GeniPilot Privacy Policy

Privacy Policy

Effective date: 23 October 2026 · Applies to the GeniPilot Chrome extension and the GeniPilot web service.

GeniPilot is an AI browser assistant. We collect only what we need to sign you in, run the task you asked for, and keep your task history available to you. We do not sell your data, and we do not use it for advertising.

Contents

Who we are
What we collect
How we use it
When we share it
Sensitive information
Retention and deletion
Security
Your choices and rights
Google API data
Children
Changes
Contact

1. Who we are

GeniPilot ("we", "us") is an independent project that provides an AI-powered browser automation assistant through a Chrome extension and a web service. This policy explains what data the extension and service handle, and the choices you have.

2. What we collect

Category	Examples	Source
Account information	Name, email address, profile picture, hashed password, sign-in provider	You, or Google when you choose "Sign in with Google"
Task instructions	The text you type in the side panel, attached images, selected quick-action templates	You
Web page content	Text, form fields, and interface elements on the page GeniPilot is working on	The tab you ask GeniPilot to operate
Task activity	Step-by-step actions, results, timestamps, success or failure, task history	Generated while a task runs
Tab information	URL and title of tabs opened or used during a task	Your browser
Sensitive values	OTPs, passwords, or payment details you choose to enter at an approval prompt	You, only during a human-in-the-loop pause
Device and diagnostic data	Extension version, browser version, error messages needed to operate and debug the service	Your browser and the extension

The extension stores your sign-in session (authentication flag, email, username, first name) and small interface preferences in chrome.storage.local on your device. It does not store your password or your browsing history in extension storage.

3. How we use it

Run your tasks. Interpret your instruction, plan the steps, operate the browser tab you chose, and report the result.
Keep you signed in. Create and secure your account, verify your email, and manage your session.
Show your history. Display your automation history, scheduled tasks, and usage limits in the dashboard.
Keep the service working. Diagnose errors, prevent abuse, and improve reliability.
Notify you. Send task-completion or failure emails if you enable notifications.

We do not use your data for advertising, and we do not sell it. We do not use Google user data to determine creditworthiness or for lending purposes. We do not use your data to train a general-purpose AI model.

We share data only with service providers that help us operate GeniPilot, and only as needed to deliver the feature you requested:

AI model providers. Task instructions and the relevant page content are sent to an AI model provider to plan and execute the task.
Hosting and database providers. Account data, task history, and scheduled tasks are stored on our hosting infrastructure.
Google. If you choose Google sign-in, Google authenticates you and returns your name, email, and profile picture. Google's own privacy policy applies to that interaction.
Email delivery providers. If you enable notifications, we use an email provider to deliver them.
Legal requirements. We may disclose data if required by law, or to protect the rights and safety of users and the service.

We do not sell personal data, and we do not share it with data brokers or advertisers.

5. Sensitive information

Some tasks need information GeniPilot should never guess. When a task reaches such a step, the run pauses and asks you in the side panel. Values you enter are used to complete that task and are not used for advertising, analytics, or profiling.

Please be careful. Only provide information you are comfortable having processed by the service. If a task can be completed without sharing a password or payment detail, use that path instead. You can stop a run at any time with the stop button.

Task step logs may record that a step required input, and in some cases the value you typed may appear in the page you are automating. You can delete your task history from the dashboard at any time.

6. Retention and deletion

We keep account information while your account exists. Task history and scheduled tasks are kept until you delete them or delete your account. Diagnostic data is kept only as long as needed to operate and secure the service.

You can delete individual task history entries, sign out of the extension, revoke GeniPilot's access in your Google Account, and request deletion of your account by contacting us. When you delete your account, we delete the associated account data and task history, except where we must retain records for legal or security reasons.

7. Security

Passwords are stored as Argon2 hashes, not plain text. Production traffic is protected with HTTPS and WSS. Access to production systems is limited to people who need it to operate the service. No service can promise perfect security, so please use a strong, unique password and keep your device secure.

8. Your choices and rights

Access and correction. You can view and update your profile in the GeniPilot dashboard.
Deletion. Delete individual tasks, or contact us to delete your account.
Sign out. Use the sign-out button in the side panel. This clears the extension's locally stored session.
Google access. Revoke GeniPilot's access at myaccount.google.com/permissions.
Notifications. Turn task emails on or off in your notification settings.

Depending on where you live, you may have additional rights to access, correct, export, or delete your data. Contact us and we will respond as required by applicable law.

9. Google API data

GeniPilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google, we request only the email and profile scopes. We use that information to create and secure your GeniPilot account and to display your name and picture in the interface. We do not use Google user data for advertising, and we do not sell it.

10. Children

GeniPilot is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the product changes. The effective date at the top will change, and material updates will be announced in the extension or on the GeniPilot website. Continued use after an update means you accept the revised policy.

12. Contact

Questions about this policy or your data? Email alaudinburki@gmail.com.