Chrome extension privacy

• Side panel. It signs you in with your existing framed.dev session and shows your Framed workspace chats. Same account, same conversations as the website.
• Connect a tab. When you click Connect this tab, Framed reads that page's visible text through your own live session, so it can answer questions or work a signed-in tool that has no API.
• Let Framed control the tab. When the tab owner turns it on for a short, self-expiring window, Framed can click, type, choose, and move between pages on a host allowlist you control, while you watch in the live tab.

The signed-in session stays in your browser. Framed stores only a hashed device token and the current host, held in your browser and in your Framed workspace so the connection can work. That is all the extension keeps.

We do not store or transmit your passwords, cookies, or two factor codes. The extension refuses to type into password and one time code fields, and never reads your browser cookies. Broad site access is requested only at the moment you connect a tab, one site at a time, and you approve each one.

When you connect a tab or let Framed control it, the page text and the actions you take are used to answer your request inside your own private chat thread. That content is processed the same way as anything else you put into Framed, and is covered by our main privacy policy, including how AI processing works and where data is stored. Your content is never used to train AI models, and we do not sell data.

You choose which tab to connect and which hosts are on the allowlist. You turn control on and off, and it ends on its own. You can disconnect a tab or sign out from the side panel at any time, which clears the stored device token and host.

Questions about the extension: support@framed.dev.