Privacy policy
Agent Chrome lets AI agents and chat apps use Chrome profiles that you connect. Circo, Inc. ("we") operates the hosted service at agentchrome.dev. The software is open source, so you can check how it handles data in the source code. If you run it in local mode or on your own server, none of the data below reaches us.
What we collect
| Data | Why | How long we keep it |
|---|---|---|
| Account ID and a one-way hash of each account key | To sign you in and authorize connected apps | Until you delete your account |
| Connected browsers: the name you give each profile, the extension version, when it was last online, and the profile's Google account email if you allow Chrome to share it | To show your browsers and route each agent's actions to the right one | Until you remove the browser or delete your account |
| Connected apps: the app name and redirect address of each app you authorize (for example Claude or ChatGPT), and hashed access and refresh tokens | To let those apps reach your browsers | Access tokens 1 hour, refresh tokens up to 90 days, or until you revoke them |
| Screenshots and recordings that an agent explicitly saves | To give the app a download link | Deleted automatically after 7 days |
| Request logs: time, path, status, response time and IP address | Security, abuse prevention and debugging | Up to 30 days |
| One sign-in cookie | To keep you signed in on agentchrome.dev | 30 days |
What we do not keep
When an agent reads a page, takes a screenshot or clicks, the request and its result pass through our server to your browser and back to the app that asked. We do not store page contents, screenshots or typed text, except files an agent explicitly saves as described above. We do not collect passwords, payment details or browsing history. The history tool only works if you turn it on in the extension, and results go only to the app that asked.
Who receives data
- The apps you connect, such as Claude, ChatGPT or a coding agent, receive what their agent reads from your browser. Their own privacy policies apply to that data.
- Cloudflare hosts the service (Workers, Durable Objects, D1, KV and R2) and processes data on our behalf.
- We do not sell personal data, show ads, or use your data to train AI models.
Your controls
- Pause any agent, stop all agents or block sites from the extension's toolbar popup.
- Remove a browser with
agentchrome revoke <id>, or by pressing Disconnect in the extension. - Replace your account key with
agentchrome rotate-key. - To delete your account and all data tied to it, email privacy@agentchrome.dev from any address and include your account ID. We delete it within 30 days.
Security
Keys and tokens are stored only as hashes. Connections use HTTPS and secure WebSockets, and each account's browsers are isolated from other accounts. See the security notes.
Children
Agent Chrome is not meant for anyone under 13, and we do not knowingly collect their data.
Changes and contact
If we change this policy, we update the date above and describe material changes on the GitHub repository. Questions: privacy@agentchrome.dev.