Privacy policy

Last updated: 5 October 2026

The short version

• Helio Guard checks what is pasted, sent or uploaded on AI sites, on the computer itself.
• It never sends or keeps that text, or the contents or names of files.
• When it finds something sensitive, it tells the business only the kind of thing it found, for example "card number", with the AI site, the person and the time.
• It only works on a list of AI sites. It does not read any other website.

Who is responsible

Your employer decides to use Helio Guard, sometimes through their IT provider, and sets it up on the computers they manage. For the information described here, your employer decides how it is used (the "controller"). Nexborne Ltd runs the service that stores it for them (the "processor").

If you have a question about how your employer uses this information, ask them or their IT provider first. You can also contact Nexborne Ltd at support@heliosmsp.io.

Where it works

Helio Guard runs on Windows PCs, in Chrome and Edge. It is installed with the Helio Guard installer, signed by Nexborne Ltd. The Helio Guard agent then adds the Helio Guard browser extension to Chrome and Edge. The agent has no remote-access software and cannot be used to control a computer.

It works on these AI sites only: ChatGPT, Claude, Gemini, Google AI Studio, NotebookLM, Microsoft Copilot, Microsoft 365 Copilot, Perplexity, DeepSeek, Mistral Le Chat, Grok, Poe and Meta AI. The list can grow as new AI sites appear.

What Helio Guard looks at

On those sites, and nowhere else, it reads:

• text you paste or drop into the page, at the moment you paste it;
• the text in the message box, at the moment you send it;
• a spreadsheet or text file you choose or drop for upload, at the moment you choose it.

It checks these on your computer for things with a recognisable shape: card numbers, bank details, National Insurance and NHS numbers, passwords, secret keys, lists of email addresses or personal details, and any words your employer has marked as confidential. Then it forgets the text.

Depending on your employer's settings, it may take those things out and replace them with a label such as [BANK DETAILS], warn you, stop the paste or upload, or just make a note.

Which AI tools are in use

So your employer can see which AI tools are used, the Helio Guard agent also notes:

• how many times each listed AI site was visited in the last 7 days, per person and browser, read from browser history for those AI sites only;
• which AI apps and browser extensions are installed.

Visits to any other website are never counted or sent.

What is sent to your employer

When Helio Guard finds something, or shows you a message, it sends a short record to your employer's account:

• the kind of thing found, for example "card number" or "a list of customers";
• for a file, how many records it held, for example 214;
• the AI site, for example "chatgpt.com", and its name, for example "ChatGPT";
• your Windows user name, and the computer it came from;
• what happened, for example "taken out", "warned" or "stopped";
• the date and time.

When you agree your employer's AI policy, the version you agreed and the date and time are recorded too. If the computer is offline, records wait on it until they can be sent.

What Helio Guard never does

• It never sends, stores or logs what you typed or pasted. Not the card number, not the password, not a single word of it.
• It never sends the contents or the name of a file.
• It never sends page titles, full web addresses or anything about other websites.
• It does not record keystrokes, clicks, mouse movement or screenshots.
• It does not sell data or share it with advertisers or anyone else.
• It does nothing until your employer switches it on.

Where records are kept and for how long

Records are sent over an encrypted connection to the service run by Nexborne Ltd, and kept in your employer's account. Each record is kept for 13 months, so a year can be compared with the one before, and then deleted automatically. A record that you agreed the AI policy is kept while your employer uses Helio Guard. When your employer closes its Helio Guard account, everything is deleted within 30 days.

Your rights

Under UK GDPR you can ask your employer what information they hold about you, ask for it to be corrected or deleted, and object to how it is used. Because your employer is the controller, ask them first. Nexborne Ltd will help them answer. You can also complain to the Information Commissioner's Office at ico.org.uk.

Being told

Your employer should tell you before Helio Guard is switched on. The first time you open an AI site, Helio Guard shows your employer's AI policy, and every message it shows says what it is and that it notes only the kind of data.

This website

This website uses no cookies and no analytics. The "try it" box on the home page runs in your browser and sends nothing. Its fonts are served from this site, so nothing about your visit goes to anyone else.

Changes

If this policy changes, the new version will be posted here with a new date. A change that sends more information needs a new version of the browser extension, which the Chrome and Edge stores review before it reaches anyone.

Contact

Nexborne Ltd, registered in England and Wales, company number 17375877. Registered with the Information Commissioner's Office under reference ZC240034. Email support@heliosmsp.io.