diff --git a/LICENSE b/LICENSE index d546866..6fd804f 100644 --- a/LICENSE +++ b/LICENSE @@ -29,10 +29,57 @@ refrain from using the Licensed Work. All copies of the original and modified Licensed Work, and derivative works of the Licensed Work, are subject to this License. -THE LICENSED WORK IS PROVIDED "AS IS". THE LICENSOR HEREBY DISCLAIMS -ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE -WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND -NONINFRINGEMENT. IN NO EVENT SHALL THE LICENSOR BE LIABLE FOR ANY -CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, -TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE -LICENSED WORK OR THE USE OR OTHER DEALINGS IN THE LICENSED WORK. +DISCLAIMER OF WARRANTY + +THE LICENSED WORK IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT +WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED +TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR +PURPOSE, NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR RELIABILITY. + +THE LICENSOR DOES NOT WARRANT THAT THE LICENSED WORK WILL: +(A) DETECT, INTERCEPT, OR SUBSTITUTE ALL PERSONAL INFORMATION, + SECRETS, CREDENTIALS, OR SENSITIVE DATA IN ALL CIRCUMSTANCES; +(B) FUNCTION CORRECTLY ON ALL WEBSITES, SERVICES, OR PLATFORMS, + INCLUDING AFTER THIRD-PARTY CHANGES TO THEIR INTERFACES, + APIs, OR DATA FORMATS; +(C) BE FREE OF ERRORS, BUGS, INTERRUPTIONS, OR SECURITY + VULNERABILITIES; +(D) MEET ANY SPECIFIC PRIVACY, SECURITY, OR REGULATORY + REQUIREMENTS, INCLUDING BUT NOT LIMITED TO GDPR, HIPAA, + CCPA, PCI-DSS, OR ANY OTHER DATA PROTECTION FRAMEWORK. + +LIMITATION OF LIABILITY + +IN NO EVENT SHALL THE LICENSOR, CONTRIBUTORS, OR DISTRIBUTORS BE +LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, +CONSEQUENTIAL, OR PUNITIVE DAMAGES (INCLUDING BUT NOT LIMITED TO +LOSS OF DATA, LOSS OF PRIVACY, IDENTITY THEFT, UNAUTHORIZED +DISCLOSURE OF PERSONAL INFORMATION, REGULATORY FINES OR PENALTIES, +REPUTATIONAL HARM, LOSS OF BUSINESS, OR PROCUREMENT OF SUBSTITUTE +SERVICES) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR +OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF OR INABILITY TO USE +THE LICENSED WORK, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH +DAMAGES. + +THIS LIMITATION APPLIES REGARDLESS OF WHETHER THE FAILURE RESULTS +FROM: (A) THIRD-PARTY CHANGES TO WEBSITES, APIs, OR SERVICES THAT +CAUSE THE LICENSED WORK TO MALFUNCTION OR FAIL SILENTLY; (B) USER +MISCONFIGURATION OR FAILURE TO VERIFY SUBSTITUTIONS; (C) PATTERNS, +FORMATS, OR DATA TYPES NOT RECOGNIZED BY THE LICENSED WORK; OR +(D) ANY OTHER CAUSE BEYOND THE LICENSOR'S REASONABLE CONTROL. + +COMMERCIAL LICENSEES ACKNOWLEDGE THAT COMMERCIAL LICENSE FEES ARE +NOT INSURANCE PREMIUMS AND DO NOT CREATE ANY ADDITIONAL WARRANTY, +INDEMNIFICATION, OR LIABILITY OBLIGATION BEYOND WHAT IS STATED IN +THE APPLICABLE COMMERCIAL LICENSE AGREEMENT. THE LIMITATIONS AND +DISCLAIMERS IN THIS SECTION APPLY TO ALL USERS, INCLUDING +COMMERCIAL LICENSEES, UNLESS EXPLICITLY SUPERSEDED IN WRITING BY +A SEPARATE COMMERCIAL LICENSE AGREEMENT. + +THE LICENSED WORK IS A CONVENIENCE TOOL THAT REDUCES — BUT CANNOT +ELIMINATE — THE RISK OF INADVERTENT DISCLOSURE OF PERSONAL +INFORMATION. USERS ARE SOLELY RESPONSIBLE FOR VERIFYING THAT +SENSITIVE DATA HAS BEEN PROPERLY SUBSTITUTED BEFORE TRANSMISSION +AND FOR IMPLEMENTING ADDITIONAL SAFEGUARDS APPROPRIATE TO THEIR +USE CASE. diff --git a/PRIVACY.md b/PRIVACY.md index c0c6e9f..a23111e 100644 --- a/PRIVACY.md +++ b/PRIVACY.md @@ -62,6 +62,17 @@ If this privacy policy changes, the updated version will be posted at this URL a For questions about this privacy policy, open an issue at: https://github.com/outis1one/silent-send/issues +## Limitations and disclaimer + +Silent Send is a convenience tool that reduces the risk of sharing personal information with third-party services. It does not guarantee complete protection. Specifically: + +- **Third-party changes:** Websites may change their APIs, interfaces, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting or substituting data without any visible error. Silent Send contributors have no control over third-party websites and accept no responsibility for changes they make. +- **Coverage gaps:** Silent Send may not detect personal information in images, unusual text formats, non-standard