CollabGuard Privacy Policy

Last updated: May 20, 2026

CollabGuard is an AI-assisted moderation tool for Reddit, consisting of a Reddit Devvit app and a companion Chrome extension (Semantic Sentry). This policy explains what data CollabGuard processes, how it is used, and how optional external AI providers such as Google Gemini or OpenAI may be involved if enabled by moderators.

1. Data CollabGuard Processes

CollabGuard may process subreddit moderation data needed to operate, including:

• Subreddit ID and subreddit name
• Moderator username or moderator ID (for claims, notes, audit events, and presence)
• Reddit post and comment IDs and related item metadata
• Queue status, claim state, escalation tags, and review state
• Private moderator notes entered into CollabGuard
• Gentle Nudge configuration, nudge history, preview metadata, and feedback
• Audit events for moderator workflow actions
• Optional advisory review inputs if Agent Mode is enabled

CollabGuard avoids storing full Reddit post or comment bodies unless a feature explicitly requires a short-lived or review-specific value.

2. Chrome Extension — Permissions Explanation

The Chrome extension requests the following permissions:

• identity — Used to verify the logged-in Reddit user's moderator status via Reddit's OAuth API before enabling mod actions. No Reddit credentials are stored by the extension; the OAuth token is used only for the duration of the verification check.
• storage — Stores AI scan results, settings, and enqueue status locally in Chrome's extension storage so results persist across page navigations on Reddit.
• alarms — Schedules periodic scan refresh checks in the background service worker.

The extension also connects to Supabase (a cloud database) to store AI scan verdicts, media descriptions, and mod session records. Only moderators who have verified their mod status can initiate scan or escalation actions. The extension does not inject ads, track browsing history, or read page content outside of reddit.com.

3. How Data Is Used

CollabGuard uses this data to:

• Show moderators a shared queue workspace
• Coordinate claims and avoid duplicate moderator work
• Save private notes and audit history
• Run subreddit-local Gentle Nudge rules and previews
• Support consensus review and resolution logging
• Clean up item-scoped records when Reddit content is deleted

CollabGuard does not sell data and does not use Reddit data for advertising.

4. Optional AI — Gemini / OpenAI

CollabGuard includes optional AI advisory features that call Google Gemini or OpenAI via server-side HTTP requests. These features are off by default and must be enabled by moderators. If enabled, CollabGuard may send review-relevant information such as selected post or comment text, thread context, report reason, subreddit rules, and moderator-provided notes. External provider calls happen server-side only — no AI requests are made directly from the browser or extension.

5. No Training on Reddit Data

CollabGuard does not train or fine-tune AI models on Reddit data. CollabGuard does not use subreddit data for cross-subreddit shared learning. CollabGuard does not sell, license, broker, or commercialize Reddit or redditor data for advertising, profiling, surveillance, or model training.

6. Subreddit Scope

CollabGuard stores configuration and workflow data by subreddit. One subreddit's settings, notes, nudge history, audit logs, and review state are not intentionally shared with another subreddit.

7. Moderator-Only Data

Private notes, audit history, nudge history, setup settings, consensus review data, and Team Insights are intended for moderators of the installed subreddit only.

8. Deleted Content Cleanup

When Devvit sends post or comment delete events, CollabGuard removes item-scoped workflow data tied to the deleted content. CollabGuard does not delete subreddit-wide configuration or audit history during deleted-item cleanup.

9. Account Deletion

If CollabGuard is notified of an account deletion, it removes or anonymizes stored author-identifying information from subreddit-scoped records. This includes releasing claims, clearing presence, and replacing user references with a neutral deleted_user placeholder. CollabGuard does not intentionally preserve deleted user IDs in cleanup metadata.

10. Data Retention

CollabGuard retains subreddit-scoped workflow data while the app is installed and the data is needed for moderation collaboration. Item-scoped data is cleaned up when a deletion event is received or when retention cleanup runs.

11. Security

API keys for external providers are stored server-side using Devvit secrets and are never exposed in client code, Redis workflow records, or audit metadata. If maintainers discover unauthorized access affecting CollabGuard data, they will notify Reddit and affected users as required by applicable Reddit terms and law.

12. Contact

For questions, privacy requests, or issue reports, contact the CollabGuard maintainers through the project repository at github.com/Nausmind/reddit-hackathon or through Reddit modmail on the subreddit where the app is installed.