Privacy Policy

VeriRoute AI · Effective August 21, 2026

This privacy policy describes how Scrubbed (“we”, “us”) collects and uses information through the VeriRoute AI Chrome extension and the VeriRoute backend API. The extension is an internal enterprise security tool for Scrubbed staff.

Scope

VeriRoute verifies website URLs before pages load and enforces Scrubbed’s approved AI-tool policy. It is managed by Scrubbed IT / Cybersecurity. This policy applies to data processed by the extension and the VeriRoute API hosted for Scrubbed.

Information we collect

• Web history (URLs): The URL of each site you navigate to is sent to the VeriRoute API so we can check it against enterprise policy before the page loads.
• Website content (limited): On approved AI tools that receive a security scan, we collect sanitized page signals only — page title, meta tags, form action URLs, input field types (not values), external script hostnames, iframe count, and whether a password field is present. We do not collect full page HTML, images, videos, or text you type into forms.
• Local browser storage: The extension stores verified-navigation tokens, grace-period state, and cached scan results locally in your browser using Chrome storage APIs.

Local file:// URLs (for example, local PDFs) are skipped and are not sent to the backend.

Information we do not collect

• Personally identifiable information (name, email, address, identification numbers)
• Health information
• Financial or payment information
• Authentication credentials (passwords, PINs, security answers)
• Personal communications (email, chat, or messages)
• Location data (GPS, region, or device location)
• User activity such as keystrokes, mouse movements, clicks, or scroll behavior
• A full export of your Chrome browsing history

Why we collect information

We use this information solely to enforce Scrubbed’s enterprise AI-tool and URL security policy, block unapproved AI tools, scan approved tools for security risk, and guide staff to approved alternatives. We do not use this data for advertising or marketing.

Where information is processed

Data is transmitted to Scrubbed’s VeriRoute API (hosted on Google Cloud Run). Security scans may use Google Vertex AI (Gemini) on sanitized signals only. Policy and scan results may be cached in Scrubbed-operated databases (MySQL and ChromaDB).

Data sharing

We do not sell your data. We do not share extension-collected data with third parties for their own purposes. Data is used only for Scrubbed’s internal security and compliance operations.

Data retention

URL checks and scan results may be cached on backend systems to improve performance. Local extension storage persists until cleared by browser policy, extension removal, or grace-period expiry. Retention on backend systems follows Scrubbed IT data management practices.

Your choices

On managed devices, this extension may be required by Scrubbed policy. If you believe a site was blocked incorrectly, use the Ask Approval option on the block landing page or submit a ticket through Scrubbed Helpdesk.

Contact

Scrubbed staff can open a support ticket for questions about this policy, VeriRoute access, or blocked sites at Scrubbed Helpdesk (https://helpdesk.scrubbed.net/).

Changes

We may update this policy from time to time. The effective date at the top of this page indicates the latest version.