encodings, dynamically generated content, or patterns not covered by built-in or custom rules. +- **User responsibility:** You are responsible for verifying that substitutions are applied correctly before transmitting sensitive data. The extension provides a Test tab for this purpose. +- **Not a compliance tool:** Silent Send does not guarantee compliance with any privacy regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise). Organizations requiring regulatory compliance should implement appropriate professional tooling and processes. + +For the full limitation of liability, see the [LICENSE](LICENSE) file. + ## Open source Silent Send's source code is publicly available at https://github.com/outis1one/silent-send — you can verify every claim in this policy by reading the code. diff --git a/README.md b/README.md index c87deb2..cd152a2 100644 --- a/README.md +++ b/README.md @@ -542,7 +542,19 @@ Silent Send works well for text you type and most document uploads, but some thi ## Disclaimer -Silent Send is provided "as is" without warranty of any kind. It is a convenience tool that reduces the chance of accidentally sharing personal information with AI services. It is not a security guarantee and should not be your only privacy protection. The source code is available for inspection — you don't have to take our word for it. +Silent Send is provided "as is" and "as available" without warranty of any kind, express or implied. It is a **convenience tool** that reduces — but cannot eliminate — the risk of accidentally sharing personal information with AI services. It is **not a security guarantee** and should not be your only privacy protection. + +**What this means in practice:** + +- Silent Send may fail to detect or substitute personal information in certain formats, edge cases, images, or data you haven't configured. +- Third-party websites (ChatGPT, Claude, Gemini, Reddit, GitHub, etc.) may change their interfaces, APIs, or data submission methods at any time. Such changes can cause Silent Send to stop intercepting data **without any visible error or warning**. The Silent Send contributors have no control over and accept no responsibility for third-party changes. +- **You are solely responsible** for verifying that your personal data has been properly substituted before sending. The Test tab in the popup is provided for this purpose. +- Silent Send is not a substitute for professional data protection, legal compliance, or security tooling. It does not guarantee compliance with any regulation (GDPR, HIPAA, CCPA, PCI-DSS, or otherwise). +- No contributor, maintainer, or distributor of Silent Send shall be liable for any damages arising from its use, including but not limited to privacy breaches, identity theft, data exposure, or regulatory penalties — whether caused by software bugs, third-party changes, misconfiguration, or any other reason. + +Commercial licensees: a commercial license grants the right to use Silent Send in a commercial context. It does not create additional warranties, indemnification, or liability obligations beyond those stated in the license agreement. + +The source code is available for inspection — you don't have to take our word for it. ## License diff --git a/src/options/options.html b/src/options/options.html index c306c66..a925ca3 100644 --- a/src/options/options.html +++ b/src/options/options.html @@ -629,7 +629,10 @@ diff --git a/src/popup/popup.html b/src/popup/popup.html index deeaae6..7deb185 100644 --- a/src/popup/popup.html +++ b/src/popup/popup.html @@ -263,9 +263,13 @@ AES-256 encrypted at rest — unreadable without your password.
- Silent Send is a convenience tool, not a security guarantee. It can miss - PPI in images, file uploads, unusual name forms, or data you forgot to - configure. Always verify sensitive messages before sending. + Silent Send is a convenience tool, not a security guarantee. It reduces + but cannot eliminate the risk of sharing personal data. It may miss PPI + in images, unusual formats, or data you haven't configured. Third-party + sites may change how they send data at any time, which can cause missed + substitutions without warning. Always verify sensitive messages before + sending. By using this extension, you accept full responsibility for + verifying your data is protected.
Options