Privacy policy

Changent is a Chrome extension that runs an AI agent in your browser side panel to help automate repetitive web workflows. This policy describes how we handle information when you use the extension, our website at getchangent.com, and related services.

Questions or requests: [email protected]

• Chat history is stored locally in your browser unless you delete it.
• In the default open-source setup, your messages and relevant page context are sent from the extension through a local proxy you run to the model provider you configure. Optional hosted deployments may route requests through their operator's backend instead.
• Hosted Changent deployments may store account information, usage metadata (tokens, cost, model), and billing records on the operator's servers. Self-hosted setups do not send that data to Changent by default.
• If you submit product feedback on a hosted deployment, the operator may store your message. A full agent trace is included only when you opt in.

Information you provide

• Account: When a hosted deployment enables sign-in, you may authenticate with Google. The operator receives your email address and display name through their authentication provider (often Supabase). A waitlist on the marketing site, when configured, may use the same flow.
• Chat and instructions: Messages you send to the agent, including workflow instructions and answers to agent questions.
• Feedback: Text you submit when reporting an issue with an assistant message. You may optionally include a full agent trace for that conversation.

Information collected automatically

• Usage metadata: On hosted deployments with telemetry enabled, conversation ID, model ID, token counts, estimated cost, turn and message indices, and related billing events. Operators do not include conversation text in routine usage telemetry.
• Local extension data: Conversations, settings, your authentication session token, tab-group mappings, and optional per-site customization scripts are stored in your browser (IndexedDB and Chrome storage).

Information from websites you use

When you direct the agent to work on a page, the extension may read and process information from those pages to complete your request. Depending on the tools used, this can include:

• Page URLs and tab titles
• Page structure (accessibility tree)
• Visible text and form field values
• Screenshots
• Results of JavaScript run in the page context
• Console messages

This data is used to operate the agent. In the default open-source setup, it is sent from the extension through your local proxy directly to the model provider you configure. Optional hosted deployments may route the same data through their operator's backend before forwarding it to model providers. The extension accesses only pages and tabs you interact with through the extension.

Avoid using the agent on pages with passwords, payment details, medical records, or other highly sensitive information unless you accept that such data may be sent to AI providers to fulfill your request.

Product analytics on our marketing site at getchangent.com is disabled by default. Site operators may explicitly enable PostHog by setting a project key and turning analytics on in deployment configuration. When enabled, PostHog can collect page views and on-site interactions; operators should configure analytics to match their privacy policy.

• Waitlist: When a waitlist is configured, joining may sign you in with Google through Supabase (or another auth provider the operator configures). The operator may store your email address and display name even if you never install the extension.
• Sign-in session: When sign-in is enabled, the auth provider stores a session in your browser so you stay signed in on return visits.
• Fonts: The site loads display fonts from Google Fonts. Your browser sends a request to Google that may include your IP address. Google privacy policy

Changent requests permissions required to automate browser work:

• Host access (<all_urls>): Interact with websites you ask the agent to work on.
• Debugger: Automate pages via the Chrome DevTools Protocol (clicks, typing, scrolling, screenshots).
• Tabs and tab groups: Manage tabs in the agent's tab group and provide tab context to the agent.
• Scripting: Run scripts for agent tools and optional per-site customizations.
• Storage: Save conversations and settings locally.
• Identity: When sign-in is enabled, sign in with Google.
• Notifications: Send OS notifications when the agent needs input or reports a blocker.

• Run the agent and browser automation tools
• On hosted deployments, authenticate you and manage usage credits and billing
• On hosted deployments, record usage metadata for operations and account limits
• On hosted deployments, review feedback you submit, including optional traces when provided
• Maintain and improve the product
• Respond to support requests

We share data with service providers that help us operate Changent:

• Fireworks AI — processes model inference requests. Prompts may include your messages, system context, tool outputs, and page content. Fireworks privacy policy
• Exa — processes web search queries when the agent uses the web search tool. Exa privacy policy
• Supabase — hosts authentication and our application database (profiles, usage telemetry, billing, and feedback). Supabase privacy policy
• Google — provides OAuth sign-in and hosts fonts loaded by our website. Google privacy policy

During agent inference, messages and page context are forwarded to model providers. In the default open-source setup, that path runs through your local proxy without a Changent-operated backend. Optional hosted deployments may route the same data through their operator's backend in transit. Hosted operators may retain usage metadata and billing records; model providers may retain inference content under their own policies.

We do not sell your personal information. We may disclose information if required by law or to protect rights, safety, and security.

• Conversations: Stored locally in your browser until you delete them or uninstall the extension.
• Agent requests: Message and page context are sent to model providers to generate responses. In the default open-source setup, that path runs through your local proxy. Optional hosted deployments may route the same data through their operator's backend in transit. Content may be retained by AI providers under their policies.
• Usage metadata: On hosted deployments, retained for billing and operations while your account is active and for a reasonable period afterward.
• Account data: On hosted deployments, retained while your account exists. You may request deletion (see below).
• Feedback: On hosted deployments, retained until resolved or no longer needed for product improvement, unless you request earlier deletion.

Third-party providers may retain data according to their own policies. We select providers with data-handling practices appropriate for this product, but their retention is governed by their terms.

• Delete conversations in the extension at any time.
• Uninstall the extension to remove locally stored data from your browser. On hosted deployments, this does not delete your account, usage metadata, billing records, or feedback stored on the operator's servers.
• Sign out to end your authenticated session.
• Submit feedback without including an agent trace unless you opt in.
• Email [email protected] to request access to or deletion of account data we hold on our servers.

We use HTTPS for data in transit and industry-standard authentication for accounts. No method of transmission or storage is completely secure; we work to protect your information but cannot guarantee absolute security.

Changent is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

We may update this policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use after changes means you accept the updated policy.

Changent
[email protected]
getchangent.com