Extension privacy policy

In short

• Manovre only reads and acts on the tab you have switched on yourself, by clicking “Activer” (Activate). A banner shows it on the page, and you can stop it at any time.
• It never reads what your password or card fields contain. It takes no screenshots and reads neither your cookies, nor your history, nor your other tabs.
• It never clicks a payment or order button.
• Manovre asks for no account and no email address, and contains no analytics or advertising tools.
• What Manovre reads is only used to carry out your agent's requests. We do not sell it and do not use it for anything else.

1. Data controller

COACHING BUSINESS 360, SAS, SIREN 894 654 458, 9 chemin du Pontet, ZAC du Pontet, 69380 Civrieux-d'Azergues, France. Contact for your data: contact@antony-rouxel.com.

2. How Manovre works

Manovre connects three things: the extension, installed in your browser; the gateway, our server; and your agent, meaning the Telegram bot or AI assistant you choose to connect. Your agent sends a request (read the page, click, fill in a field) to the gateway, which passes it to the extension. The extension carries it out in the switched-on tab, then sends a description of the page back to your agent, through the gateway.

3. What the extension reads on the page

Nothing is read before you click “Activer”. After that, and only in the switched-on tab, on web pages over http or https, the extension reads:

• the page's address and title, and the scroll position;
• the elements you can act on (buttons, links, fields, lists), 80 at most, among those that are visible or close to the screen: their type, label, state (checked, disabled), the options of a list and the address of a link;
• the contents of ordinary fields, 300 characters at most per field;
• the visible text of the page, 6,000 characters at most.

Passwords and bank cards. By default these fields are excluded: the extension does not describe them and cannot fill them in. In the settings, the “Allow sensitive fields” option, off by default and preceded by a warning, lets your agent fill them in. Even then, the extension never reads what they contain. What your agent types into them passes through the gateway while the request is carried out (section 5), and is never written to our logs.

What the extension does not do. It takes no screenshots and reads neither your cookies, nor your history, nor your other tabs. It does not act on the browser's internal pages.

When reading stops. When you press Stop in the panel or “Arrêter” (Stop) in the banner, when you close the tab or the panel, and on its own after 15 minutes without any action.

4. Permissions requested

• Access to websites (all addresses): so it can act on whichever page you choose to switch on. The extension only enters it after you click “Activer”, and only in that tab.
• Scripting: to place in the switched-on tab the small program that reads the page and carries out the actions.
• Side panel: to show the Manovre panel, where you see every action and where the Stop button is.
• Storage: to keep your settings in the browser (section 6).
• Alarms: to stop Manovre after 15 minutes without any action and to keep the connection with the gateway alive.

5. What goes to the gateway and to your agent

When your agent asks for it, the extension sends the gateway the description of the page (section 3) and the result of each action. The gateway hands it to your agent. It also passes on your agent's requests, including any text it wants to type. While a tab is switched on, the extension sends a presence signal every 60 seconds, with no page content.

Your agent. Once handed to your agent, the page description is processed by it and by the services it uses (for example Telegram and the provider of its AI model), under their own terms. You choose this agent: we have no control over what it does with the data it receives.

Another site. If your agent wants to go to a site other than the one it started on, the panel asks for your agreement. With no answer within 25 seconds, the answer is no.

6. What is kept, and for how long

In your browser. A randomly generated installation identifier, a secret code that lets your extension identify itself to the gateway, the gateway's address and your settings (sensitive fields, time limits). The state of the current activation is kept until the browser is closed. All of this is deleted when you uninstall the extension.

On the gateway.

• Your installation: its identifier, a fingerprint of its secret code (never the code itself), a fingerprint of your IP address, deleted after one day, and the dates it was created and last connected. An installation that has not connected for 90 days is deleted.
• Your connected agent: the name it gives itself and, if it provides them, its Telegram username and the public photo of its profile, with a fingerprint of its access token. The token expires after 24 hours without use, and at most 30 days after the connection. When you disconnect the agent, or when it expires, this data is deleted within 10 minutes.
• An agent's connection code (MNV-…): kept as a fingerprint, valid for 10 minutes and a single use, deleted 10 minutes after it expires.
• Requests in progress: your agent's request (including any text to type) and its result (the page description). They are deleted as soon as your agent has read the result, and at the latest 10 minutes after they were created.
• Activations: when they opened, last signalled and ended. An activation with no signal for 10 minutes is closed, then deleted 10 minutes later.

Technical logs. For each call, the gateway records the date, the installation identifier, the agent's name, the page's domain name (not its full address), the list of actions without the values typed, the result and the duration. Neither page content nor typed text appears in them. They are kept for 1 day. Your IP address is also used to limit the number of requests: it is then kept in memory only, never written.

7. Our service providers

• Vercel (United States): hosts the gateway, in Paris. It receives everything that passes through the gateway (section 5) and your IP address.
• Supabase (United States): hosts the gateway's database and the channel that tells it about a new request, in Paris. This channel carries no page content.
• Telegram: if your agent gives its Telegram username, the gateway fetches the public photo of its profile from t.me, to show it in the panel.

These providers act on our instructions.

8. Transfers outside the European Union

Vercel and Supabase are American companies, even though the gateway and its database are hosted in Paris. When data is transferred outside the European Union, these transfers are covered by safeguards recognised by the European Commission (standard contractual clauses, or the EU-US Data Privacy Framework for companies that have joined it).

9. Legal bases

• Providing the service you ask for: reading the page and carrying out the actions of the agent you connected.
• Our legitimate interest: the security of the service and the fight against abuse (request limits, technical logs).

10. Your choices and your rights

Stopping and erasing. Stop switches everything off and closes the activation. “Déconnecter” (Disconnect), in the panel, removes your agent's access and deletes its data within 10 minutes. In the panel's settings, “Delete my data”, confirmed with “Delete permanently”, erases your installation and everything linked to it on the gateway (connected agents, activations, requests), then resets the extension. Uninstalling the extension deletes everything it kept in your browser. You can also write to us.

You have the right to access, correct, erase, restrict, object to and port your data. You can also give us instructions on what happens to your data after your death. To exercise these rights, write to contact@antony-rouxel.com. If you are not satisfied, you can contact the French data protection authority, the CNIL (www.cnil.fr).

11. Limited use

The data Manovre reads is used only to carry out, at your request, your agent's actions in the switched-on tab. It is not sold, not used for advertising or to assess creditworthiness, and not passed to anyone other than the providers in section 7 and the agent you connected. No one on our side reads it, except with your agreement, for security, or where the law requires it. This use complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

12. Analytics

The extension and the gateway contain no analytics, advertising or tracking tools.

13. Changes

If we make significant changes to this policy, we publish the new version on this page, with its date, before it takes effect.