Legal

Privacy Policy

Effective date: July 7, 2026 Version 0.5.0 Contact: hi@stephenlovino.com
Your data never leaves your machine

AI Bridge stores all captured tokens and network data inside a Python server running on your own computer (127.0.0.1). We operate no cloud database and receive no browsing data. The only outbound call AI Bridge makes is a license key validation check, described fully below.

1. What AI Bridge Does

AI Bridge is a developer tool that connects AI assistants (Claude, Hermes, or any tool you configure) to your browser. It lets AI agents read page content, click elements, type text, upload files you direct it to, and access authentication tokens from web applications you are already logged into, enabling automated workflows and auditing tasks. When AI Bridge is driven by an external tool over the local bridge, file and page content stays on your machine and never reaches our servers. The one exception is the built-in Agent Mode chat: when you use it, the page content it observes and the instruction you type are sent to the AI model provider you choose so it can decide what to do (see Section 4).

All actions are routed through a local Python server on your machine. No AI Bridge cloud infrastructure exists between your browser and your AI tools.

2. Data Collected and How It Is Stored

The following table describes everything AI Bridge reads, where it is stored, and when it is discarded.

Data type
Where stored · When cleared
Auth tokens (Bearer, Firebase ID tokens)
Local disk at bridge/.tokens.json on your machine only. Cleared when you delete the file or uninstall the bridge.
Firebase refresh tokens
Local disk at bridge/.firebase_refresh.json. Used to mint fresh ID tokens without requiring a page reload. Cleared when you delete the file.
Network request/response metadata
In-memory only. Capped at 500 entries. Cleared when the bridge server restarts.
CDP network events (Deep Capture)
In-memory only. Captured only when you manually activate Deep Capture. Cleared on restart or when you stop Deep Capture.
Page DOM / accessibility tree
Never persisted. Read on demand by AI tools and passed directly to them in-session.
License key
Stored in chrome.storage.local (your browser profile, local only). Sent to our validation endpoint once to confirm validity (see Section 4).

3. Chrome Permissions Explained

AI Bridge requests the following Chrome permissions. Each one has a specific, scoped purpose.

4. Outbound Network Requests

AI Bridge makes the following kinds of outbound network requests:

Agent Mode (built-in chat)

If you use the built-in agent chat, AI Bridge sends the current page's interactive elements and visible text, plus the instruction you type, to the AI model provider you select in Settings (for example Anthropic, Google Gemini, OpenAI, or any OpenAI-compatible endpoint). This is required for the model to understand the page and decide what to do. Any API key you enter is stored locally in your browser and sent only to that provider.

If you use the free trial option, these requests are routed through the OpenCode Go gateway (opencode.ai) using a shared key we provide, subject to that provider's terms. If you pick the local model option, inference runs entirely on your machine and nothing is sent externally, apart from a one-time model download from Hugging Face. AI Bridge does not store or log the content of these requests; it only relays them to the provider you chose, and each provider handles data under its own privacy policy.

License validation

When you enter a license key, the extension sends that key to a Cloudflare Worker we operate at ai-bridge-license.workers.dev. The Worker checks the key against Whop (our payments provider) and returns valid: true/false. No browsing data, tokens, or page content are included in this request. The key is re-checked once every 24 hours while the browser is open.

Firebase token refresh (optional)

If you use AI Bridge with GoHighLevel and have captured a Firebase refresh token, the bridge server may call securetoken.googleapis.com on your behalf to mint a fresh ID token. This request originates from your local machine and contains only the refresh token credential, not user data or browsing history.

No hidden calls

Outside of license validation, the optional Firebase token refresh, and any Agent Mode request you initiate, AI Bridge sends no telemetry, analytics, error reports, or browsing data to any remote server. It has no cloud database, no session recording, and no advertising network integration.

5. Data Sharing

AI Bridge does not sell, rent, or share your data with third parties. Captured tokens and network data flow only to AI tools running on your own machine or in environments you control (e.g., your own Claude API calls).

When you use Agent Mode, page content and your instructions are shared with the AI model provider you select (or, on the free trial, the OpenCode Go gateway), solely to fulfill your request. Those providers operate under their own privacy policies. AI Bridge does not retain this content.

Whop receives only your license key to confirm payment status. They operate under their own privacy policy.

6. Your Controls

7. Children's Privacy

AI Bridge is a developer tool intended for adults. We do not knowingly collect data from anyone under the age of 18.

8. Changes to This Policy

Material changes will be reflected in a new effective date and communicated via the Chrome Web Store release notes. Continued use after the effective date constitutes acceptance of the revised policy.

9. Contact

Questions or requests regarding this policy:

Stephen Lovino
Lovino Web Creations
hi@stephenlovino.com