What we receive when you answer a pulse, what the browser extension can and can't see, and how your answers are used.
What we collect from youLink to this section
When you answer a pulse, we receive:
- Your answers, for example yes or no, a time-saved choice, a 1 to 10 rating, and a comment if you leave one
- Which tool the pulse was about (for example, ChatGPT)
- When you answered
- Your account ID: so your answers show in your AI Adoption Portal, and so a one-off pulse is only asked of you once. On an anonymous pulse it is never shown next to an answer
The AI State of Play is different: it isn't anonymous, and your name is stored with your answers. You can answer it from the link in your email before you've set up an account. If you do, we also record that you answered without one, and a code made from the email address the link went to, never the address itself, so a mistaken address can be checked later.
When you sign up (or are invited):
- Your email and name
- Your role (Member, in your case) and any groups you've been added to
- Your time zone
- Your sign-in tokens (handled by Clerk, not stored as passwords by us)
When you send a request, a suggestion, a report or something worth knowing, we receive what you wrote, who sent it, and the answer you're given. The people who look after requests in your organisation read it. On Pro, where your organisation has switched it on, your team leader can read your requests, suggestions and finds too, if you sent them while you were in their group; the form says so before you send.
Your organisation can also see whether you have the extension installed.
That's it. We don't ask for your phone number, address, date of birth, or any other personal information.
What the browser extension can, and can't, seeLink to this section
When it's added, the extension asks for:
- Storage, to keep your pulses and your answers on your own machine, so it works offline and can send answers when the connection comes back
- Alarms, for a once-a-minute timer that checks whether the next scheduled pulse is due
- Tabs, so it can compare the address of each tab you open with your organisation's list of AI tools, and show your organisation's decision when you open one of them. The extension checks each page's address on your device; the address never leaves your device
- Scripting and activeTab, to put its own card on the page you're on
- Access to thegaige.com and api.thegaige.com, to sign you in and send your answers
It also asks, separately, for one broad permission, when you press Allow on all sites. Your browser calls it read and change all your data on all websites. Here is what it's for and what the extension does with it.
It's for drawing the pulse card. Pulses arrive on a schedule rather than when you visit a particular site, which means a pulse has to be able to appear on whatever page you have open at that moment. That could be any page, and Chrome has no narrower way to say so. The permission is optional, and the extension asks for it separately from the install.
With it, the extension draws the pulse card, or a tool's notice, in the corner of the page you're on, inside its own frame, so the card and the page can't reach into each other.
What it doesn't do:
- Read or send the content of any page you visit. Your prompts to ChatGPT, your conversations with Claude, the code you ask Copilot to write: none of it leaves your browser. We don't see it.
- Send us any record of where you've been. When you answer a pulse we receive your answers, which pulse and which tool it was about, whether the pulse was anonymous or identifiable, the extension's version number, and whether the pulse was a scheduled one or one you started yourself.
- Read your history or your bookmarks. The extension never asks Chrome for either. When it's added, your browser says it can "Read your browsing history": that's the tabs permission, which lets the extension see the address of each tab you open, so it can compare it with your organisation's list of AI tools.
- Store any of your AI-tool passwords or sign-in details.
One thing to know: because a pulse can appear anywhere, the permission isn't limited to your organisation's AI tools. The limit is on what the extension does with it: it puts a notice or a pulse on the page, and reads nothing there.
What your organisation supplies (you don't)Link to this section
Your organisation enters things like the tools you have access to and what each costs the organisation per seat. You don't need to tell us anything about that. They handle it.
How your data is usedLink to this section
Four uses, in order of frequency:
- Showing your own answers to you: in your AI Adoption Portal, with your hours-saved estimate where your organisation runs pulses about its AI tools
- Combining answers to spot patterns: which tools are working across the organisation, where seats are going unused, where learning would help
- Showing your organisation what's happening: see Who sees my answers?
- Reminding you: an email when something is waiting on you, and, if you haven't answered a pulse in three months, one question from us asking whether something is getting in the way. Your organisation sees only how many people chose each reason; see Who sees my answers?
We don't use your data to train AI models, sell it to anyone, or build a profile of you for advertising. Beyond your organisation's own reports, we may use anonymised figures, combined across many organisations, for research and benchmarks, unless your organisation opts out.
Where the data livesLink to this section
Your organisation's records are stored in Australia (AWS Sydney). Encrypted in transit and at rest. Some of the services we use, such as sign-in and the AI features, handle data outside Australia.
Removing your dataLink to this section
You can ask for your data to be deleted at any time. The simplest way is to ask the person who set up The GAiGE in your organisation (they can deactivate your account, which stops new data and frees up your seat). If you want everything historical erased too, ask them to request deletion, or contact The GAiGE support directly. When you're deleted from your organisation's list of people, your name and email address are removed, and anything you answered stays without them, shown as Deleted person. We reply to a deletion request within 30 days. Copies stay in our backups after that: the daily backups for seven days, and the copy we take before each release until that copy is deleted.
If you answered The AI State of Play from an email link and haven't set up an account, ask your organisation to see or delete your answers: they're stored with your entry in its list of people. Once you set up your account, they're in your AI Adoption Portal and in your own data download.
If you leave the organisation, your organisation typically deactivates your account as part of normal offboarding.
Something missing or out of date here? Tell us.