Matrx Extend — Chrome Extension Privacy Policy

Overview

Matrx Extend (the “extension”) is an opt-in AI assistant published by AI Matrx. It runs in your browser’s side panel and helps you understand and act on the web page you are currently viewing. Page capture and AI actions follow the controls described below. When you are signed in, optional Vault features also detect login fields to offer saved logins and ask whether to save a login you enter.

You can use the extension either with a Matrx account or as a guest, without creating an account. Guest use is described in its own section below.

This policy describes only the extension’s data practices. The broader AI Matrx website and platform are covered by the main AI Matrx Privacy Policy, which this document supplements.

Single purpose

The single purpose of Matrx Extend is to be an AI assistant that helps you understand and act on the web page you are currently viewing, from the browser side panel.

Everything the extension does serves that one purpose: answering questions about the current page, pulling information out of it, and — only when you ask — performing actions on it such as filling a form or navigating. Full-page processing runs for a feature you invoke or automatic page capture you explicitly enable. Vault login detection and saved-login matching are separate controls, described below. The default permission mode asks before actions that change a page; privileged actions always require confirmation.

What the extension accesses

Full-page capture starts when you take a deliberate action in the side panel, popup, or context menu. Automatic page capture is a separate setting, off by default. Signed-in Vault login offers inspect login-form structure and can match the current site to saved logins without capturing the full page for an AI model.

• Account information. Your Matrx user identity (email and the OAuth tokens issued by Supabase) is stored locally in chrome.storage, with the refresh token AES-GCM-encrypted at rest. These tokens are used to authenticate requests to your own Matrx account and are not shared with any third party.
• Page content you choose to capture. When you click an action such as “Scrape this page”, “Run SEO audit”, or “Extract data”, the extension reads the current tab’s DOM (text, images, links, structured data) and processes a cleaned representation locally or sends it to the Matrx service when the feature requires server processing or saving. We do not capture pages you have not acted on unless you explicitly enable automatic capture in Settings.
• Chat input you provide. Messages you type into the Chat tab, plus any context you explicitly attach (for example, the current page title and URL), are sent to your Matrx backend so your selected agent can respond. Conversation history is stored under your account.
• Saved extraction patterns. Patterns you define in the Data tab — selectors, field names, the URL or domain they apply to — are saved to your Matrx account so they can be reapplied on future visits.
• Website logins you choose to save (Vault). When you are signed in to Matrx, the side panel has a Vault tab for website usernames and passwords you save to your own Matrx account. A login can enter the Vault in three ways, each requiring your deliberate action: you type it into the Vault tab; when you submit a website login yourself, the extension shows a small “Save this login?” prompt (on the page and in the Vault tab) and saves only if you click Save or Update; or, when an AI agent you are directing reaches a login it has no saved credential for, it shows you a box in the side panel to type the login yourself. In every case the username and password travel over HTTPS only to your Matrx account’s Vault, are encrypted at rest on our servers, and are never sent to an AI model provider or shown to the assistant. A saved login is filled into a page only for the website it was saved for, and only when you select a saved login beside a login field, click “Use here”, or authorize an agent action that asks for it. Selecting an inline saved login fills its fields; it does not submit the form. The save prompt displays only the site and the username you entered; it holds the password briefly in extension memory (never on disk) and discards it if you dismiss the prompt or do nothing for a few minutes. You can turn the prompt off in Settings → Privacy, silence it for individual sites, and view, edit, or delete any saved login at any time.
• Saved-login suggestions. When you are signed in and “Offer saved logins” is enabled, focusing a supported login field can send the current site’s origin and path (without query parameters or fragment) to your Matrx Vault to find matching saved-login metadata. The setting is on by default and can be turned off in Settings → Privacy. Matching does not send the values you have typed or full-page content, and does not send a password to an AI model. You choose an account before its authorized fields are filled. Signed-out users do not receive Vault matches.
• Swipe file items you choose to save. When you are signed in and choose to save a supported social post or ad, the extension sends its URL to the Matrx service to retrieve the post and any available media or transcript. The service may use external social-data providers to retrieve that public post. The item is associated with a collection in your chosen organization. The retrieved post and media may also remain in a shared Matrx cache after you remove the item from your collection. Notes or tags you add are saved with the item. Visiting a post alone does not save it to your Swipe file.
• Configuration diagnostics. The extension reads public runtime settings from Supabase and keeps a last-seen copy on your device. For a signed-in account, it registers the extension installation with your account and organization and periodically reports the app version and build identity, report-interval start and end times, and each setting key's first and last read times, read count, source counts, invalid count, applied-status counts, and propagation status. It also reports which setting keys were missing. Read records can wait in local storage until a report succeeds. Records collected while signed out may be included in reports after you sign in. These diagnostics help us identify configuration problems. App-config reads include a short fingerprint derived from the last value read for each key; feature-knob reads do not include their values. Reports do not include raw setting values, page content, or a list of sites you visited.
• Local preferences. Settings such as your preferred backend environment, UI state, pairing tokens for an optional local desktop companion app, and the list of sites you asked the save-login prompt not to ask about again (site addresses only) are stored in chrome.storage on your machine.

What the extension does NOT do

• We do not train AI models on your data. Content captured through the extension is stored in your account so you can use it. It is not used to train, fine-tune, or improve any model — ours or anyone else’s.
• We do not sell or rent your data to data brokers, advertisers, or any third party.
• We do not use your data for advertising, including personalized advertising, profiling, or creditworthiness determinations.
• Automatic capture is opt-in. It is off on a fresh install. If you enable it in Settings, the extension captures the active page after navigation so it is ready for your next chat request. The extension does not silently crawl unrelated tabs, and it does not send a browsing-history list.
• We do not let humans browse your captured content except (a) with your affirmative consent, (b) as required for security or fraud investigation, or (c) to comply with applicable law.

