Privacy Policy

1. Introduction

UCSN DLP ("we", "our", "us") provides a Data Loss Prevention browser extension and endpoint agent designed to protect organizations against sensitive data leaks. This Privacy Policy explains how we collect, use, and protect information when you use our products.

2. Information We Collect

Our extension and agent collect the following data strictly for DLP enforcement purposes:

• Clipboard content patterns — We detect sensitive data patterns (credit card numbers, API keys) in clipboard content. We do not store the actual clipboard content.
• Website content — We inject watermarks and monitor page content for DLP policy enforcement. Page content is not transmitted to our servers.
• User activity — We monitor copy-paste actions and file upload attempts to detect policy violations.
• Download activity — We monitor file downloads to detect sensitive document exfiltration.
• Configuration data — License key, organization ID, and DLP policy settings are stored locally.

3. How We Use Information

Collected information is used exclusively to:

• Enforce DLP policies configured by your organization administrator
• Send security alerts to the organization admin dashboard
• Block unauthorized data transfers (uploads, copy-paste, prints)
• Generate security audit logs for compliance purposes
• Maintain extension/agent connectivity via periodic heartbeats

4. Data Storage and Transmission

• Configuration and license data are stored locally on your device using browser storage or local files.
• Security alerts are transmitted to your organization's UCSN DLP dashboard via encrypted HTTPS connections.
• We do not store, transmit, or have access to the actual content of web pages you visit, files you download, or text you copy.
• All data is processed locally on-device. Only alert metadata (type, timestamp, severity) is sent to the server.

5. Data Sharing

We do not sell, trade, or transfer your data to third parties. Security alert data is shared only with your organization's designated administrators through the UCSN DLP dashboard.

6. Data Retention

Local configuration data is retained until the extension or agent is uninstalled. Server-side alert logs are retained according to your organization's data retention policy. You can request deletion of your data by contacting your organization administrator.

7. Your Rights

You have the right to:

• Know what data is collected about you
• Request deletion of your data
• Uninstall the extension or agent at any time
• Contact your organization administrator about DLP policies

8. Contact

For questions about this privacy policy, contact us at contact@ucsn.cloud