Privacy Policy — Agiliton SiteBridge

Last updated: 2026-08-05

This privacy policy applies to the Agiliton SiteBridge browser extension ("the Extension"), published by Agiliton (Cyprus) ("Agiliton", "we", "us"). It explains, in plain language, what data the Extension can access, when it accesses it, where that data goes, what we store, and the choices you have.

What SiteBridge is

SiteBridge is a browser-control layer for AI assistants. It exposes your own signed-in Chrome session to an AI assistant that you run (via the Model Context Protocol, "MCP"), so the assistant can read pages and perform actions you could perform yourself — click, type, fill forms, extract tables, take screenshots, search your history or bookmarks, read a message you point it at — on the sites you already have open.

Two facts define how the Extension handles your data:

• Everything is initiated by you. The Extension performs no autonomous work, no background crawling, and no scheduled collection. It reads or acts only when your own assistant session issues a specific tool call, or you trigger an action directly. Content scripts inject but stay inert until you sign in and a tool call is made.
• Results flow back to the assistant you connected. When a tool runs, its result is returned to the MCP client you connected — either a local client on your own machine, or, if you enable the cloud bridge, Agiliton's backend (see "Where your data goes", below). That is the core mechanism to understand: the data a tool touches is sent to whoever asked for it.

A built-in integration for CAT translation editors (Smartling, Phrase, and similar) runs on top of this same surface; it is one feature, not the whole product.

What data the Extension can access, and when

The Extension requests broad browser permissions because you point it at whatever site you are working on. Each capability below is used only in response to an explicit tool call in your own session, and only for the tab or resource that call names. Nothing here is collected in the background.

The Extension does not scan your history, bookmarks, cookies, mailbox, or other tabs in bulk, does not run on a schedule, and does not act on any site without an originating request from your assistant session.

Where your data goes

Depending on how you use SiteBridge, data may leave your machine to the following destinations:

• Agiliton backend — agiliton-account.agiliton.cloud. If you use the cloud bridge, the Extension maintains an authenticated WebSocket to Agiliton's orchestrator (/v1/mcp-bridge). The AI assistant runs server-side there and calls back to your browser to run tools; the results of those tools — page content, screenshots, extracted data, and, when you invoke the corresponding tool, cookie values, history results, bookmarks, clipboard contents, and captured network data — are transmitted to this backend so the assistant can use them. Your chat messages, conversation context, and stored conversation history are also processed here (/v1/llm/responses, /v1/conversations), together with account, balance, and billing calls. You can run SiteBridge against a purely local MCP client instead, in which case tool results stay on your machine and are returned only to that local client.
• Related Agiliton services. Depending on the feature you use: translate.agiliton.cloud (translation/glossary), generator.agiliton.cloud, design.agiliton.cloud, crm.agiliton.cloud (content features), id.agiliton.eu (sign-in / OAuth), and a runtime-configuration file served from Agiliton object storage hosted at Hetzner (Germany).
• Your chosen LLM provider. Agiliton routes model requests through its gateway to the provider configured for your account — for example Anthropic, OpenAI, or a customer-supplied model. That provider processes the content of your request under its own terms for that hop.
• Google APIs, under your own authorization. If you use the Google Workspace export or page performance features, the Extension calls Google APIs (Docs, Drive, Chrome UX Report) using an OAuth token you grant. This happens only for those features and only with your consent.
• Error reporting — Sentry (EU region). The Extension sends crash and error reports to Sentry, a third-party error-monitoring service, hosted in the EU. Each report includes your account email and customer ID, the Extension version, and technical error details (which may incidentally contain a page URL in an error message or breadcrumb). Before a report is sent, we automatically remove authentication tokens, OAuth codes, and API keys. We do not use Sentry session replay, and we do not capture page content or screenshots into error reports. No other third-party analytics, telemetry, advertising, or fingerprinting service is included in the Extension.

We do not sell your data, and we do not share it with third parties except the service providers named above, each acting to provide SiteBridge to you.

What we store on your device

The Extension stores the following locally (in chrome.storage and IndexedDB). This data stays in your browser and is not transmitted except as described above:

• Authentication tokens (JWTs) for your Agiliton account(s), and your settings and per-tenant configuration.
• Flow recordings you record for replay — stored locally only, with sensitive input values redacted before they are saved.
• An action/audit log (hash-chained, in IndexedDB) recording actions the assistant took, and an undo log so you can reverse them.
• Userscripts you save, and a cached copy of the runtime configuration.

You are in control of this data: signing out from the side panel clears your tokens, and uninstalling the Extension removes all locally stored data.

Data retention

Locally stored data persists until you sign out or uninstall (see above). On Agiliton's backend, request content is processed to provide the service and is not retained beyond what is needed for that purpose; conversation history you create is stored under your account until you delete it. Error reports in Sentry follow Sentry's standard retention. You can request deletion of account-level data we hold by emailing service@agiliton.eu.

Your rights

Agiliton is established in the EU. Subject to applicable law (including the GDPR), you have the right to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact service@agiliton.eu. You can also disconnect the cloud bridge, revoke the Extension's Google authorization from your Google Account, and sign out or uninstall at any time.

Permissions

The Extension requests each browser permission to back a specific tool; permissions with no active tool are not requested. Agent-driven browser control — not the translation integration — is the justification for the higher-scrutiny permissions (debugger, host access to the sites you use).

Children

SiteBridge is a professional tool intended for business users and is not directed at children.

Changes

If we materially change this policy, we will update the "Last updated" date above and the published policy page, and the Extension will surface a notice directing you to the updated text.

Contact

Agiliton — Privacy
service@agiliton.eu