IPKalix Shield browser extension: privacy policy
The IPKalix Shield extension for Chrome and Microsoft Edge is one part of IPKalix Shield, a data protection product that a company installs on its own Windows computers. This page explains what the extension does with information.
What the extension does
On websites that the company has chosen to watch (for example webmail, chat and AI tools), the extension notices when text is pasted or dropped and when a file is chosen, dragged in or pasted. It passes that text or file to the IPKalix Shield program that is installed on the same computer. That program applies the company's rules (for example: no Aadhaar, PAN or card numbers) and answers allow or refuse. If the answer is refuse, the extension stops the paste or attachment and shows a short notice.
AI tools. On AI tools only (for example ChatGPT, Gemini, Claude, Copilot), and only if your company has switched this on in IPKalix Shield, the extension also hands the text of the message you send (at the moment you press Enter or the send button) to the same program on your computer, so that your company can keep a record of what is sent to AI tools. The extension itself does not keep or send that text anywhere else.
What the extension does not do
- It has no server of its own and makes no network requests.
- It does not collect, store, sell or share personal information, browsing history or page content.
- It does not watch your typing in general. On websites other than AI tools it looks only at what is pasted, dropped or chosen as a file. On AI tools it reads the message you send, at the moment you send it, and only when your company has turned that on.
- It does not do anything on a computer where IPKalix Shield is not installed. Without that program the extension has nothing to talk to and steps aside.
- It does not load or run code from the internet.
The IPKalix Shield program on the computer
The program that the extension talks to is installed and managed by your company's administrator. Decisions are made on the computer. When something is refused or flagged, that program may record an incident for the company's administrator: the kind of data (for example "PAN x2", without the number itself), the website's address, the person's Windows user name and the computer's name. If your company has chosen to keep a record of what is sent to AI tools, that record can also contain the text of the message, the text that was pasted, and the name, size and fingerprint of files that were uploaded (never the content of the file). The company can choose to have identity numbers such as Aadhaar, PAN and card numbers masked in that copy, and to delete records after a set number of days. Only the company's administrators can read them. This is the company's own record under the company's own rules; it is not sent to Kalix Digital LLP unless the company uses a console that Kalix Digital LLP hosts for it on the company's behalf.
Permissions the extension asks for, and why
nativeMessaging: to talk to the IPKalix Shield program on the same computer. Nothing is sent to the internet.- Access to websites: the extension has to see pastes, drops and file choices on the pages the company watches, so that it can ask the local program. The company, not the extension, decides which sites are watched.
Your choices
The extension is installed and managed by your company. If you have questions about what your company checks or records, ask your administrator. You can see and remove the extension at chrome://extensions or edge://extensions unless your company's policy installs it for you.
Changes
If this policy changes, the new version will be on this page with a new date.
Contact
Kalix Digital LLP, https://kalixdigital.com