AmuletIQ
Sign InBook a Demo

Privacy Notice.

Effective date: 26 October 2026

Who We Are

AmuletIQ provides a browser extension and dashboard that let organisations govern how their employees use AI tools.

  • Company name: AmuletIQ LTD
  • Company number: 17513269
  • Address: Alacrity House, Kingsway, Newport, NP20 1HG, United Kingdom
  • Privacy contact: support@amuletiq.com

Our Role: Controller and Processor

AmuletIQ plays two different roles, depending on the data:

  • Controller for customer account and billing data - the details of the administrator who buys and manages the subscription, and payment records. AmuletIQ decides why and how this data is used.
  • Processor for monitored user and activity data - the employees the customer enrols and the record of their activity. The customer is the controller of this data, and AmuletIQ processes it only on the customer's instructions.

What Data is Collected

The personal data that AmuletIQ collects can be split into administrator and monitored user data, representing the person who purchases and configures the subscription and the employees whose AI tool usage is governed by it respectively.

Data collected about the administrator is:

  • Name
  • Email address
  • Phone number
  • Password (stored only as a one-way hash)
  • Two-factor authentication secret and recovery codes (stored encrypted)
  • Company name and company logo
  • Payment references - Stripe customer and payment identifiers, amount, currency and status

AmuletIQ does not collect or store card numbers, cardholder names or expiry dates. Card details are collected and tokenised by Stripe in the customer's browser and never reach AmuletIQ.

Data collected about the monitored user is:

  • Name
  • Email address
  • Phone number, where provided
  • Password (stored only as a one-way hash)
  • Two-factor authentication secret and recovery codes (stored encrypted)
  • Role within the customer's organisation

AmuletIQ also collects a record of each monitored user's activity on the websites the customer's policies cover, which the customer may set to include all websites. This activity data is linked to the individual, and consists of:

  • The website address visited
  • The type of activity - site visit, prompt submission, or file upload
  • The action the policy applied - block, redirect, warn, or none
  • The date and time, and the grouping of consecutive activity on one website into a single visit
  • Text entered into a monitored input field, whether or not it is submitted, where the applicable policy's logging level records it. Where the customer turns on monitoring of all fields, this can include any editable field on a covered page
  • The name, size and type of an uploaded file, where the applicable policy's logging level records it
  • The text extracted from an uploaded file, where the applicable policy's logging level records it
  • Which of the customer's sensitive-data patterns were matched in that text or file

The logging level is set by the customer on each policy and can record anything from no content at all to the entire text of the fields and files a user enters or uploads. Recording of text and file contents is off by default. The customer turns it on and off in the dashboard settings.

Browsing and technical data. For a user enrolled by the customer, the extension sends the address of each web page they open to AmuletIQ, so the customer's policy for that page can be applied. This address is not stored against the user unless a policy covers the page and records the activity. Like any web service, our hosting provider automatically records server logs for requests to our services, including IP address, browser type, referring address and the requested address (which can include the address of the page being checked). These logs are used only for security and troubleshooting and are deleted after 30 days.

The AmuletIQ Browser Extension

The extension is installed by the customer's administrator. It has no sign-in screen. It reads the email address of the work account signed into the browser and sends it to AmuletIQ to identify the user. It stores a short-lived access token in the browser's extension storage. It reads the address of the open tab and, on pages a policy covers, the content of AI prompt fields and files selected for upload, as described above. If the email address is not enrolled by an AmuletIQ customer, the extension sends nothing further and does nothing on web pages. Data is sent only to AmuletIQ (api.amuletiq.com).

Legal Basis and How Data is Used

To fulfil a contract:

  • Customer account information is needed to create and administer the customer's account, to bill the subscription, and to contact the administrator about it.
  • Monitored user account information is needed for AmuletIQ to identify the user, authenticate them, and deliver the correct policy to their browser.

Legitimate interest:

  • Activity data is processed in the customer's legitimate interest in governing the use of AI tools within their organisation - preventing sensitive or regulated information from being sent to third-party AI services, evidencing that controls are working, and identifying where policies need adjusting.
  • Text and file contents are recorded only where the customer has turned recording on and judged it necessary to establish what information was at risk of disclosure, and only to the extent their policy specifies.
  • Server logs are processed in AmuletIQ's legitimate interest in keeping its services secure and working.

Legal obligations:

  • Billing records are kept to meet UK tax law.
  • Account, payment and activity information can be provided to authorities where AmuletIQ or the customer is required to do so, or where it evidences criminal activity carried out through the customer's systems.

The Customer's Responsibilities

As controller of monitored user and activity data, the customer decides the lawful basis for monitoring its employees and must tell them about the monitoring. The UK Information Commissioner's Office expects employers to carry out a data protection impact assessment (DPIA) before monitoring staff. Prompts and files can contain special category data, such as health information, and the customer is responsible for deciding whether and how its policies record it.

Automated Decisions

The extension blocks, redirects or warns automatically, based on the customer's policy. None of these actions has a legal or similarly significant effect on the user: they control what can be sent to a website, and the user can raise any block with their organisation.

Data Sharing with Third Parties

AmuletIQ uses a small number of processors to deliver the service, and shares only what each needs:

  • Google Cloud, to host the service, its database and server logs. The service and database run in Google Cloud's London region (europe-west2).
  • Stripe, to take payment and manage the subscription - the administrator's contact details and payment information, which is supplied to Stripe directly by the customer's browser.
  • Resend, to deliver account emails such as invitations and verification codes - the recipient's email address.
  • Atlassian (Jira), only where the customer has connected their own Jira site, and only for the activity records the customer chooses to export to it.

AmuletIQ does not sell any of this data, does not use it to train AI models, and does not share it with any other third party without first receiving customer consent.

International Transfers

Stripe, Resend and Atlassian process data in the United States, and Google may process some data outside the UK. Where data leaves the UK, AmuletIQ relies on the UK Extension to the EU-US Data Privacy Framework (the UK-US data bridge) where the provider is certified, and otherwise on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses in the provider's data processing terms.

Security

All data is encrypted in transit using HTTPS and encrypted at rest in Google Cloud. Passwords are stored only as one-way hashes, and two-factor authentication secrets are stored encrypted. Two-factor authentication is mandatory for dashboard accounts. Access to production systems is limited to the AmuletIQ staff who need it.

Cookies and Browser Storage

AmuletIQ does not use tracking or advertising cookies. The dashboard uses browser storage, and one strictly necessary cookie, only to keep you signed in. The extension's storage is described above.

Data Retention

Account and activity data is stored for as long as the customer's subscription remains active, and is deleted six months after the subscription ends. The customer can delete activity records at any point from their dashboard, and account records when a user leaves their organisation. The following exceptions apply:

  • Billing records are kept for six years, as UK tax law requires.
  • Database backups are kept for up to 7 days, so deleted data leaves the backups within 7 days.
  • Server logs are deleted after 30 days.

Rights of Subjects

Administrators and monitored users have the right to:

  • Access their data
  • Have it corrected
  • Have it erased
  • Restrict how it is processed
  • Object to processing, including processing based on legitimate interest
  • Receive their data in a portable format

AmuletIQ responds to requests within one month. Requests concerning a monitored user's activity data are decided by the customer as controller; AmuletIQ will pass such a request to them and act on their instruction. If an account is removed, that user can no longer sign in and the extension will stop applying the customer's policies on their browser.

Raising a Complaint or Making a Request

Data subjects can make a request, raise an issue or complain by emailing support@amuletiq.com.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.

Changes to This Notice

When this notice changes, the effective date above is updated. AmuletIQ will email customers' administrators about any material change before it takes effect.