Privacy Policy

What Isolate Does

Isolate is a browser extension that protects you from dangerous links in your email. When you click a link in Gmail or Outlook, Isolate checks it for threats like phishing, malware, and scams before you visit it.

What We Collect

We collect only what we need to protect you:

• Your email address — so we can identify your account and send you threat alerts.
• Link domains — the website name (like “example.com”) of links you click, so we can check them for threats and show you your protection history.
• Threat detection results — whether a link was safe or dangerous, what type of threat it was, and how severe.
• Activity timestamps — when you last used Isolate, so we can show your protection status.

What We Do NOT Collect

• Full URLs (only domain + SHA-256 hash stored)
• Raw page content or email bodies
• Email addresses found in analyzed content
• API key plaintext (only SHA-256 hash stored)
• Browsing history or page visit patterns
• Personal files or documents

How Long We Keep Your Data

• Threat detection records are automatically deleted after 90 days.
• Rate limiting records are deleted after 1 hour.
• Account information is kept as long as your account is active.
• IP blocklist entries expire within 24 hours by default.

Your Rights

You can:

• See your data — View your threat history and account info in the Isolate portal.
• Delete your data — Use the “Delete My Data” button in Settings. This permanently removes all your threat records and anonymizes your account.
• Export your data — Request a data export through the portal.
• Close your account — Contact support to fully close your account.

Security

• All data is encrypted at rest using AWS-managed encryption keys.
• All data in transit is encrypted using TLS 1.2 or higher.
• API keys are never stored in plaintext — only a one-way hash is kept.
• We use short-lived authentication tokens (15 minutes) to minimize exposure.

Contact

Questions about your privacy? Email support@isolateapp.com.