GCTUAE AI Employee · by Noman Akhter
Privacy Policy
1. Who is responsible
The Service is made by Noman Akhter and run on a server operated by Noman Akhter at aiemployee.gctuae.co. Your organization's Admin manages your account. This policy explains what data the Service handles, where it goes and how long it is kept.
2. What the server stores
- Account data: your name, username, a hashed (one-way encrypted) password, whether your account is active, your daily limit, and the date you accepted these terms.
- Browser lock: a random ID for the browser where you logged in, and when it was linked.
- Sessions: a hashed login token, with the time it was created and last used.
- Wallet records (prepaid accounts only): your balance, top-ups (amount, date, a payment note such as a transaction reference) and the amount charged per day.
- Usage records: per day, the number of requests, token counts and estimated cost. These are used for billing, limits and the Admin's reports.
- Security: failed login attempts per username and IP address are kept in memory for up to 15 minutes to block password guessing. They are not written to disk.
The server does not store your conversations, the text of web pages, screenshots or your files. It passes requests to the AI provider and streams the answers back to you.
3. What is sent to the AI provider
To answer you and operate pages, your messages are sent to Anthropic, PBC (the provider of the Claude models), along with the page text, element lists and screenshots the assistant reads when you ask it to work on a page. Anthropic processes this data under its commercial terms and privacy policy. Under those terms, API data is not used to train its models by default. Anthropic may keep data for a limited time for safety and legal reasons, as its policies describe.
Be careful with personal data. Only ask the assistant to read pages with other people's personal or sensitive information (phone numbers, addresses, payment or health details) when your work needs it.
4. What stays in your browser
- Your login token, browser ID and settings, in the extension's local storage.
- Your last 30 chats, in the extension's local storage, so they survive a reload or browser restart. Screenshots are not kept, and long page reads in older chats are shortened. You can delete a chat from Chat history; logging out removes them all.
- Files you attach, in memory only, until you remove them or close the panel. They are uploaded only to the website where you ask the assistant to upload them, after your approval.
- An estimate of your own spending.
5. Who can see your data
- Your Admin can see your name, username, account status, browser lock date, last activity, and your usage and cost. The Admin can't see your password or your conversations.
- Service providers: Anthropic (AI processing) and Hostinger (server hosting). They act under their own terms.
- Authorities, only when the law requires it.
We do not sell your data or use it for advertising.
6. How long data is kept
- Account data: until your Admin deletes your account.
- Sessions: until you log out, your Admin resets or disables your account, or 30 days without use.
- Usage records: kept for billing and reporting, including after an account is deleted. Ask your Admin if you want them removed.
7. Security
Connections use HTTPS. Passwords and login tokens are stored only in hashed form. The AI provider's API key is kept on the server and never sent to your browser. No system is perfectly secure. Keep your password private and tell your Admin if you suspect misuse.
8. Your choices
You can ask your Admin to correct your name, reset your password or delete your account. For other privacy requests, contact Noman Akhter through nomanakhter.com.
9. Children
The Service is for work use by adults. It is not meant for anyone under 18.
10. Changes
We may update this policy. We will change the version date above, and you will be asked to accept the new version before you continue using the Service.