Chrome extension privacy

Updated October 29, 2026. This describes the Avori Chrome extension, available from the Chrome Web Store and used with an Avori account.

What you share

Invoking the extension gives Avori access only to the website tabs you allow. During an authorized task, page text, control labels, tab titles and addresses, and action results can be sent to Avori and the model provider selected for your task. Treat a shared page as task context, not as a private area hidden from your agent.

Types of information handled

Website content and action results may include personally identifiable information, personal communications, financial and payment information, health information, or location information when that information appears on a page you authorize Avori to read or is included in an action you approve. These categories are not automatically removed from page text. Do not share a page containing information you do not want sent to Avori and your selected model provider.

Tab titles and URLs are browsing-activity information, even though the extension does not read Chrome's stored history database. User activity includes the browser actions requested and performed for your task. Authentication information includes Avori's short-lived setup codes and connection tokens; the extension does not access Chrome's saved passwords or cookie store. Its sensitive-form detection is a safeguard, not a guarantee that every secret embedded in page text or a URL will be identified.

Saved browser connection (version 0.8 and later)

Choose Connect my Chrome once while signed into Avori, then approve the optional Chrome tab and website permissions. The saved connection belongs to your Avori user and company. Your agents can discover it from your other conversations; another teammate does not inherit it. Chrome must be running and online. Closing the controls window does not disconnect it, and restarting Chrome reconnects it automatically.

Avori for Chrome never shows a prompt: when a step needs your OK, your agent asks you in the Avori chat, following your approval setting there (Ask for approval, Approve for me or Full access). Below Full access, the first use of a website you haven’t allowed and recognized consequential controls (send, post, pay, submit, order and similar) wait for your OK in the chat; Avori sends that step to Chrome only after you allow it, and only once. Allowing a website remembers it; you can remove it, or allow all websites, in the extension’s Settings. Sites you blocked stay blocked. Opening, switching, reloading and closing tabs don’t ask; a tab you opened that has unsaved changes is left open. Detection is not a guarantee about every website action. Incognito windows, Chrome settings pages, the Chrome Web Store and Avori itself are excluded. Tab titles and addresses may be listed so your agent can locate the relevant page.

Signing in from the extension (version 0.9 and later)

When you add the extension, a welcome tab offers Sign in to Avori. Chrome asks for its tab permission, then Avori opens in a tab where you sign in as usual. Avori creates a short-lived, single-use code for your own account, and the extension saves this Chrome to that account; no code is copied by hand. The extension shows which Avori account it’s connected to. The extension doesn’t use Chrome’s identity or sign-in information: this Chrome is named after its operating system, such as “Chrome on macOS”, and you can rename it in the extension or in Settings › Chrome extension, where you can also disconnect it. The extension reports its version and that name to Avori so Settings can show them.

Temporary access and older versions

Temporary single-tab sharing remains available separately. Previously installed versions keep their previous behavior until updated. Version 0.5 shares one tab for fifteen minutes, or optional any-tab access for two hours extendable up to eight hours, with local approval for changes. Version 0.7 additionally supports renewable connections and delegated task access while its controls remain open. These temporary modes do not become saved account connections without your explicit setup.

Connecting from Avori

Avori can check whether its extension is installed. Opening Connect my Chrome sends a short-lived setup code and conversation label to the extension. This alone does not share a website or start a task. You confirm the saved browser connection and permissions inside the extension. Only the Avori website can prepare this handoff.

What stays on your computer

The extension does not read Chrome's cookie store, saved-password store or stored browsing-history database. It can read information displayed within authorized pages and titles and URLs of open tabs. Saved connections use a revocable device token and website preferences in local, trusted-extension-only storage, not browser sync. This storage relies on your browser profile and operating-system protections; it is not an encrypted password vault. Temporary tab handles and in-progress execution state use session storage. Disconnect removes the saved local connection; Avori sign-out revokes its server access.

Your controls

Stop browser work pauses the saved connection and cancels pending work. Resume allows new requests, without replaying an interrupted action. Disconnect removes browser access for the connected account. Stopping a chat cancels that task without removing your saved browser setup. Completed website changes are not undone. Sign-in and sensitive forms require your participation; passwords or other secrets embedded elsewhere on a page may not be detected. You can remove Chrome permissions or uninstall the extension at any time.

Storage and use

Avori encrypts hosted browser-command state and scopes the connection to the user and company, with each task and result bound to its authorized conversation. Task observations can also appear in the conversation and its model context. Revoking access does not itself delete conversation content. A background connection sends availability checks and retrieves authorized task commands while enabled; it does not continuously scrape your pages. No extension analytics or advertising scripts are included.

Limited use

Avori's use of information received through this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension data is used to provide and secure the user-facing browser-assistance task. It is not sold, used for advertising, used for unrelated purposes, or used to determine creditworthiness or for lending. We do not use extension data, including derived or de-identified data, to train general-purpose AI models.

Data may be transferred to the model provider selected for your task and service providers necessary to deliver or secure that task, or where permitted by the policy for legal obligations or a business transfer with the required prior user consent. Human access is limited to the exceptions permitted by that policy, such as your consent to inspect specific data for support, security investigations, legal obligations, or aggregated and anonymized internal operations.

For privacy questions or requests, contact DREAM TUESDAY LLC, Washington State, United States, at hello@getavori.com. Our Privacy Notice explains retention, deletion and your rights.