Extension Privacy Policy
This policy is written to be read, not skimmed past. It covers the Almor browser extension: what it does on your machine, what leaves your device, and what never does. The almor.app website and the Almor service have their own policy.
What the extension does
The extension acts only on your instruction. When you give it a task, it reads the content of pages on the sites you direct it to, and performs the browser actions needed to do that task, at human pace, in your own logged-in browser. It does not browse on its own. It reads pages only in the course of carrying out a task you gave it.
What it sends
To reason about a task, the extension sends the relevant page content and your instruction to our backend over an encrypted connection (TLS). Our backend passes it to Anthropic's API for AI processing. Anthropic does not use it to train models and deletes it within 30 days, under their commercial terms.
The page content itself is not stored by us. Your instruction and the agent's replies are kept as your chat history, which you can see in the dashboard and which is deleted with your account.
What never leaves your browser
Your credentials, cookies and login sessions are never transmitted. The extension works inside the sessions you are already logged into. It has no feature that reads or sends your passwords, cookies or session tokens, to us or to anyone.
Redaction before sending
In the Chrome Web Store build, page text goes through a local redaction step on your device before anything is sent: email addresses, phone numbers and long card-like number sequences are stripped out. One deliberate exception: text the agent itself typed into a field while drafting is sent back as is, because the agent has to see its own draft verbatim to check its work.
Screenshots on sensitive pages
The extension refuses to take screenshots on pages that contain password, one-time code or card fields. Not blurred, not masked afterward: refused, so those pixels never exist outside your screen.
Permissions
The storage permission keeps your settings and your connection token on your device. The extension asks for access to sites so it can read and act on the pages you direct it to; that access is used only for the tasks you give it, never to browse or collect anything on its own.
What we do not do
- We do not sell your data.
- There is no ad tracking and no advertising use of anything the extension handles.
- We do not use your data for any purpose unrelated to the tasks you give the extension.
You direct where it goes
Almor goes where you send it. You choose the sites and accounts it works on. If you direct it to a place that contains sensitive or third-party information, such as your email inbox, that is your choice and its consequences are yours. Almor will process what you pointed it at, to do the task you asked, and nothing more.
Your choices and contact
You can stop the extension at any time by pausing it or uninstalling it. Your settings live on your device and go with it. For access to or deletion of anything held on our side, or any question about this policy, email hello@almor.app.
Changes
If this policy changes in a way that matters, we will tell you by email or with a notice on the site before the change takes effect.