Red Specter Security Research ("we", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your data when you use Guardian Chatbot Monitor ("the Service").
What We Collect
Account Information
- Email address and name (when you register)
- Payment information (processed by PayPal — we do not store card details)
Monitoring Data
- Risk alerts generated by the detection engine (category, severity, timestamp)
- Platform usage metadata (which chatbot, session duration)
We do NOT collect or store conversation content. The monitoring extension analyses messages locally in the browser. Only risk alert summaries are sent to the parent dashboard.
How We Use Your Data
- Provide the monitoring service and deliver risk alerts
- Process payments and manage your subscription
- Send service-related communications (alerts, account updates)
- Improve the detection engine and service reliability
Data Storage & Security
- Data is stored on servers in the United Kingdom
- All data is encrypted in transit (TLS/HTTPS)
- Account data is deleted within 30 days of account cancellation
- We conduct regular security reviews of our infrastructure
We Do Not
- Sell your data to third parties
- Share your data with advertisers
- Store the content of monitored conversations
- Use your data for purposes unrelated to the Service
- Transfer your data outside the UK without adequate protection
Your Rights (UK GDPR)
Under the UK General Data Protection Regulation, you have the right to:
- Access — Request a copy of the data we hold about you
- Rectification — Ask us to correct inaccurate data
- Erasure — Ask us to delete your data
- Portability — Request your data in a machine-readable format
- Object — Object to certain types of processing
To exercise any of these rights, contact richard@red-specter.co.uk. We will respond within 30 days.
Cookies
We use essential cookies only for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies.
Children's Privacy
The Service is designed to be managed by parents and guardians. We do not knowingly collect personal information directly from children under 13. Monitoring data is associated with the parent's account, not the child.
Third-Party Services
We use PayPal as our payment processor. PayPal's privacy policy governs the handling of payment data. We do not use any other third-party analytics, tracking, or advertising services.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email. The latest version is always available at this URL.
Contact
Data Controller: Red Specter Security Research, United Kingdom
Email: richard@red-specter.co.uk
Last updated: February 10, 2026