These commitments mirror Google’s Chrome Web Store Limited Use requirements and apply to all data the extension handles.

Where your data goes

• Supabase (operated by AI Matrx) — for authentication and direct, row-level-secured reads/writes of your saved captures, patterns, conversations, Swipe file items, and signed-in configuration diagnostics.
• Matrx backend at server.app.matrxserver.com — for agent execution, streaming responses, server-side processing, and your Vault of saved website logins (stored encrypted at rest under your account; never forwarded to an AI model provider).
• Social-data providers. When you choose to save a supported social post or ad, the Matrx service may send its public URL to an external provider to retrieve the post and available media or transcript.
• AI model providers. To generate a response, the Matrx backend forwards your message and any page context you included to the AI model provider that the agent you are using is configured to run on (for example Anthropic, OpenAI, or Google). This means the content of a page you engage the assistant on can be sent to that provider. Providers are used to generate your response; we do not authorize them to use your content to train their models.

If you have paired the optional Matrx desktop companion app, the extension may communicate with it locally on your machine; that traffic does not leave your device.

Why each Chrome permission is requested

• Host access (<all_urls>). Required because users decide which pages to scrape, audit, or extract structured data from — the extension cannot know in advance which sites a user will work with. A lightweight content-script bridge is present on normal web pages so the side panel can respond immediately; it does not transmit page content until the user invokes a feature or has explicitly enabled automatic page capture. Signed-in Vault offers separately inspect login forms and send site origin/path for saved-login matching as described above.
• activeTab + scripting. Used to inject the scrape collectors and the structured-data picker into the current tab when the user triggers them.
• tabs + tabGroups. Lets the assistant identify the active page and, when requested, open, switch, close, or group browser tabs.
• storage. Persists your session tokens, preferences, and cached extraction patterns locally in chrome.storage.
• sidePanel. Renders the extension’s primary UI as a Chrome side panel.
• identity. Powers the OAuth sign-in flow via chrome.identity.launchWebAuthFlow against the Matrx Supabase auth endpoint.
• offscreen. Holds long-running fetch/SSE streams (agent responses, scrape pipelines) so they are not cut off when Chrome suspends the service worker.
• nativeMessaging. Optional. When the user has installed the Matrx desktop companion app, the extension uses native messaging to talk to it locally for advanced file-system-aware workflows. The extension functions fully without it.
• alarms. Schedules a token refresh ahead of expiry and runs user-scheduled tasks at the requested time.
• contextMenus. Adds right-click actions for sending the current page or selected text into the extension.
• clipboardWrite. Lets the user copy extracted content (Markdown, JSON, etc.) to the clipboard.
• downloads. Saves user-initiated exports of captured data to the user’s local file system.
• webNavigation. Detects tab navigation events so the extension can recognize when the user has returned to a page that already has a saved extraction pattern.
• history + bookmarks + sessions. Lets the assistant search browser history, read bookmarks, and restore a recently closed tab only when the user requests those actions.
• notifications. Alerts the user when a task they started completes or needs attention.
• debugger. Supports advanced browser functions Chrome does not expose through narrower APIs, including full-page capture, PDF export, workflow recording, page-network inspection, accessibility inspection, difficult page interaction, and viewport emulation. It is not used to execute code. Chrome displays its debugging banner whenever this access is active.
• Optional permissions. Cookies, page capture, clipboard read, and tab capture are off until the user grants them at runtime for the matching advanced feature. They can be revoked from the extension Settings or Chrome settings.

Guest access (using the extension without an account)

You can open the side panel and use the assistant immediately, as a guest, without signing up. Swipe file and signed-in configuration reporting require a Matrx account. This policy applies to guest use as described below.

To make that work, when you use the extension as a guest:

• We create an anonymous account for you. Your installation generates a random identifier (it is not derived from your name, email, IP address, device hardware, or any other personal information). We send that identifier with your requests and use it to create and recognize an anonymous account on our servers, so your conversation can be processed and so we can apply fair-use limits.
• Your guest activity is stored under that anonymous account — the same conversations and content described elsewhere in this policy, handled the same way. It is not linked to a real-world identity, because we do not have one for you.
• If you later create an account or sign in, your guest activity is carried over and becomes part of that account.
• You can clear it. Uninstalling the extension, or clearing its local storage, discards the identifier on your device. To delete the anonymous account data held on our servers, email support@aimatrx.com. Because guest accounts are anonymous, please send the request from the extension while the identifier is still installed, or include it, so we can find the right records.

Your controls

• Use it as a guest — you are not required to create an account to use the assistant.
• Sign out from the Settings tab clears local tokens immediately.
• Uninstall the extension to remove all extension-local storage.
• Delete saved data (captures, patterns, conversations, SEO audits) at any time from your Matrx account, or by emailing us. You can remove a Swipe file item from your collection; this removes the collection association but does not necessarily erase the retrieved post from the shared Matrx cache. Contact us about a deletion request for cached data.
• Saved website logins can be viewed, changed, or deleted at any time from the Vault tab or your Matrx account. The “Save this login?” prompt can be turned off in Settings → Privacy, or silenced for individual sites. “Offer saved logins” has its own control there.
• Account deletion requests — for a full account or for an anonymous guest account — can be sent to support@aimatrx.com.

Children

Matrx Extend is not directed to children under 13 and we do not knowingly collect data from them.

Changes

We will update the “Last updated” date and the body of this page if our extension data practices change. Material changes will also be surfaced in the extension itself.

Contact

Questions about this policy or a request related to your data: support@aimatrx.com or via our contact form.