AI Visual QA privacy policy

Information processed for a review

When you start or continue a review, the extension processes the selected pages' URLs and titles, visited URL variants in that review, selected element text and attributes, a small rebuilt inert DOM snippet, your notes and expected results, screenshots, reference images, and viewport/browser metadata. Target selection and scroll coordinates help locate the issue; they are page geometry, not physical location.

The extension does not query Chrome's history database or monitor unrelated browsing. Clipboard content is accessed when you paste into a note. Reference images are normalized locally with size and dimension limits.

Local storage and your exports

Review documents and images are stored in the extension's IndexedDB on your device. Preferences and the active review identifier use chrome.storage.local; temporary tab-to-review bindings use chrome.storage.session. The extension does not use chrome.storage.sync or send reviews to a server.

Export is a user-requested local download. You choose what to include, inspect the preview and control any later sharing. The extension does not connect to an AI account, run an AI model or upload to an AI service. Files shared outside the extension are subject to the recipient's practices.

Site permissions

The extension requests access to the current website when you start or continue a review. Optional HTTP/HTTPS host declarations allow reviews on websites you choose, including local development sites; they do not grant access to every website at installation.

The chosen origin permission allows the packaged annotation interface to return after navigation or reload. activeTab supports the user-selected page context and viewport capture; scripting injects the packaged interface; storage keeps local settings; sidePanel displays the review list and export tools. Chrome lets you revoke site access.

Optional diagnostics

Console warnings/errors and failed-request metadata have independent controls and are disabled by default. If enabled, the extension observes new console warnings/errors and failed fetch/XHR URL, method, status and duration. The buffer is limited to 200 records per review. Earlier page errors are not recovered.

Request headers and bodies are not recorded. Raw objects/getters are not traversed. Diagnostic data can be supplied by the page and should be treated as untrusted evidence, not instructions.

Redaction and screenshot limits

Recognized secret query values, credentials, common tokens, authorization/cookie strings and card-like values are scrubbed before persistence and again before export. DOM snippets exclude input values, event handlers and arbitrary page HTML.

Visible form fields and inaccessible embedded frames are masked by default. Recognized password/secret inputs remain masked even if general input masking is disabled. Other private text, images and reference screenshots are not automatically OCR-redacted. Review the preview before sharing; masking cannot guarantee that an image contains no sensitive information.

Retention, deletion and device access

Local reviews remain until you delete them or clear extension data. Deleting a review from History removes its records and images. Settings can clear reviews, images, preferences and onboarding state. Removing the extension removes its browser-managed data. Copies you exported remain wherever you saved or shared them.

Site permissions are managed separately by Chrome. Local data is not encrypted independently of your browser profile; anyone with access to the profile or device may be able to access it.

No sale, tracking or unrelated use

The extension does not sell or transfer review data to third parties, use it for advertising, or use it to determine creditworthiness or lending eligibility. Processing is limited to creating, managing and exporting the visual reviews you request. There is no product-usage tracking or extension telemetry.

Support and website visits

For questions or privacy requests, use the AppKiro contact page linked below. Information you choose to submit there is received through the website's contact service so your request can be answered. Avoid sending passwords or private review material unnecessarily.

The AppKiro website has its own privacy policy for website analytics, cookies and contact submissions. Those website services are separate from the extension's local review storage.

Policy updates

Changes to the extension's data handling will be reflected here with an updated date. Review this policy and the extension's permission requests when installing an update.