Privacy policy

Version 0.1, 9 November 2026.

In short. The extension runs entirely on your computer. It has no servers, no accounts, no analytics and no telemetry. We at Via-Tech, the developer, never receive any of your data.

What it does with your data. When you write in ChatGPT (chatgpt.com, chat.openai.com), Claude (claude.ai), Gemini (gemini.google.com) or Perplexity (perplexity.ai), or in Microsoft Copilot, DeepSeek, Mistral Le Chat or Grok if you turned them on in the settings, the extension looks for personal data in your text and in the files you attach (text files, PDF, Word, Excel, PowerPoint, whose text is read on your computer): card numbers, IBANs, tax codes, phone numbers, e-mail addresses, keys and passwords, and names and addresses. Names and addresses are found by your dictionary and by a recognition model that is part of the extension and runs on your computer. Before the page sends anything, it replaces each value with a label such as [[EMAIL_1]]. The chat service receives the labels. When the answer comes back, the extension shows the real values again, only on your screen.

What is stored, and where. Everything is kept in your browser's local extension storage (chrome.storage.local) on this computer:

settings and your dictionary
the label vault, which links each label to its real value, so answers can be shown with real values
the log of the last 300 checked requests (the body as it was sent, with labels, and its SHA-256)
daily counters shown in the popup.

If your organization manages Velami, its policy (settings and an organization dictionary) comes from your browser's managed storage (chrome.storage.managed), set by your administrator. Velami only reads it and never sends it anywhere.

The list of names and addresses found by the model is kept only in memory, for up to 30 minutes, and is never written to disk. A value that was actually replaced goes to the label vault like any other. Nothing is synced to your Google account. You can clear the log and the vault at any time from the extension's page, and uninstalling the extension deletes all of it.

What leaves your computer. Only what the chat site itself sends, after the replacement. The extension does not add any requests of its own, with one exception: the “Test it yourself” page, when you press the button, sends the sample text (already with labels) to httpbin.org, an independent echo service, so you can see what a server receives. The model is loaded from the extension's own files. The extension's security policy does not allow its pages, its background process and the model to contact any other address.

What we cannot protect. The chat site sees what you type in its input box before you send it, and the answer on screen with the real values. The extension replaces your values in all the site's requests it can see, but it cannot stop a site that deliberately encrypts data to get around it. The recognition model can miss a name or an address, so add the important ones to your dictionary. From context a model may still guess who a text is about.

Source code. The code is open under AGPL-3.0, so anyone can check these statements: https://github.com/viatech-labs/velami

Children. The extension is not directed at children under 16.

Changes. Any change to this policy will be published with a new version of the extension.

Contact. Via-Tech, info@via-tech.org, https://via-tech.org