Privacy Policy
Vibe AI Browser Co-Pilot
Provider: Vibe Technologies, LLC
Effective Date: 2026-11-09
1. Introduction
This Privacy Policy describes how Vibe Technologies, LLC ("we", "us", "our", "Company") collects, uses, and protects information when you use Vibe AI Browser Co-Pilot ("Extension", "Product"). By using the Extension, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information Stored Locally
The following information is stored locally in your browser storage only:
- API Keys: Third-party AI service API keys (OpenAI, Anthropic, Google Gemini, OpenRouter)
- User Settings: Extension configuration preferences (model selection, feature toggles)
- OAuth Tokens: Authentication tokens for supported OAuth providers
- Browser Data: Tab URLs, page content, browser history (processed locally for AI analysis)
2.2 Information Transmitted to Third Parties
When you use the Extension, the following data may be transmitted to third-party services:
To AI Service Providers (OpenAI, Anthropic, Google, OpenRouter):
- User queries and prompts
- Page content and DOM structure
- Browser tab information
- Automation task context
To Sentry.io (Error Tracking):
- Error logs and stack traces
- Browser version and extension version
- Anonymized usage context
- No API keys or personal data
To OpenRouter API:
- Extension name in X-Title header
- Referer URL from extension
- API requests and responses
2.3 Information We Do NOT Collect
We do not:
- Store your API keys on our servers
- Track your browsing history on our servers
- Collect personally identifiable information
- Sell or share your data with third parties for marketing
- Monitor your extension usage beyond error tracking
3. How We Use Information
3.1 Local Processing
Information stored locally is used to:
- Authenticate with third-party AI services
- Remember your extension settings
- Process AI requests and automation tasks
- Provide extension functionality
3.2 Error Tracking
Error data sent to Sentry.io is used to:
- Identify and fix bugs
- Improve extension stability
- Monitor production errors
- Enhance user experience
3.3 AI Service Integration
Data sent to AI services is used to:
- Process your natural language queries
- Generate AI responses
- Perform automated browser tasks
- Analyze page content
4. Data Storage and Security
4.1 Local Storage
- API keys are stored in Chrome's local storage
- Storage is isolated to your browser profile
- No cloud synchronization of API keys
- You can clear data by uninstalling the extension
4.2 Transmission Security
- All API communications use HTTPS
- API keys are transmitted securely to AI providers
- OAuth tokens use industry-standard protocols
4.3 Your Responsibility
You are responsible for:
- Securing your browser and computer
- Protecting your API keys from unauthorized access
- Monitoring API usage and costs
- Keeping your browser and extension updated
5. Third-Party Services
5.1 AI Service Providers
The Extension integrates with third-party AI services. Their privacy policies apply:
- OpenAI: https://openai.com/privacy
- Anthropic: https://www.anthropic.com/privacy
- Google: https://policies.google.com/privacy
- OpenRouter: https://openrouter.ai/privacy
We are not responsible for third-party privacy practices.
5.2 Error Tracking Service
Sentry.io: https://sentry.io/privacy/
Error data is subject to Sentry's privacy policy. We configure Sentry to minimize data collection and exclude sensitive information.
6. Cookies and Tracking
The Extension requests the cookies permission only to read and then remove two short-lived, first-party cookies on vibebrowser.app at install time: an install-attribution cookie carrying campaign parameters, and a one-time analytics attribution nonce. These cookies are used solely to attribute an install to a campaign, are deleted immediately after being read, and are never used for tracking. No cookies are read from any other site. Browser storage is used only for extension functionality as described above.
Our documentation site and user portal use Google Analytics 4 with cookie consent. See our Cookie Policy for details.
7. Your Rights and Choices
7.1 Data Access and Control
You can:
- View stored settings in the extension settings page
- Delete API keys at any time
- Clear all extension data by uninstalling
- Disable error tracking (if option is provided)
7.2 Opt-Out Options
- Error Tracking: Production builds include error tracking; development builds may allow disabling
- AI Services: You control which AI services to use via API key configuration
- Extension Features: You can disable specific features in settings
8. Children's Privacy
The Extension is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
9. Data Retention
- Local Data: Retained until you uninstall the extension or clear browser data
- Error Logs: Retained by Sentry.io according to their retention policy (typically 90 days)
- No Server Data: We do not retain user data on our servers
10. International Data Transfers
By using the Extension, you acknowledge that your data may be transmitted to:
- AI service providers in various countries
- Sentry.io servers (United States)
- Other third-party services based on your configuration
11. Changes to Privacy Policy
We may update this Privacy Policy at any time. Changes will be effective immediately upon posting. Continued use of the Extension constitutes acceptance of the updated policy.
12. California Privacy Rights
If you are a California resident, you have the right to:
- Know what personal information is collected
- Know whether personal information is sold or disclosed
- Opt-out of the sale of personal information (we do not sell data)
- Request deletion of personal information
Note: Since we do not collect personal information on our servers, these rights primarily apply to local browser storage under your control.
