Application Privacy Notice

Last updated: 30 October 2026

This notice explains how AutogenAI Ltd (“AutogenAI”, “we”, “us” or “our”) processes personal data when organisations and their authorised users use the AutogenAI application, including the AutogenAI Assistant browser extension. It should be read together with our Application Terms and Conditions and Application Cookie Policy.

This notice does not cover personal data we collect when you visit our website. That is covered by our Privacy Policy.

1. Our role

We provide the AutogenAI application to organisations (“Customers”) under a written agreement. When we process personal data contained in content that a Customer’s authorised users submit to, or retrieve through, the application, we act as a processor on behalf of the Customer, which is the controller. We process that personal data only on the Customer’s documented instructions, as set out in the Customer’s agreement with us and our Data Processing Addendum (“DPA”).

If your personal data is processed through the application on behalf of a Customer, please direct requests to access, correct or delete it, and any other questions about how it is used, to that Customer. If you contact us instead, we will pass your request to the relevant Customer where we can identify them.

2. How we use and share personal data in the application

We use personal data processed through the application only to provide the application to the Customer, in line with the Customer’s agreement with us and the DPA.

We do not use Customer content to train AI models, and our large language model (LLM) providers are contractually prohibited from doing so.

To provide the application, we share Customer content with our sub-processors, including LLM providers that generate responses to users’ prompts. Our sub-processors are listed in Annex A of our Data Processing Addendum.

We retain Customer content in line with the Customer’s agreement with us and the DPA. The use of cookies and similar technologies in the application is described in our Application Cookie Policy.

3. AutogenAI Assistant Chrome Extension

This section covers the AutogenAI Assistant browser extension for Google Chrome (the “Extension”).

How the Extension works

The Extension shows the AutogenAI application inside the Chrome side panel by loading https://{region}.autogenai.com/chrome in an iframe. All AutogenAI product logic runs in the AutogenAI application and backend. The Extension itself is a thin wrapper.

Local storage

The Extension stores the identifier of the AutogenAI region the user has selected on the user’s device, in chrome.storage.local, so that it remembers the user’s region.

Data transmitted when the user invokes a browser tool

Read current page. When the signed-in user invokes this action, the Extension sends the active browser tab’s URL, document title and full HTML to the selected AutogenAI region over HTTPS. The page may include personal data about the user or other people, such as names, email addresses or contact details. AutogenAI processes this content to answer the user’s prompt and shares it with its sub-processors, including the LLM provider that generates the response. Our sub-processors are listed in Annex A of our Data Processing Addendum (the “DPA”) at https://autogenai.com/dpa/.

Fill form. When the signed-in user invokes this action, the Extension writes values provided by the AutogenAI application into form fields on the active tab. The AutogenAI application usually identifies which fields to fill using page content already sent through Read current page. The Extension does not read any further content from the page. For each field, it returns only a status to the AutogenAI application: filled, not found, unsupported or error.

Apart from these user-invoked actions, the Extension itself collects no analytics, telemetry or browsing data. Analytics within the AutogenAI application in the side panel are covered by our Application Cookie Policy.

How we use and share this data

This section is subject to our obligations under the DPA which is hereby incorporated within this notice by this reference. AutogenAI uses data received through the Extension only to provide the AutogenAI application to the Customer. We do not sell it, use it for advertising or use it to train AI models. Our staff do not read it unless the user has given explicit consent, it is needed for security purposes, or it is required to comply with applicable law.

The use of information received through the Extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

Retention

Content transmitted through the Extension is Customer data under the Customer’s agreement with AutogenAI. It is retained in line with that agreement and our DPA.

Our role

For personal data processed through the Extension on behalf of a Customer organisation, AutogenAI acts as a processor. Individuals should direct access, deletion and other requests to the relevant Customer organisation.

4. Security

We protect personal data processed through the application using the technical and organisational measures described in our DPA. AutogenAI is certified to ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018.

5. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed.

6. Contact us

If you have questions about this notice, please contact our Data Protection Officer at [email protected] or write to AutogenAI Ltd, 5th Floor, 123 Pentonville Road, London N1 9LG.