Privacy Notice

What this site and our products collect, what they don't, and how to ask us to delete anything we hold about you.

Updated 22 October 2026

This notice is issued by GIRD AI Technologies Private Limited ("GIRD", "we", "us"), a company incorporated in India (CIN U58200KA2026PTC228431) with its registered office at A-104, Arge Helios Hennur, Bagalur Road, Kothanur, Bangalore North, Bangalore 560077, Karnataka, India.

What this site collects

  • Request logs: when you visit this site, our hosting provider automatically records technical details such as your IP address, browser and the pages you request, to keep the site running and secure. These are kept only as long as needed for that.
  • Demo request form (name, work email, and optionally the AI agents you run): submitted through our forms provider. Retained 365 days, encrypted while stored, then deleted.
  • Blindspot data: when the Blindspot script (our AI key check) finishes, it sends us one report, and one more small event if you use its menu. The report holds the counts it found (coding agents, MCP servers, files with keys, allow-list keys, Python environments and similar), which agents and key providers it saw from fixed lists, a score from 0 to 100 and its risk grade, how long the scan took and whether you played the game. It says which well-known MCP servers you have set up, from a fixed list (any other server name is never sent), how many servers each app has, which apps keep a token in their config, where your keys sit by kind of file (shell config, shell history, .env files, MCP configs, agent settings, project files), how many files hold each provider's keys, and which coding agents you haven't used in 30 days. It also holds a few facts about your setup: your macOS version, Mac model, processor type, terminal app, shell, bash version and language setting, and whether it ran inside Claude Code. It includes a device ID: a one-way hash of your Mac's hardware ID, salted for this script, so we can count repeat runs. It can't be turned back into the hardware ID, and we don't link it to your name or email. The menu event records whether you saved the report, opened your share card or opened the Argus download page. When you press a share button or the Argus button on your certificate page, the page tells us which button, what kind of result it shows and the run's random ID, nothing else. Never a file path, key, username, email, hostname or the raw hardware ID. We do not store your IP address, only the country Cloudflare derives from it. When it starts, the script asks us for running totals, such as how many AI builders have run it. That request sends nothing about you or your Mac. In reply to its report we send back your percentile: how your score compares with everyone else's, worked out from those totals. The reply also gives your device's number: its place in line among every device that has run it. Run the script with --offline, or set DO_NOT_TRACK=1, and it sends and asks for nothing. Kept 24 months, then deleted. We publish the running totals at gird.ai/api/check/stats: how many devices ran it, how many files with keys it found, the share of devices with no keys in plain text, how scores and coding-agent counts spread across all devices, and the share of devices that pass each check. Each figure covers every device together. The percentile, the score and agent spreads and the no-keys share appear once 2 devices have run it, and the share for each check once 2 devices that check applies to have run it, so while few devices have run it these figures describe a small group. We also use this data for case studies, and never publish case-study figures about a group smaller than 20 devices.
  • Blindspot update form (email address only): submitted through our forms provider and used only to email you when we add a new check. Retained 365 days, encrypted while stored, then deleted. Ask us to stop at any time.
  • Our public pages use no analytics. If we add a privacy-respecting analytics provider, we will name it here before turning it on.

Retention summary

  • Request logs: only as long as needed to run and secure the site.
  • Form submissions: 365 days, encrypted while stored, then deleted.
  • Blindspot data: 24 months, then deleted.
  • Email correspondence (follow-up after a demo request): kept while we are in conversation with you, then deleted on request.

What we do not collect

No advertising trackers. No social-media pixels. No session-replay. No cross-site identifiers. We never use your submissions to train any AI model. We do not sell, rent, or share your data with marketers or data brokers.

Cookies

Our public pages set no cookies of our own.

Service providers

  • Cloudflare, Inc.: static hosting and content delivery, and storage of Blindspot data.
  • Web3Forms: demo request and Blindspot update form processing (web3forms.com).
  • Google LLC (Google Fonts): the web typefaces used on this site.
  • Amazon Web Services: hosts the Argus app download.
  • WhatsApp (Meta Platforms): if you choose to message us on WhatsApp for feedback or support, your phone number and messages are handled through WhatsApp.

If we add a service provider that handles your data, we will list it here before turning it on.

Requesting access, correction, or deletion

Email hello@gird.ai. We respond within 5 business days, verify your identity before acting, and complete verified deletions within 30 days. You may also withdraw consent at any time.

Children

This site is not directed at, and we do not knowingly collect data from, anyone under 18.

India / DPDP Act 2023

Where the Digital Personal Data Protection Act 2023 applies to people in India, you have the rights to access, correction, erasure, and grievance redressal. Direct grievances to the same email; we will acknowledge within 7 days.

The Argus app

If you use the free Argus community edition that you download from gird.ai, what it sends to us, where it is stored, for how long, and how to have it deleted are described in the Argus community edition privacy notice.

Argus rolled out by your organisation is covered by your organisation's signed agreement with GIRD.