13. GDPR Compliance (European Users)
Under GDPR, you have rights to:
- Access: View data stored locally in your browser
- Rectification: Modify settings and API keys
- Erasure: Delete all data by uninstalling the extension
- Data Portability: Export settings if feature is provided
- Object to Processing: Uninstall or disable the extension
Legal basis for processing:
- Consent: By installing and using the extension
- Legitimate Interest: Providing extension functionality and error tracking
14. Browser Permissions
The Extension requests the following browser permissions:
- activeTab: Access current tab for automation
- alarms: Keep the service worker alive during long-running agent tasks
- audioCapture: Enable voice input for hands-free browser automation
- cookies: Read and remove one-time first-party install-attribution cookies
- debugger: Advanced browser control and accessibility inspection
- history: Read recent browsing history to generate personalized suggestions
- identity: OAuth authentication
- offscreen: Run the on-device model in a background document
- scripting: Execute scripts for automation
- sidePanel: Display side panel interface
- storage: Store settings and API keys locally
- tabGroups: Organize tabs
- tabs: Manage browser tabs
- unlimitedStorage: Keep the on-device model cache from being evicted
- webNavigation: Monitor page navigation
- webRequest: Observe network requests and response headers while an agent task runs or an MCP client is connected
In addition, the Extension requests host access to all URLs (<all_urls>) so it can automate any site the user directs it to.
These permissions are necessary for extension functionality and are not used for tracking.
15. Data Minimization
We follow data minimization principles:
- Collect only data necessary for functionality
- Process data locally when possible
- Send to third parties only when required for AI services
- Do not store unnecessary data on servers
16. Chrome Web Store Limited Use Compliance
This extension complies with the Chrome Web Store Limited Use policy for user data:
Affirmative Statement: Vibe AI Browser Co-Pilot's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Specific Permission Justification:
- activeTab: Used to access the current tab's content when the user starts a task from the side panel or the omnibox
- alarms: Used to keep the service worker alive while a long-running agent task is in progress
- audioCapture: Used to open the microphone for voice input: the extension calls getUserMedia({ audio: true }) to trigger Chrome's real microphone-permission gate, then runs the browser's built-in Web Speech API over live microphone audio while you dictate. Audio is never recorded or persisted by the extension, but microphone audio is streamed to the browser's speech-recognition service and the resulting transcript is sent to the model provider you selected.
- cookies: Used once at install to read and then remove two short-lived, first-party cookies on vibebrowser.app: an install-attribution cookie carrying campaign parameters, and a one-time analytics attribution nonce
- debugger: Used to attach the Chrome DevTools Protocol to the tab being automated for accessibility snapshots and reliable element interaction
- history: Used to read the last 7 days of your browsing history (titles and URLs) automatically when the home page loads, so the extension can generate personalized suggestions. That history is included in the prompt sent to the model provider you selected, and it can be turned off with the vibe.suggestions.disabled setting.
- identity: Used for OAuth sign-in to the Vibe portal and other connected providers
- offscreen: Used to run the on-device model in a background document that is not tied to the side panel
- scripting: Used to inject content scripts that read page content and perform clicks, typing and form fills
- sidePanel: Used to display the chat interface, task progress and results
- storage: Used to store settings, API keys and session state locally in the browser
- tabGroups: Used to group the tabs opened during a multi-step task
- tabs: Used to identify active pages for AI automation tasks requested by user
- unlimitedStorage: Used to keep the on-device model cache in browser cache storage without quota eviction
- webNavigation: Used to detect page loads for automation reliability
- webRequest: Used while an agent task is running or an external MCP client is connected: a webRequest listener on <all_urls> captures the requests of the browsing session, including request bodies (for example the form field values you type) and response headers (excluding cookie and authorization-style headers), so the agent can diagnose failures. The agent can read that log through its network-request tools, so the captured material is passed to the model provider you selected.
Data Use Restrictions:
- No data is sold to third parties or advertising platforms
- No data is used for personalized advertising or credit determination
- All sensitive data processing occurs locally or through user-configured AI services with user's own API keys
- No human access to browsing data except for debugging with explicit user consent
- Data is not used beyond the single disclosed purpose (AI-powered browser automation)
17. Contact Information
For privacy questions or concerns, please contact:
Vibe Technologies, LLC
- Email: privacy@vibebrowser.app
- Website: https://vibebrowser.app
- Support: see our Support page
18. Consent
By installing and using Vibe AI Browser Co-Pilot, you consent to:
- Local storage of API keys and settings
- Transmission of data to third-party AI services
- Error tracking via Sentry.io
- This Privacy Policy
You can withdraw consent by uninstalling the extension.
Last Updated: 2026-11-09