+ If your report isn't addressed or you disagree with the outcome
+
+
+
+
+
+ 1
+
+ Reply to your original report
+
Reference your ticket number and explain why you believe further action is needed.
+
+
+
+ 2
+
+ Contact escalations@aethex.dev
+
For unresolved issues, escalate to our senior Trust & Safety team with your ticket number.
+
+
+
+ 3
+
+ Executive Review
+
For serious unresolved matters, contact legal@aethex.dev for executive review.
+
+
+
+
+
+
+
+
+ {/* Emergency Support */}
+
diff --git a/client/pages/Terms.tsx b/client/pages/Terms.tsx
index 1f2b9f1f..ca38257a 100644
--- a/client/pages/Terms.tsx
+++ b/client/pages/Terms.tsx
@@ -176,25 +176,51 @@ export default function Terms() {
The AeThex Sentinel extension and Warden bot are provided for data loss
- prevention purposes. You acknowledge that:
+ prevention purposes. By installing or using the extension, you acknowledge
+ and agree to the following:
- The extension may interfere with website functionality on certain sites.
- AeThex is not responsible for any website breakage or data loss resulting
+ Website Interference: The extension may interfere with
+ website functionality on certain sites. AeThex is not responsible for
+ any website breakage, form submission failures, or data loss resulting
from extension use.
- No security tool is 100% effective. AeThex does not guarantee prevention
- of all data leaks or security incidents.
+ False Positives: The DLP scanning system may generate
+ false positives, blocking legitimate content that resembles sensitive
+ data patterns. AeThex is not liable for any business disruption, lost
+ transactions, or inconvenience caused by false positive detections.
- You are solely responsible for configuring security policies appropriate
- for your organization's needs.
+ No Absolute Security Guarantee: No security tool is
+ 100% effective. AeThex does not guarantee prevention of all data leaks,
+ security incidents, or breaches. The extension is one layer of defense
+ and should not be your sole security measure.
- The extension requires certain browser permissions to function. You consent
- to granting these permissions when you install the extension.
+ Data Interception Liability: While the extension scans
+ text for security purposes, AeThex is not liable for any claims arising
+ from the interception, analysis, or processing of data passing through
+ the extension. You are responsible for ensuring compliance with applicable
+ privacy laws in your jurisdiction.
+
+
+ Policy Configuration Responsibility: You are solely
+ responsible for configuring security policies appropriate for your
+ organization's needs. Misconfigured policies may result in over-blocking
+ or under-protection.
+
+
+ Policy Updates: You are responsible for staying informed
+ about extension policy updates. We will notify you of material changes,
+ but continued use after notification constitutes acceptance.
+
+
+ Browser Permissions: The extension requires certain
+ browser permissions to function. You consent to granting these permissions
+ when you install the extension and acknowledge that revoking permissions
+ will disable extension functionality.
@@ -214,13 +240,56 @@ export default function Terms() {
Dispute Resolution & Arbitration
- Any dispute arising from these Terms or the Services shall be resolved
+ Mutual Agreement: Both you and AeThex Inc. agree that
+ any dispute arising from these Terms or the Services shall be resolved
through binding arbitration in accordance with the rules of the American
Arbitration Association. The arbitration shall take place in Arizona, USA.
- You agree to waive any right to participate in a class action lawsuit or
- class-wide arbitration against AeThex Inc. This arbitration agreement does
- not preclude you from bringing issues to the attention of federal, state,
- or local agencies who may seek relief on your behalf.
+
+
+ Class Action Waiver: You agree to waive any right to
+ participate in a class action lawsuit or class-wide arbitration against
+ AeThex Inc.
+
+
+ Small Claims Court Exception: Notwithstanding the above,
+ either party may bring an individual action in small claims court for
+ disputes within the court's jurisdictional limits.
+
+
+ Injunctive Relief Exception: Either party may seek
+ emergency injunctive relief from a court of competent jurisdiction to
+ prevent irreparable harm pending arbitration, including protection of
+ intellectual property rights, confidential information, or to stop
+ ongoing violations of these Terms.
+
+
+ Government Agency Complaints: This arbitration agreement
+ does not preclude you from bringing issues to the attention of federal,
+ state, or local agencies who may seek relief on your behalf.
+
+
+
+
+
Arbitration Opt-Out
+
+ You have the right to opt out of binding arbitration within 30 days of
+ creating your account or accepting these Terms (whichever is later). To
+ opt out, you must send a written notice to{" "}
+
+ legal@aethex.dev
+ {" "}
+ with the subject line "Arbitration Opt-Out" that includes:
+
+
+
Your full legal name
+
Your AeThex account email address
+
A clear statement that you wish to opt out of binding arbitration
+
The date of your opt-out request
+
+
+ If you opt out, disputes will be resolved in the state or federal courts
+ located in Maricopa County, Arizona. Opting out will not affect your
+ ability to use the Services.