Privacy Policy

1. Core Privacy Commitment

Agentium Trace ("Trace", "we", "us") is developed by Agentium Labs. Research is stored locally first. We do not sell your browsing research. If you explicitly enable cloud sync, Trace uploads your trails, URLs, titles, notes, highlights, parent relationships, stars and dwell times to your private account vault. Publishing a cloud link makes the selected snapshot available to anyone who has that link. Notes and highlights are excluded from new links by default.

2. Data Stored Locally

The extension stores research in local IndexedDB. Authentication credentials use trusted local extension storage, not Chrome Sync. The web library saves unsent drafts in this browser, scoped to your account. Signing out hides account-owned research; uninstalling the extension removes its local data but does not delete cloud copies. Export important research before removing local storage.

3. Browser Permissions Requested

Trace requests the minimal set of Chrome permissions required to perform its function:

• sidePanel:To render the interactive research visualizer inside Chrome's native Side Panel without intrusive popups.
• tabs: To observe tab creation events (parent-to-child links) so that the causality tree can be constructed in real time.
• storage: To persist research settings and trusted local authentication state.
• identity: To complete optional account sign-in using PKCE.
• alarms: To resume optional cloud synchronization after background worker suspension.

4. Third-Party Services and Analytics

The Agentium Trace extension contains zero third-party advertising SDKs, tracking pixels, or session replay libraries. No analytics data is transmitted while browsing.

5. Deletion of Data

You may clear your research history at any time using the "Clear Session" button in the extension interface. Uninstalling the extension immediately and permanently removes all locally stored graph data from your device. Delete cloud trails from your web library to remove their active vault copies and revoke associated cloud links. Cloud account deletion removes active vault data, mutation receipts and shares; a minimal identity record prevents queued devices from recreating a deleted account. Backup copies expire under the operational backup retention policy. Portable links embed their data in the URL and cannot be recalled or revoked.

Cloud security and service providers

Cloud research uses TLS in transit and provider-managed encryption at rest. This is not end-to-end encryption. Account access is enforced by the API. Auth0 processes sign-in; Paddle and our billing service process purchases and plan entitlements. No payment-card details are stored in your research vault. Trace library and sharing pages do not load analytics or session replay.

6. Contact Information

For any questions regarding this Privacy Policy, please contact us at:
care@agentiumlabs.com