Privacy Policy

Last Updated:

This Privacy Policy describes how the Kog AI assistant Chrome extension ("we", "our", or "the Extension") handles your information. We are committed to protecting your privacy and being transparent about our data practices.

1. Information We Collect

1.1 Information You Provide

When you use the Extension, you may provide the following information:

• API Bearer Token: Your authentication token for the ChatBI gateway API
• API Endpoint URL: The URL of your ChatBI gateway endpoint (default: https://chatbi-gateway.nenosys.se/)
• Widget Configuration: Your preferences for widget position, colors, and other display settings

1.2 Information We Do NOT Collect

We want to be clear about what we do not collect:

• We do not collect any data from websites you visit
• We do not track your browsing history
• We do not collect personal information from web pages
• We do not monitor your online activity
• We do not collect usage analytics or telemetry data

2. How We Use Your Information

The information you provide is used solely for the following purposes:

• Authentication: Your API bearer token is used to authenticate API requests to your configured ChatBI gateway endpoint
• Functionality: Your configuration settings are used to customize the widget's appearance and behavior
• Persistence: Your settings are saved so they persist across browser sessions and devices (when Chrome sync is enabled)

3. Data Storage

3.1 Local Storage

All data is stored locally on your device using Chrome's chrome.storage.sync API. This storage is:

• Encrypted: Chrome encrypts the data before syncing across your devices
• Local: Data is stored on your device and synced only if you have Chrome sync enabled
• Private: We do not have access to your stored data

3.2 Data Location

Your data is stored in Chrome's sync storage, which is managed entirely by Google Chrome. We do not maintain any servers or databases that store your information.

4. Data Sharing and Third Parties

4.1 No Data Sharing

We do not share, sell, rent, or trade your information with any third parties. Your data remains private and is used only for the Extension's functionality.

4.2 API Communication

The Extension makes API calls to your configured ChatBI gateway endpoint (default: https://chatbi-gateway.nenosys.se/). When you send chat messages:

• Your messages are sent directly to your configured API endpoint
• API responses are received and displayed in the Extension
• We do not intercept, store, or analyze these communications
• Your API provider's privacy policy governs how they handle your data

4.3 Website Content

The Extension injects a chat widget interface on websites you visit. However:

• We do not read or collect content from websites
• We do not transmit website data to any servers
• The widget is purely a user interface overlay
• Website content remains private and is never accessed by the Extension

5. Your Rights and Control

5.1 Accessing Your Data

You can view your stored data at any time:

1. Click the Extension icon in your Chrome toolbar
2. View your current settings in the popup window

5.2 Deleting Your Data

You can delete your stored data at any time:

1. Click the Extension icon in your Chrome toolbar
2. Clear the fields in the settings form
3. Click "Save Settings" to remove stored data
4. Alternatively, uninstall the Extension to remove all associated data

5.3 Chrome Sync

If you have Chrome sync enabled, your Extension settings will sync across your devices. You can disable Chrome sync in Chrome settings if you prefer not to sync Extension data.

6. Permissions Explained

6.1 Storage Permission

Required to store your API credentials and settings locally using Chrome's encrypted sync storage. This allows the Extension to remember your preferences across sessions.

6.2 ActiveTab Permission

Required to inject the chat widget interface into the current webpage. The Extension only accesses the tab you are currently viewing and does not access browsing history or other tabs.

6.3 Host Permissions

Required for two purposes:

• API Communication: To make API calls to your configured ChatBI gateway endpoint
• Widget Injection: To display the chat widget on any website you visit

These permissions do not allow us to collect data from websites. They only enable the Extension's core functionality.

7. Data Security

We take data security seriously:

• All data is stored using Chrome's built-in encrypted storage
• API credentials are stored locally and never transmitted except to your configured endpoint
• We do not maintain servers or databases that could be compromised
• The Extension uses secure HTTPS connections for all API communications

8. Children's Privacy

The Extension is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this page
• Posting a notice in the Extension if significant changes are made

Your continued use of the Extension after any changes constitutes acceptance of the updated Privacy Policy.

10. Contact Us

11. Compliance

This Extension complies with:

• Chrome Web Store Developer Program Policies
• Chrome Extension User Data Privacy Requirements
• General data protection best practices