AI-SRO Privacy Policy

Who is responsible for your data

AI-SRO is deployed by your organisation. Your organisation runs the AI-SRO server, decides who uses it, and controls the data collected under its own tenant. The extension sends data only to the server address your organisation configured. It does not send data to the developer, to advertisers, or to any other address.

What the extension does

• It observes your work only in browser tabs you choose to watch, and only after your organisation has enabled observation.
• It recognises a job you repeat and offers to finish it.
• It shows offers, questions, progress and results in a side panel, and lets you stop a run or undo a record it created.
• It does not perform tasks in your browser. Tasks that you approve run on your organisation’s server, in a browser that server operates.

What is collected

In a watched tab, the extension records:

• your clicks, typing, selections and navigation (including page addresses);
• the web requests and responses the page makes, with credential-like values, headers and fields removed in the page before anything is sent;
• screenshots, only when your organisation’s policy allows them, and limited per minute.

The extension also keeps, on your device: the credential your organisation issued, a device identifier, the organisation’s observation policy, the tabs you turned watching on for, and a queue of observations not yet sent.

Business data shown on the pages you watch, and incidental personal information on those pages (such as names or email addresses), can be part of what is recorded. Passwords, one-time codes and tokens are not meant to be recorded: they are recognised and removed in the page. A password you type into an AI-SRO prompt goes to your organisation’s server-side vault, not into the extension’s storage.

Where your data goes

• Your organisation’s AI-SRO server. Everything above is sent only there. The server stores it under your organisation’s tenant, learns jobs from it, and runs the jobs you approve using a server-side browser and, where a job has been proven, direct calls to the system’s own API.
• Google (Gemini API). To read what you did, propose jobs, and plan and check steps, the server sends the relevant task data to Google’s Gemini models, as a service provider. This is text derived from your recorded activity and, when your organisation enables vision, screenshots. Google processes it to return an answer to AI-SRO. It is not sold or used for advertising by AI-SRO.
• Your organisation’s mailbox (Gmail). If your organisation connects Gmail, the server reads mail addressed to the connected mailbox to find requests for work, and can draft a question or a reply. A drafted mail is shown to you and is sent only when you press Send it. AI-SRO’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The information is used only to provide the visible features described here, and is not used for advertising or sold.

We do not sell your data. We do not use it for purposes unrelated to AI-SRO’s single purpose, and we do not use it to judge creditworthiness or for lending.

How long it is kept

By default, 30 days. Your organisation can configure a different period for its tenant. Data past the period is deleted automatically.

Your controls

• Pause observation at any time, or stop watching a tab. Pause stops recording immediately.
• Choose “Delete the last hour” to remove what this browser recorded in that time, from the server and from your device.
• Your organisation’s administrator can turn observation off, exclude sites from observation, and delete data for the tenant.

Security

Credentials your organisation stores for signing in to other systems are held in the server’s vault and are not readable from the extension. The extension sends data only to the address your organisation configured. Protection in transit and at rest depends on how your organisation deploys the server.

Children

AI-SRO is a workplace tool and is not directed to children.

Changes to this policy

If this policy changes, this page shows the new date. Material changes will also be reflected in the extension’s store listing.