Zalos Browser Extension Privacy
Effective: 26 October 2026
What this notice covers
This notice covers the Zalos Chrome extension and its connection to Zalos Desktop. It explains the browser-specific data flow; the general Zalos privacy policy covers our website and hosted services. Desktop can be configured to use different AI providers and services, whose terms and privacy settings also apply. For a business deployment, your organization controls the tasks and any applicable retention arrangements.
Browser data used for your tasks
The extension can access open-tab titles and URLs, page text and structure, tables, screenshots, console messages, JavaScript expressions and their results, and the inputs and results of browser actions. It uses these capabilities to let your assistant read pages, extract information, navigate, click, and fill forms. Page content and screenshots may include personal information, location information, communications, financial or health records, account details, or other sensitive information on the sites you use. Page scripts can also access data available to the page, including JavaScript-readable cookies, local/session storage, application state, and content not currently visible on screen. Console and script results are not automatically redacted; do not assume that passwords or tokens in those results will be removed. Only request work on pages whose content you intend to share with your assistant and its configured services.
Where data goes
The extension connects to the locally installed Zalos Desktop app through a native messaging host and an authenticated loopback connection. Browser task content and action results pass to that app. Requested navigation, form submissions, and page scripts may also send information directly to the websites used for the task through your signed-in browser session; those websites handle it under their own policies. Desktop may include this information in your chat and send it to the AI provider or other connected services configured for the task. The extension does not choose the AI provider or establish a universal provider retention policy. Review your Desktop configuration and the relevant provider policies before using sensitive content. This browser-task flow is distinct from the managed hosted Platform configuration described in our general policy.
Permissions and local storage
Debugger and scripting permissions support page inspection, screenshots, and requested actions. Tabs and tabGroups associate browser work with the correct chat. HTTP and HTTPS site access supports the websites used in your tasks; Chrome internal pages are unavailable. NativeMessaging connects to Desktop. Storage keeps extension settings, browser/controller identifiers, and command lifecycle metadata locally in your Chrome profile. Alarms maintain the connection and reconcile work when Chrome restarts its background worker.
Use and sharing limits
Browser data is used to provide the browser-assistant functionality you request. We do not sell browser data, use it for advertising, or transfer it for creditworthiness or lending decisions. Processing by your configured AI provider and connected services is necessary to perform tasks that use those services. We do not use browser content received by Zalos to train our own models. Your choice of a third-party provider determines that provider’s processing and retention terms.
Retention and deletion
Extension settings and lifecycle metadata remain in your Chrome profile until cleared or removed. Uninstalling the extension removes its Chrome extension storage, but does not delete Desktop chats, saved artifacts, or data already sent to providers or connected services. Manage those records in Desktop and the relevant service; their retention settings and any organizational agreement apply. Contact us for requests concerning data held by Zalos.
Your controls
You can stop work in Zalos Desktop, disconnect or close the app, restrict site access in Chrome, or disable or remove the extension. Restricting site access may prevent the assistant from completing browser tasks. Removing the extension does not undo actions already performed on websites. The assistant acts through your browser session, so review the instructions you give it and use care with submissions, purchases, or other consequential actions.
Contact and changes
For support, privacy requests, or questions about this notice, email info@zalos.io. The general Zalos privacy policy explains applicable rights and contact details. We will update this notice when the extension’s data practices change and show the effective date below.